Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/40146F80BF9011F190E01D7C4811F970.roa
File:                     40146F80BF9011F190E01D7C4811F970.roa (raw, json)
Hash identifier:          mnH1V7+qhYnpsBiEZJWOV/9HnEmBR8CdBJisx6vAVKs=
Subject key identifier:   75:F7:59:22:BE:AC:D3:7C:34:60:10:B9:CB:B4:B7:54:A4:24:EB:7B
Certificate issuer:       /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Certificate serial:       0776
Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/40146F80BF9011F190E01D7C4811F970.roa
Signing time:             Sun 04 Oct 2026 01:09:30 +0000
ROA not before:           Sun 04 Oct 2026 01:09:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141034
IP address blocks:        2402:53a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
                          rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
        Validity
            Not Before: Oct  4 01:09:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac1a74a-2aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:6b:95:84:57:ce:98:38:63:43:94:41:86:
                    a6:1b:b0:22:a1:72:52:a2:10:6c:38:0c:b6:31:64:
                    6d:cd:93:11:62:13:44:c7:9a:fe:95:9c:cf:c8:72:
                    6c:46:3f:cd:55:76:ff:fb:42:29:80:dd:84:48:7b:
                    49:a5:e5:d0:c8:05:b6:0a:52:db:d5:69:1f:7e:99:
                    f8:ea:1f:c2:8a:14:86:f4:c0:ed:a3:62:de:2c:cc:
                    0d:82:2f:76:6c:25:f5:fe:c0:10:90:f7:a0:4d:1b:
                    ad:64:cd:07:19:67:c4:db:30:69:61:fb:a1:68:69:
                    ba:13:7c:b4:54:d3:9c:10:73:87:ad:76:0f:d7:ac:
                    01:76:97:5b:df:0c:cc:01:cd:44:9f:39:62:2e:1b:
                    5b:ff:03:8b:5b:86:48:2f:ff:3c:f3:31:02:8f:7b:
                    9f:62:8d:26:9c:ef:2e:fa:c8:3e:ea:be:18:16:a5:
                    3a:99:04:3c:12:61:d2:36:3d:2a:75:de:db:b0:c0:
                    f7:20:85:10:1b:cb:9f:37:ea:1c:14:bf:e6:0a:f5:
                    94:df:7c:92:e2:81:f6:b3:50:38:83:a5:b8:26:fa:
                    30:f9:88:99:39:05:78:4b:63:12:f0:7b:4d:fc:bd:
                    fb:74:13:ee:f0:40:64:08:26:14:3e:dd:37:ba:62:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F7:59:22:BE:AC:D3:7C:34:60:10:B9:CB:B4:B7:54:A4:24:EB:7B
            X509v3 Authority Key Identifier:
                keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/40146F80BF9011F190E01D7C4811F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:53a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:44:f8:8a:8a:0a:29:b6:d9:59:91:0e:2f:b2:ec:41:90:9e:
         e0:f9:ac:87:f6:fd:ee:2c:fd:c9:17:c2:d7:09:ba:ba:21:df:
         e5:ee:19:23:42:5f:b2:36:96:a3:9b:12:8d:65:01:6a:4e:00:
         62:a6:bd:be:c9:0a:05:42:80:b9:f0:c8:1f:4b:4d:b7:61:11:
         28:37:e1:4d:db:3c:0b:f6:50:b8:94:b2:fa:1e:c7:ad:4e:aa:
         7c:52:3e:a1:0d:7e:1b:5d:c3:bc:18:d5:85:09:3f:f3:83:d3:
         49:6d:85:d5:2a:8c:8f:dd:e8:da:c1:a4:bc:89:76:1f:45:a3:
         d8:a7:c4:fa:ba:e4:6d:c5:39:cb:b7:89:81:a0:86:e9:28:64:
         1c:12:f2:59:a3:52:38:7c:ae:02:c6:cc:73:0e:f5:01:68:81:
         c3:8e:69:96:03:dd:9e:19:3e:d6:ea:2e:32:9b:2d:db:f1:d0:
         73:81:b7:57:c6:c4:df:f8:e7:75:a4:9a:30:ee:69:5d:ee:4a:
         67:88:06:d3:b0:cb:35:a1:af:68:ee:82:c1:ac:4e:62:22:26:
         17:ef:dd:63:6a:7f:b9:b7:9e:ce:39:cf:3f:d9:f1:3f:ab:fb:
         18:e9:e3:ef:1f:2b:86:bb:a1:51:fc:4e:fc:64:54:df:9d:dd:
         02:5b:db:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:25:31 2026 by rpki-client