Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/F5B633B2283411F1B1D7DF7FCA833773.roa
File:                     F5B633B2283411F1B1D7DF7FCA833773.roa (raw, json)
Hash identifier:          NbyI7KrlbmFRIzpwKLH61+A9J/r7MmWiby176b3GguY=
Subject key identifier:   9E:CD:D2:B4:1B:23:41:97:5B:B8:CD:82:93:38:1A:D2:28:71:EC:DD
Certificate issuer:       /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial:       141C
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/F5B633B2283411F1B1D7DF7FCA833773.roa
Signing time:             Mon 12 Oct 2026 17:32:47 +0000
ROA not before:           Mon 12 Oct 2026 17:32:47 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     152479
IP address blocks:        2403:8840::/33 maxlen: 33
                          2403:8840::/48 maxlen: 48
                          2403:8840:1::/48 maxlen: 48
                          2403:8840:2::/48 maxlen: 48
                          2403:8840:3::/48 maxlen: 48
                          2403:8840:4::/48 maxlen: 48
                          2403:8840:5::/48 maxlen: 48
                          2403:8840:6::/48 maxlen: 48
                          2403:8840:7::/48 maxlen: 48
                          2403:8840:8::/48 maxlen: 48
                          2403:8840:9::/48 maxlen: 48
                          2403:8840:a::/48 maxlen: 48
                          2403:8840:b::/48 maxlen: 48
                          2403:8840:c::/48 maxlen: 48
                          2403:8840:d::/48 maxlen: 48
                          2403:8840:e::/48 maxlen: 48
                          2403:8840:f::/48 maxlen: 48
                          2403:8840:10::/48 maxlen: 48
                          2403:8840:11::/48 maxlen: 48
                          2403:8840:12::/48 maxlen: 48
                          2403:8840:13::/48 maxlen: 48
                          2403:8840:14::/48 maxlen: 48
                          2403:8840:15::/48 maxlen: 48
                          2403:8840:16::/48 maxlen: 48
                          2403:8840:17::/48 maxlen: 48
                          2403:8840:18::/48 maxlen: 48
                          2403:8840:19::/48 maxlen: 48
                          2403:8840:1a::/48 maxlen: 48
                          2403:8840:1b::/48 maxlen: 48
                          2403:8840:1c::/48 maxlen: 48
                          2403:8840:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
                          rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 16:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5148 (0x141c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
        Validity
            Not Before: Oct 12 17:32:47 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6acd19bf-c88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:2c:00:b2:bd:49:ab:be:94:93:ef:cf:8a:
                    88:f3:f5:81:3d:2f:ca:c9:4c:7c:e3:23:c2:2c:b1:
                    45:34:1b:54:76:07:3c:c7:4a:43:11:9b:30:f5:b4:
                    e2:66:86:62:74:f4:ce:63:41:59:0b:96:64:2a:26:
                    37:f5:ef:24:1b:1a:3d:f5:66:e9:31:d7:00:3a:fc:
                    94:9f:3d:1b:83:66:29:f1:ce:32:4e:72:ca:cb:fd:
                    8c:9e:c5:e0:55:2e:71:96:5d:fe:61:c6:b2:fb:de:
                    1d:b9:13:02:f1:6e:10:7b:bb:d8:cc:5e:c2:ee:5e:
                    37:a2:e6:9c:23:66:06:0b:83:ba:01:4e:c2:ad:79:
                    f5:ab:d1:68:cc:9b:32:4e:36:a5:97:10:8a:22:cd:
                    57:9a:66:82:14:ae:b0:77:a8:50:9e:b5:20:c9:44:
                    0a:72:77:94:c2:72:3d:59:a7:c2:04:aa:72:4e:da:
                    07:3f:bb:15:85:22:22:8d:28:ab:51:78:81:cb:2d:
                    2e:aa:1c:df:77:eb:d1:6f:25:1e:08:71:ac:48:9b:
                    4d:0f:bf:00:09:d7:19:b9:f2:d9:5e:09:0f:dd:9e:
                    02:2f:2e:31:1b:97:99:a5:99:16:55:6e:56:34:9d:
                    5b:d1:da:f2:4f:b1:a6:7b:1c:03:21:5a:6d:e7:c7:
                    6f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CD:D2:B4:1B:23:41:97:5B:B8:CD:82:93:38:1A:D2:28:71:EC:DD
            X509v3 Authority Key Identifier:
                keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/F5B633B2283411F1B1D7DF7FCA833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8840::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:01:e3:d0:cc:03:98:48:1d:ed:e7:f9:de:84:08:61:7e:1d:
         09:bf:42:24:32:28:00:08:51:64:03:f3:c8:16:6f:c1:54:e7:
         7c:08:dd:fd:a6:69:1c:d2:80:36:a1:7d:0a:53:1b:df:9d:17:
         c3:6a:28:7f:3b:a1:19:22:a2:a2:c7:2c:7c:87:1c:df:8d:9b:
         85:d7:c0:f5:1c:0c:ba:ad:9c:1e:5f:57:61:bb:8a:24:3c:84:
         8e:da:1b:d0:33:55:aa:3c:5a:bb:ce:8e:c1:c8:8d:3a:f5:4f:
         af:31:b4:0f:1d:23:9a:38:3b:05:9c:f7:3c:18:ad:4a:d3:6d:
         94:af:57:74:43:1e:ea:93:b2:b5:5f:ed:55:33:c2:4a:80:3a:
         eb:23:03:bb:4d:70:f0:90:cc:38:b6:b7:b2:d2:4e:d4:c9:be:
         d0:3f:ec:c1:9e:35:e1:83:93:fc:4c:1f:5d:da:74:3f:0c:9f:
         09:6f:5c:ec:fe:d7:ed:4c:af:cf:4d:5d:3f:c1:60:c2:75:93:
         f4:de:a4:b2:f2:2d:6b:94:3a:ed:ab:39:b3:cb:4a:a8:10:e3:
         c7:e6:8b:b7:d5:c1:bc:a1:5a:fe:ac:92:c1:d2:54:ea:01:c2:
         39:2d:29:09:f0:f3:a1:d5:0e:be:62:37:89:4d:4b:41:7f:79:
         52:b5:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 18:34:02 2026 by rpki-client