Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/E5D570A699A011F191D9C4ED6E11F970.roa
File:                     E5D570A699A011F191D9C4ED6E11F970.roa (raw, json)
Hash identifier:          8Y+XAwfwrJgI3QCe0larDwfJRotuGixvON+EExk7AV4=
Subject key identifier:   A0:15:18:69:8E:71:EC:E0:77:C4:3F:78:E5:09:D1:FC:62:23:8F:1F
Certificate issuer:       /CN=A915FB34/serialNumber=1D92E363F9A9BB24DE7856471EE841F1DC8DC903
Certificate serial:       02
Authority key identifier: 1D:92:E3:63:F9:A9:BB:24:DE:78:56:47:1E:E8:41:F1:DC:8D:C9:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/E5D570A699A011F191D9C4ED6E11F970.roa
Signing time:             Sun 16 Aug 2026 18:32:56 +0000
ROA not before:           Sun 16 Aug 2026 18:32:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154484
IP address blocks:        2001:df6:b140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl
                          rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB34, serialNumber=1D92E363F9A9BB24DE7856471EE841F1DC8DC903
        Validity
            Not Before: Aug 16 18:32:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a820257-7eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:59:14:27:c1:84:77:8d:f9:be:e6:72:67:
                    9c:94:bf:be:43:80:09:3c:ae:56:83:54:65:2a:9e:
                    73:31:82:be:00:da:60:e9:2b:b8:0f:e7:5a:5e:e2:
                    5d:88:0d:6f:3a:94:9d:15:c0:fc:3f:78:6a:86:5b:
                    ac:96:84:56:68:68:bc:73:27:33:bf:42:7c:06:39:
                    e4:1a:53:30:f7:0a:fc:9d:1e:87:32:8a:f4:a9:18:
                    3e:d5:e2:12:d8:69:0f:0d:d4:65:91:53:16:b0:cd:
                    c2:18:19:12:dd:69:58:b9:ab:f1:e7:d5:e4:0b:0d:
                    82:3f:e4:78:34:60:a6:94:cc:2c:c3:c3:32:b5:04:
                    3a:db:af:95:e8:38:27:e2:18:94:28:87:47:47:c2:
                    59:95:7f:a2:09:4e:3d:32:b7:d8:cb:3c:59:5a:3c:
                    f3:cf:2c:c9:ae:e1:56:c7:e3:f3:ec:22:d4:69:c8:
                    12:65:ce:96:e9:e1:ee:64:92:3b:e9:52:f4:70:e2:
                    ab:d7:8d:e7:e9:1c:e3:67:3a:bf:14:71:ee:23:d0:
                    e2:6b:a7:a6:47:54:fa:c5:03:c7:d4:ac:e7:60:a5:
                    f1:a3:ff:9a:8d:f4:b5:c3:5a:a6:b9:bc:93:19:54:
                    c6:b5:82:1e:23:98:93:86:90:11:07:d3:8a:fc:50:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:15:18:69:8E:71:EC:E0:77:C4:3F:78:E5:09:D1:FC:62:23:8F:1F
            X509v3 Authority Key Identifier:
                keyid:1D:92:E3:63:F9:A9:BB:24:DE:78:56:47:1E:E8:41:F1:DC:8D:C9:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/HZLjY_mpuyTeeFZHHuhB8dyNyQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HZLjY_mpuyTeeFZHHuhB8dyNyQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB34/3DBD181099A011F1A4ECD2AD6D11F970/E5D570A699A011F191D9C4ED6E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:b140::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:56:87:1e:48:c1:26:59:8d:fb:6f:09:a3:40:2a:b7:f2:
         43:1c:f4:34:e4:d3:f5:ab:b0:7c:94:d9:7c:a9:91:51:c4:a3:
         3f:68:da:b9:29:b1:d1:c7:83:87:cd:00:a4:fd:10:33:81:56:
         f2:f4:ab:86:98:73:35:a1:cc:d7:58:59:cc:56:c9:bb:05:bf:
         15:d3:50:23:3f:c2:ad:a4:3c:76:c9:6d:e9:07:51:4d:14:e6:
         22:4c:3f:5c:92:8a:18:bc:7e:07:08:6a:5e:7f:d7:e7:a0:b8:
         e4:7d:60:7a:82:63:98:99:2c:0e:d7:1f:e4:e3:15:8c:ea:95:
         05:23:b0:91:8d:5b:c2:40:ea:c6:75:a3:cc:cf:0f:bb:68:81:
         14:bf:d6:18:76:a5:9d:10:f2:76:30:bd:bd:79:61:7a:a2:3d:
         d1:73:38:5a:5d:73:87:9d:89:67:86:dd:57:e8:c1:99:bb:f6:
         ca:18:62:c9:df:96:49:bc:13:9e:3d:89:8a:18:33:36:1c:6d:
         d1:34:14:90:05:50:47:cc:39:36:07:2c:6a:28:67:3d:2e:d7:
         c5:2e:77:7a:aa:c2:96:65:49:1d:08:67:54:dd:04:f0:d8:c3:
         10:73:e8:dd:5b:d8:8d:76:10:4e:7f:18:6d:79:f3:95:60:30:
         65:66:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:07 2026 by rpki-client