Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/FF8ED6FA979211F1B1FF570F5011F970.roa
File:                     FF8ED6FA979211F1B1FF570F5011F970.roa (raw, json)
Hash identifier:          Lh2K/wF9t2esCreJupluX3wR+8TGZ0wv94ej3vVe05c=
Subject key identifier:   E5:C7:EA:A6:FA:1D:92:6E:56:26:5A:B3:9D:87:D7:FE:2A:D4:05:E9
Certificate issuer:       /CN=A91731A3/serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0
Certificate serial:       02
Authority key identifier: CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/FF8ED6FA979211F1B1FF570F5011F970.roa
Signing time:             Fri 14 Aug 2026 03:48:23 +0000
ROA not before:           Fri 14 Aug 2026 03:48:23 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     153891
IP address blocks:        2402:ae0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl
                          rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 09:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731A3, serialNumber=CDFA5BC20E312919AC6B1ECAD92B71E734A600B0
        Validity
            Not Before: Aug 14 03:48:23 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a7e9007-db28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:f9:fb:cb:38:86:80:00:65:f8:7b:2e:24:
                    f5:3f:3f:e6:10:87:06:f5:81:41:31:97:b5:73:da:
                    3a:56:d7:2d:8d:11:06:53:d1:a6:32:17:37:67:f1:
                    60:9c:6c:63:d7:e9:b5:20:6c:2e:14:2c:f1:2a:27:
                    d6:8c:04:cc:a2:86:83:21:77:7d:1f:ad:6e:0a:52:
                    05:b1:5d:d4:d8:1d:bc:01:8b:ba:dc:a6:eb:22:ad:
                    42:26:24:b1:c4:49:90:c6:d8:c3:a5:4f:34:89:ee:
                    c5:2f:90:75:84:1d:c8:1a:54:9a:6d:f3:9e:34:09:
                    0c:93:d1:dc:91:d5:54:fb:5f:90:1c:9e:2f:ae:72:
                    cf:d5:8c:82:83:72:b2:3b:ae:b4:ed:d0:b4:48:45:
                    d6:f3:eb:c6:da:1c:84:bf:56:8f:a4:8d:19:04:4e:
                    a3:1a:bc:1f:3c:9d:58:bb:00:33:e1:0d:2e:98:7d:
                    33:09:a8:11:8c:88:dc:a9:fb:f0:e4:cb:6a:87:18:
                    8f:f8:ce:f8:e8:52:27:a5:cf:40:0f:0a:92:f8:23:
                    76:89:f3:8f:d7:4e:80:e3:59:0f:13:8e:89:94:b7:
                    0e:94:57:28:c7:21:d4:d6:26:63:33:e5:80:cc:a7:
                    b1:82:8a:a4:a6:10:f0:eb:8b:e5:a7:87:e4:e6:bb:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:EA:A6:FA:1D:92:6E:56:26:5A:B3:9D:87:D7:FE:2A:D4:05:E9
            X509v3 Authority Key Identifier:
                keyid:CD:FA:5B:C2:0E:31:29:19:AC:6B:1E:CA:D9:2B:71:E7:34:A6:00:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/zfpbwg4xKRmsax7K2Stx5zSmALA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfpbwg4xKRmsax7K2Stx5zSmALA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731A3/9FA1B302979211F1B42547EC4F11F970/FF8ED6FA979211F1B1FF570F5011F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:83:61:ce:69:2a:7d:54:33:19:9e:c4:69:7a:66:22:65:2c:
         94:30:f3:6f:a1:88:85:1f:c7:5c:0b:8d:85:90:53:77:18:5c:
         dc:a1:e7:5c:91:c9:65:4c:af:d8:cc:d4:f0:9f:0c:c0:5f:97:
         05:73:a4:b5:ed:a8:76:b8:af:31:1e:ed:6f:3c:42:0e:20:f4:
         c9:57:7f:4b:98:f6:61:17:a0:dc:1a:31:02:c0:08:e6:28:24:
         92:53:f4:ca:d6:4c:f5:ac:2c:aa:05:b3:b7:3b:ab:ba:04:5a:
         4b:49:50:04:3f:69:e4:82:b6:39:9d:24:ff:a1:c7:9d:49:42:
         bc:90:bb:a0:6c:4e:d0:35:ae:d1:85:b1:13:8b:63:e0:1e:cf:
         1d:56:da:b7:04:7a:2b:f4:cd:f1:95:f9:68:46:d6:b6:53:20:
         a0:a9:12:8d:93:7a:72:b5:0c:20:a3:85:05:9e:c5:71:f9:9c:
         32:e0:c4:6e:3a:0e:55:13:d9:44:a8:64:34:13:29:d0:00:63:
         a0:0d:95:29:bb:a7:86:92:c2:5b:e7:d3:ad:0f:26:f1:e2:26:
         3b:c3:b8:62:6b:fa:a2:d5:bb:0e:dd:a2:dc:bc:29:e6:a2:44:
         a3:50:1d:89:02:77:2b:7a:c5:f0:19:80:01:8c:e4:50:f4:05:
         b3:88:44:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:56:36 2026 by rpki-client