Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/A4C79D56915C11F1B31E34186B11F970.roa
File:                     A4C79D56915C11F1B31E34186B11F970.roa (raw, json)
Hash identifier:          txZBE76GyRH2FzSb4nahHUjabcAmRenCXZB0dWzn970=
Subject key identifier:   ED:47:A8:73:05:7D:87:50:8E:0A:98:62:64:D6:38:6C:A3:91:2B:C0
Certificate issuer:       /CN=A917BAC9/serialNumber=44FBC55DCDD2A8427D4F78F8140484A26E527790
Certificate serial:       02
Authority key identifier: 44:FB:C5:5D:CD:D2:A8:42:7D:4F:78:F8:14:04:84:A2:6E:52:77:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/A4C79D56915C11F1B31E34186B11F970.roa
Signing time:             Thu 06 Aug 2026 06:04:11 +0000
ROA not before:           Thu 06 Aug 2026 06:04:11 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154811
IP address blocks:        2001:df7:5540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl
                          rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC9, serialNumber=44FBC55DCDD2A8427D4F78F8140484A26E527790
        Validity
            Not Before: Aug  6 06:04:11 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7423db-f12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:58:e1:8b:36:21:6c:0e:6d:b6:0a:63:dc:
                    22:14:bf:67:4f:0f:f1:b2:d3:a5:f6:7b:c2:1e:4b:
                    4a:3e:15:e8:99:78:63:71:ba:e9:a8:32:6d:a2:9e:
                    d7:5f:c9:47:08:e4:b7:08:e9:38:f2:56:aa:8e:8d:
                    69:df:7e:29:b8:c1:f7:d0:75:d4:d8:a0:cd:bd:f7:
                    f8:0d:b7:b5:97:c9:44:6d:66:be:db:d9:f8:c9:51:
                    f0:50:dd:52:f8:22:c8:93:10:2c:a5:36:2a:99:21:
                    3f:92:e1:f7:7d:31:3d:a6:b9:04:00:57:4f:96:59:
                    6c:bd:0b:ca:e5:7d:ea:3d:79:4d:d1:5a:63:62:ed:
                    97:19:fd:cc:32:79:31:19:f7:b8:c4:56:2c:99:4c:
                    47:d3:36:df:ae:fa:9e:d5:0f:68:01:54:00:0c:1a:
                    f0:e3:c9:b6:34:10:de:85:6e:9d:82:ba:18:50:37:
                    c2:6d:6e:0c:ae:8c:ba:32:f7:ab:31:49:d2:ec:26:
                    24:39:35:59:e7:52:a1:34:dc:63:1d:ea:41:a7:1c:
                    11:40:63:d5:a8:f3:c2:0d:5e:90:f7:22:36:bf:b6:
                    93:7f:70:ad:ad:e3:02:e3:06:84:81:6f:53:73:a2:
                    f1:e7:04:dd:5c:1b:b9:d1:0e:f9:69:c4:09:99:7c:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:47:A8:73:05:7D:87:50:8E:0A:98:62:64:D6:38:6C:A3:91:2B:C0
            X509v3 Authority Key Identifier:
                keyid:44:FB:C5:5D:CD:D2:A8:42:7D:4F:78:F8:14:04:84:A2:6E:52:77:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/RPvFXc3SqEJ9T3j4FASEom5Sd5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPvFXc3SqEJ9T3j4FASEom5Sd5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC9/8EB6E5AC915811F1860E7F456A11F970/A4C79D56915C11F1B31E34186B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:5540::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:c6:2f:ef:58:2b:07:13:dd:d1:fa:7e:7e:71:48:47:2a:
         e0:c5:f2:6e:03:a8:28:ce:80:a9:d2:90:0c:8b:3e:e0:82:06:
         89:93:5e:a9:a8:f2:f8:b9:29:4e:ab:28:ff:25:56:7a:4d:68:
         4d:06:56:3b:89:7c:a4:48:86:f1:f5:e7:76:ed:7b:1d:d4:b4:
         8b:3c:aa:c0:23:8e:82:af:1f:0e:93:cc:d2:a5:fa:dd:42:d2:
         6b:d7:b2:15:1b:68:8b:f2:b9:e9:71:82:c6:b3:09:a5:6c:f4:
         3f:a7:38:57:38:f4:39:34:3c:f5:41:64:06:e6:c3:ca:db:22:
         09:64:14:f4:ef:d8:2a:a9:d8:04:27:a2:44:c8:a1:11:5a:ea:
         be:86:d2:bb:77:2d:90:ff:15:88:59:af:64:5d:55:f6:47:e3:
         2c:82:6a:ce:a0:be:03:79:ce:0a:2a:91:3f:73:fe:4f:9f:b9:
         56:0d:39:b9:b8:3d:0a:95:e2:8a:89:3c:9a:a4:dd:d3:f8:db:
         b0:ee:6a:65:a8:6f:b2:fe:22:4d:17:c8:9d:de:e5:2e:87:b2:
         c0:1a:37:3d:b7:18:fa:0c:4b:b8:ae:ed:13:bc:45:e6:df:69:
         c5:2a:d1:cc:60:7c:0c:15:9f:c9:6a:88:6f:01:e4:b8:ae:e0:
         5a:e5:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:32 2026 by rpki-client