Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/2E91B188D2E011F1A52EACC50E66CEF9.roa
File:                     2E91B188D2E011F1A52EACC50E66CEF9.roa (raw, json)
Hash identifier:          A2Q8TkEotUvlDQq1bQxbDxLsZN7j/XiTy2FHWVuCe3c=
Subject key identifier:   AC:D8:46:D8:AF:52:35:0F:11:28:70:59:F6:05:E6:19:8A:69:88:80
Certificate issuer:       /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial:       08F6
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/2E91B188D2E011F1A52EACC50E66CEF9.roa
Signing time:             Mon 02 Nov 2026 21:39:29 +0000
ROA not before:           Mon 02 Nov 2026 21:39:29 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     133033
IP address blocks:        2404:3881::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
                          rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 21:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
        Validity
            Not Before: Nov  2 21:39:29 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ae90311-f8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:17:6f:26:42:60:73:ab:88:05:96:b0:38:74:
                    b3:41:04:85:a3:b7:97:03:45:8a:cd:67:ec:12:08:
                    15:95:07:b8:61:1d:99:fa:74:38:9e:39:ec:68:3f:
                    cc:8d:1f:a0:5c:7d:79:dc:12:b2:18:68:d5:8c:1d:
                    49:82:f8:55:06:85:1d:6c:51:7a:1d:90:f9:c1:6e:
                    4a:5d:fb:5a:53:4c:ed:09:29:4f:0f:15:6d:1d:ea:
                    01:11:7d:86:fa:11:28:ae:af:24:c4:83:87:af:aa:
                    ba:76:18:5d:37:ff:89:2f:ba:d2:29:29:81:92:51:
                    51:21:f5:f1:dc:0a:b9:a5:6d:d5:97:43:bf:0c:5b:
                    93:83:63:18:a3:ac:5f:a3:68:23:a9:d6:b0:6d:81:
                    45:4b:c0:53:95:7b:93:a7:f9:cf:6b:83:ba:7a:9d:
                    6e:c7:d1:d4:3d:6d:9b:02:33:b1:97:d1:1b:02:9f:
                    49:8a:02:76:f1:12:81:ec:08:8e:b5:22:bd:c3:ee:
                    ee:ec:c8:f6:8c:e0:07:d7:83:8f:79:66:02:7d:77:
                    1a:cd:47:c5:44:81:c0:02:d7:ed:47:6a:78:08:38:
                    d7:04:0a:aa:95:ae:08:60:9d:f8:24:e9:3e:c0:97:
                    0d:5a:6b:68:ef:f3:6a:02:48:c5:56:50:ee:c5:c3:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D8:46:D8:AF:52:35:0F:11:28:70:59:F6:05:E6:19:8A:69:88:80
            X509v3 Authority Key Identifier:
                keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/2E91B188D2E011F1A52EACC50E66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3881::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:26:14:01:f9:84:c6:5f:dd:1b:a6:3a:bf:65:af:9c:92:
         55:76:16:b1:86:8b:1b:d0:7e:ea:56:73:4f:f7:a3:3d:4d:06:
         2e:fc:cb:68:a8:a7:52:a5:d2:03:07:a9:06:99:e4:bb:94:2f:
         51:a0:ef:2b:bc:a8:e3:74:ef:7d:fa:a5:7c:a7:b7:e8:6c:e7:
         10:e3:7f:03:5b:ef:d8:57:51:f6:3d:28:26:db:c6:e9:50:06:
         90:25:97:68:b8:53:f6:67:94:e1:b7:f5:ee:8e:cf:11:10:9d:
         2f:66:61:74:3e:5b:cb:ac:b9:a5:bc:24:93:8e:b4:29:4c:67:
         93:66:7d:97:47:8f:18:29:5c:30:c4:ee:89:6c:29:6e:bb:82:
         07:11:31:90:11:88:a3:b2:df:9c:2c:51:d2:4e:bf:87:17:5c:
         12:0b:b4:fa:e9:8d:00:b5:a7:31:37:e6:c2:e8:b9:cb:1a:ff:
         d4:ec:f5:da:cd:1f:60:55:e3:05:f8:e4:1c:50:4b:6a:31:5d:
         44:fc:76:33:87:8a:d8:3c:cc:bd:c0:eb:80:1c:73:18:b8:84:
         71:9f:e4:be:16:2d:33:90:29:6c:9d:db:a3:7e:e3:35:16:b3:
         5d:f1:5a:66:61:f7:33:ad:13:72:18:2b:aa:03:c5:43:2f:80:
         cf:d4:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:25:25 2026 by rpki-client