Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/6BB66614922E11F1A0FBFE5C6C11F970.roa
File:                     6BB66614922E11F1A0FBFE5C6C11F970.roa (raw, json)
Hash identifier:          mCT+YqSEAXN3Qz20/1loqK5VGh0Yd2JbQFmwVbOtvZk=
Subject key identifier:   A1:C1:49:94:58:C6:7B:40:72:76:D1:AC:BF:BF:40:C9:64:C4:BC:94
Certificate issuer:       /CN=A917A689/serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78
Certificate serial:       14
Authority key identifier: EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/6BB66614922E11F1A0FBFE5C6C11F970.roa
Signing time:             Fri 07 Aug 2026 07:05:50 +0000
ROA not before:           Fri 07 Aug 2026 07:05:50 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153874
IP address blocks:        2001:df7:6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl
                          rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A689, serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78
        Validity
            Not Before: Aug  7 07:05:50 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a7583ce-536d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:38:cf:d0:49:59:3f:af:24:eb:e4:28:5d:
                    0f:26:81:25:b7:8a:e9:d1:4f:25:bc:7e:f3:92:97:
                    c5:91:f7:2f:5b:c1:ac:ee:3d:48:7c:9b:08:8c:a8:
                    68:9c:84:07:3a:5e:cb:37:cf:78:a5:ee:97:02:e2:
                    91:87:15:2f:0e:16:a4:7b:a2:e3:67:29:50:28:1f:
                    cf:25:ed:a6:99:0e:30:ea:21:10:2f:08:45:74:66:
                    82:46:d9:56:68:16:75:50:1c:a6:c4:c0:f5:2a:80:
                    21:3f:72:54:44:2c:b8:33:e1:07:54:b3:02:9b:44:
                    da:d6:f7:95:e1:15:e0:f9:b0:93:10:dd:71:53:af:
                    a7:7b:21:21:94:af:92:d3:6a:af:07:be:48:b2:26:
                    b8:49:1c:13:5e:fc:dc:a6:79:63:f4:fb:f8:ff:a8:
                    f7:e7:b4:82:df:10:6e:8c:7d:34:11:5f:93:ae:01:
                    e5:55:a5:a3:db:0d:51:0c:c2:1e:d2:d0:b8:01:b3:
                    b8:8a:4b:b8:a2:cd:b0:28:ae:69:cf:8e:b5:dc:b0:
                    87:30:25:db:73:25:e4:20:28:8e:01:7a:ff:c6:65:
                    24:85:d6:bc:cb:85:fa:0f:81:59:eb:e3:50:34:60:
                    88:f6:94:77:0a:10:40:04:0a:0f:84:b6:92:e5:f4:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C1:49:94:58:C6:7B:40:72:76:D1:AC:BF:BF:40:C9:64:C4:BC:94
            X509v3 Authority Key Identifier:
                keyid:EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/6BB66614922E11F1A0FBFE5C6C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:1b:b5:c3:da:ab:53:af:b1:78:5d:b5:e8:37:30:de:14:df:
         c4:2d:05:5e:fc:b1:88:81:b8:1a:86:21:94:f6:5f:bf:a8:fa:
         8b:5a:87:41:c1:c2:c3:16:b2:1a:71:7f:a1:c0:78:9c:80:a7:
         d5:1c:e5:cc:44:c8:1e:bb:40:02:c0:3d:77:34:3b:c0:7b:ba:
         cb:66:f8:0a:17:01:a7:8f:30:94:e6:f4:84:32:20:f6:64:11:
         7e:54:2e:8e:15:cb:2f:ac:4d:e2:1f:cb:e3:cc:1e:db:f6:d7:
         4b:b4:7f:ee:6d:7f:3a:e3:89:64:08:24:36:72:4e:2b:8f:52:
         2f:f2:8e:c3:d4:cf:77:74:97:8c:e2:73:41:de:2e:80:d0:6b:
         fc:55:e3:3e:4f:80:20:e4:5e:b9:81:7b:6a:71:58:0d:f1:f3:
         72:d4:57:92:55:a5:a8:74:ee:65:ce:af:18:ae:3a:5b:90:5c:
         a6:60:ce:4b:cc:db:fd:79:fb:6b:50:87:ae:18:66:d2:bf:1e:
         3f:2e:88:47:5a:0e:5a:a6:ad:f8:a0:5c:79:f4:2f:ac:da:42:
         7f:55:72:de:5b:af:c9:e6:b6:3f:eb:a7:e4:55:6e:86:76:b7:
         b5:3b:c0:6f:a0:97:32:7a:26:0d:d9:d2:10:61:c2:eb:67:c9:
         09:b6:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:00 2026 by rpki-client