Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/E19EC38C532711EF9E83C841C4F9AE02.roa
File:                     E19EC38C532711EF9E83C841C4F9AE02.roa (raw, json)
Hash identifier:          o+6ZDuPIrO5DnJqINIScEMsH1AtzfYFLtkRLVBpnBNo=
Subject key identifier:   09:BE:12:D6:B9:0A:49:A6:E1:EB:B1:4D:B2:20:7C:AA:54:B2:E7:CA
Certificate issuer:       /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial:       0249
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/E19EC38C532711EF9E83C841C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 03:52:07 +0000
ROA not before:           Wed 05 Aug 2026 03:52:07 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     1054
IP address blocks:        2401:1fe0:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl
                          rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 02:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA31, serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
        Validity
            Not Before: Aug  5 03:52:07 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a72b367-56a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:43:bd:15:3d:f7:3b:fb:4d:2e:4a:01:17:e8:
                    46:75:23:bd:e7:a3:df:b2:dc:97:fd:52:56:1f:1b:
                    67:9a:82:eb:c7:97:11:2e:16:e3:b9:2a:c3:80:89:
                    3e:90:3d:6f:5e:3b:4a:05:28:0e:19:71:f2:fc:97:
                    8f:eb:6a:e0:ae:18:11:f2:9c:74:f4:a3:95:8a:5c:
                    0a:64:f4:52:27:84:75:0f:dd:ba:38:04:fd:e5:80:
                    bd:55:74:6e:5b:67:e5:1a:2f:60:88:06:ad:37:39:
                    54:6f:ef:ea:61:4c:5a:0f:de:81:75:05:71:e0:d2:
                    d7:c4:7c:90:2f:5c:62:e4:26:27:66:47:ad:01:b6:
                    6a:83:b4:e2:7f:20:73:8d:d9:49:54:06:0d:98:56:
                    26:7b:29:41:fe:bf:c2:5a:d3:e9:91:9e:be:81:ae:
                    b3:18:2c:4a:19:48:90:ea:18:0b:de:9d:35:c0:4c:
                    e9:f3:81:17:6b:b3:64:d7:55:d6:3e:dd:ea:7b:cb:
                    b3:2c:ac:ce:3d:d7:61:6f:29:c2:c0:5f:e1:d5:cf:
                    cb:49:3c:fb:e1:90:bf:05:c8:b9:3f:d7:27:3c:f4:
                    b5:08:44:5a:03:e4:4d:50:0f:0c:6e:09:8c:d1:03:
                    12:4f:3f:8f:68:cf:e1:ea:30:2d:f2:fb:56:b8:0b:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BE:12:D6:B9:0A:49:A6:E1:EB:B1:4D:B2:20:7C:AA:54:B2:E7:CA
            X509v3 Authority Key Identifier:
                keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/E19EC38C532711EF9E83C841C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1fe0:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:ea:fe:1a:69:3d:fe:f2:9c:6a:cc:42:5d:53:64:c5:23:42:
         e6:32:81:00:1e:4f:70:52:50:08:b0:67:b4:9d:70:a8:b1:7f:
         2a:31:fb:96:1b:64:a3:bf:1f:37:c1:61:72:13:af:78:0d:0b:
         d0:ec:5f:c3:83:1f:0f:e0:23:41:5f:57:b3:e1:cf:d1:6f:a8:
         d9:1a:15:af:f2:4c:f7:29:d4:98:f4:89:69:24:b6:8e:cd:5f:
         37:f4:d7:c5:60:a9:80:08:e3:bd:c9:d5:db:38:0c:95:01:57:
         58:4d:a8:8a:39:71:2a:e8:5c:a2:7a:48:44:45:a4:dc:6d:2a:
         6a:31:b3:75:05:90:72:30:f8:d4:86:b2:74:c1:43:86:8a:72:
         ea:ba:e8:6f:9b:fd:19:9d:f8:7f:a6:62:a6:0b:99:bb:be:03:
         ab:a0:e8:9a:07:22:02:7d:3e:50:34:07:b1:b5:68:6a:37:98:
         64:24:2f:fd:9d:e9:21:16:c7:a5:4c:31:fd:dc:26:0a:35:49:
         d2:83:35:7f:fa:1b:7d:18:a5:db:a6:29:de:99:c5:40:95:f2:
         c3:ea:e5:b0:93:42:52:42:64:e1:ef:65:89:f4:6f:f6:13:37:
         3e:df:50:ba:51:26:c1:31:6e:f7:98:f8:0a:4b:54:7e:78:96:
         c7:11:13:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:44:14 2026 by rpki-client