Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/074C5C04644211EFA6AFE95CC4F9AE02.roa
File:                     074C5C04644211EFA6AFE95CC4F9AE02.roa (raw, json)
Hash identifier:          HjZ7t8kgpdJxOePYiWhvfCYqV48LdKYANpWFvHjvxbY=
Subject key identifier:   9D:D9:DA:7F:D9:25:E1:16:9C:B6:71:CE:26:E3:60:D2:5F:5A:31:00
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       086A
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/074C5C04644211EFA6AFE95CC4F9AE02.roa
Signing time:             Thu 02 Jul 2026 21:22:39 +0000
ROA not before:           Thu 02 Jul 2026 21:22:39 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132841
IP address blocks:        2001:df5:af00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 21:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Jul  2 21:22:39 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a46d69e-c3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:9c:81:04:65:76:b8:66:01:cc:35:c7:c7:
                    cb:dd:7a:45:44:73:53:44:31:d3:f1:c6:51:a6:e4:
                    3c:a7:39:39:90:6a:41:22:be:34:b9:a1:61:84:8b:
                    e1:e9:63:af:93:24:b3:51:91:9c:dd:19:9e:8e:e0:
                    34:1d:bb:43:06:1f:a2:f4:08:77:b2:d8:9e:6f:e5:
                    8b:a0:94:aa:c9:19:a4:c5:5d:cd:60:83:6f:91:f9:
                    43:01:3d:ce:b1:f6:91:15:ab:f1:08:b8:2f:67:bd:
                    77:14:88:8c:9c:dc:e4:99:8b:8e:93:69:a2:5e:37:
                    38:e7:b3:69:f3:28:17:2e:37:d8:54:c2:b4:a9:71:
                    98:f8:bd:56:04:70:91:67:e3:14:fa:80:c4:6c:12:
                    03:b1:0b:49:ca:fb:56:c1:dd:ca:bc:da:74:cc:32:
                    7b:69:7a:fc:d8:e1:37:5b:57:2f:0c:6f:37:26:ae:
                    0e:4c:67:88:d9:97:09:eb:1a:65:6c:ea:e8:c0:1c:
                    68:5b:6f:0d:af:6f:01:c9:c6:78:41:fc:eb:b1:29:
                    32:b8:26:a9:c2:6f:5e:68:eb:67:ec:65:8d:fa:7d:
                    6c:82:0e:39:14:99:df:c8:a5:4f:47:93:9a:33:66:
                    9a:e6:71:a0:de:ee:93:c9:3b:34:bd:cf:23:2e:b0:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D9:DA:7F:D9:25:E1:16:9C:B6:71:CE:26:E3:60:D2:5F:5A:31:00
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/074C5C04644211EFA6AFE95CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:af00::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:05:ce:21:fe:ab:ac:d3:10:62:b6:6c:8c:25:bb:1f:d9:7f:
         47:ff:57:07:06:e1:37:a0:83:be:47:c1:f9:72:91:ec:d7:a6:
         36:04:ec:01:cc:96:e4:b6:8d:d1:76:2a:0c:a7:de:e7:1e:60:
         e9:a1:6f:07:85:2c:bd:9b:85:1f:18:8e:65:cc:2a:a7:9f:03:
         5d:07:3c:32:15:6e:ef:10:fa:49:fc:f3:0f:25:43:f9:3e:9a:
         d5:15:33:d1:5f:8f:6f:96:12:a9:42:b3:35:cf:71:2d:50:45:
         05:f1:d0:27:5f:12:92:b4:9e:8a:37:3f:8a:ae:78:4c:f3:4b:
         49:74:84:a0:bc:64:29:67:63:23:8f:1c:d8:e8:42:d6:14:cd:
         5e:a8:64:35:97:f3:43:7d:9c:18:80:8a:74:5d:0c:cd:7c:f7:
         f8:3c:a4:0a:43:19:8c:2d:b4:6f:92:19:86:fd:c2:05:a2:91:
         70:82:ad:b1:d2:b6:f3:4a:32:6a:21:b5:0b:15:f4:8f:9e:97:
         c4:cb:2a:aa:c9:84:b7:c1:1b:5f:5c:8d:03:07:b7:8b:43:25:
         bc:c6:3c:5f:09:7f:23:df:81:2b:fd:c1:7b:37:2f:96:01:2f:
         02:e4:9c:0e:28:35:8d:b4:68:c1:2d:e8:b9:b0:36:8e:ac:ab:
         02:6b:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:22:31 2026 by rpki-client