Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa
File:                     854D304E0C9B11EC8433FE7AC4F9AE02.roa (raw, json)
Hash identifier:          Ab5UYVud2bNs5oNT54NbMqTkTRHIRZLylz4Z+NqHgPA=
Subject key identifier:   FE:BA:8A:F4:D1:A9:B8:88:96:3A:CD:8F:02:DF:BD:B6:60:67:59:2D
Certificate issuer:       /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial:       176D
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa
Signing time:             Sat 08 Aug 2026 17:30:20 +0000
ROA not before:           Sat 08 Aug 2026 17:30:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     394749
IP address blocks:        2404:6900:2012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
                          rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5997 (0x176d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
        Validity
            Not Before: Aug  8 17:30:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7767ac-ccbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:c6:28:22:45:b6:94:63:f1:3e:60:35:9a:
                    f8:b5:55:f5:21:08:8f:3e:42:06:4b:6d:84:f5:4f:
                    9c:09:06:b9:e7:2c:f9:fe:43:72:94:37:6f:b4:ba:
                    fb:ed:0d:25:87:e8:13:c6:36:3e:1a:80:38:f2:70:
                    63:3b:3b:f1:bd:5e:03:27:e7:d5:43:9c:7c:f4:ff:
                    9b:5c:c9:f2:1a:f0:9b:bc:71:47:83:6d:63:2f:55:
                    e1:61:4a:25:66:94:be:93:1d:d4:0f:5c:a5:02:28:
                    d8:aa:5f:c1:f6:a0:dc:46:a5:80:d9:53:fc:d1:d9:
                    26:2e:69:2c:b5:03:a6:8a:a7:f3:11:ad:e8:b2:8a:
                    09:56:19:20:98:95:84:14:c8:a6:da:98:cd:69:fd:
                    fa:2a:f6:6a:0e:18:d5:a0:05:64:c7:f2:41:56:a5:
                    37:9e:41:08:cd:b0:78:44:4b:39:8c:1c:d0:cd:60:
                    49:b5:d2:c5:65:ca:92:66:72:8a:9b:ad:53:e8:6c:
                    5e:61:c6:5b:0c:62:21:ab:9b:31:1e:57:ab:5e:7e:
                    08:c2:eb:85:62:85:14:5e:54:eb:6f:65:88:fb:56:
                    69:c7:15:cc:be:f8:a7:7e:8e:f5:92:54:c2:5d:b6:
                    5c:30:b2:5c:ce:43:aa:d0:83:31:ea:20:fe:dc:09:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BA:8A:F4:D1:A9:B8:88:96:3A:CD:8F:02:DF:BD:B6:60:67:59:2D
            X509v3 Authority Key Identifier:
                keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/854D304E0C9B11EC8433FE7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6900:2012::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:c6:25:fb:d2:a2:df:89:3f:2c:a2:16:77:4f:c7:d0:8d:04:
         7a:d6:c9:3e:31:d4:aa:51:15:89:55:23:4e:a9:d2:20:9d:33:
         45:5d:c7:49:19:c6:d5:ab:c9:26:f3:16:6e:6a:b0:4b:db:b0:
         35:3a:81:80:92:ab:c5:84:ac:57:fd:44:e8:ea:e0:78:60:f4:
         78:63:aa:29:16:ea:01:a1:6e:7c:da:95:ec:c4:10:c2:bf:f9:
         bf:51:7b:30:75:ba:bd:0b:ed:f4:e0:ef:be:ba:ea:8d:2a:96:
         5b:ab:5b:04:32:29:05:b3:ba:c6:49:8a:25:4e:7d:63:b0:fa:
         d3:68:5f:58:56:24:35:0a:e7:4e:d4:a3:c6:0e:8b:60:7d:30:
         9b:a7:42:0d:35:ee:bc:5f:95:04:7b:28:ab:a4:fc:9f:4a:2c:
         75:61:50:5b:04:a8:11:27:66:49:64:ea:7e:77:63:8d:a0:26:
         77:5d:35:e9:6e:18:06:01:32:fb:8b:f3:90:5b:49:34:72:f5:
         05:de:17:2e:25:b2:87:81:9f:1e:21:3a:d9:51:08:58:4f:3b:
         25:63:e4:f5:77:ea:7f:53:d1:8c:57:d4:80:1e:f0:d9:f3:5e:
         31:29:fa:51:87:a6:57:e9:f5:3c:2d:ab:6b:6b:d2:74:aa:88:
         0d:dd:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:31 2026 by rpki-client