Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/068953907C0411F1A78C011690A30FBC.roa
File:                     068953907C0411F1A78C011690A30FBC.roa (raw, json)
Hash identifier:          w5YjcHS/MK18ZP9iJMcSrCe3g3iEDBbEXUJzeIg9XZw=
Subject key identifier:   1B:35:E7:48:D8:2A:BB:9E:BB:B5:13:BF:E3:88:29:C0:6D:C2:7F:AD
Certificate issuer:       /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial:       07FA
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/068953907C0411F1A78C011690A30FBC.roa
Signing time:             Fri 10 Jul 2026 02:06:56 +0000
ROA not before:           Fri 10 Jul 2026 02:06:56 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     48274
IP address blocks:        2401:b480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
                          rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 22:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
        Validity
            Not Before: Jul 10 02:06:56 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a5053c0-3681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:6f:38:0b:33:7c:a5:37:3e:b1:3f:48:2e:
                    ef:64:84:67:e0:7a:12:5a:fe:93:8e:58:95:7e:05:
                    9b:df:d7:8f:d5:2a:bf:79:68:45:bd:0a:28:57:fe:
                    91:18:5d:c7:a9:a9:d7:7c:65:62:39:1c:90:1e:3f:
                    fa:5a:bd:26:3a:1e:2a:a1:c8:54:03:98:2b:cb:e4:
                    ba:cd:94:93:88:f4:5c:9e:d1:7a:7d:2b:b1:99:c6:
                    1c:d3:13:1e:0b:17:4f:4a:3f:60:23:53:f7:62:db:
                    88:50:cb:35:4f:2b:20:67:78:0a:31:97:92:a3:b2:
                    98:28:ce:60:25:f0:c7:9d:8f:7d:3a:1e:8f:20:dc:
                    19:87:a2:e2:c7:41:54:59:ca:5e:61:14:a4:db:d3:
                    b0:35:a2:6c:3a:b1:44:7a:37:e2:64:41:e4:52:a2:
                    33:7c:aa:e7:4c:51:c8:3a:84:30:6c:b2:8c:f0:a6:
                    f6:cb:15:b1:51:91:c4:69:b0:9c:0a:b3:b7:02:de:
                    5d:23:7f:86:15:3f:75:cc:2a:09:bf:92:53:75:74:
                    96:39:bd:fe:d7:8f:78:19:9a:d7:4f:63:68:81:63:
                    ba:bd:3b:01:20:52:76:cc:12:8a:39:1f:24:b9:c0:
                    7a:0b:a8:da:45:82:26:f8:63:b9:60:87:1c:bb:1c:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:35:E7:48:D8:2A:BB:9E:BB:B5:13:BF:E3:88:29:C0:6D:C2:7F:AD
            X509v3 Authority Key Identifier:
                keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/068953907C0411F1A78C011690A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b480::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:43:79:28:2f:57:e7:81:59:20:e7:70:0d:25:69:cb:39:e5:
         14:b4:0e:63:b3:5b:ef:62:eb:3c:02:fe:1a:1c:0e:ec:38:a3:
         6d:b6:e0:a6:c7:1a:67:e1:bf:e2:a1:e6:cc:22:89:3f:f1:e8:
         4d:84:11:b2:a5:3c:90:c9:11:82:4a:0b:19:59:46:6f:15:5e:
         b9:c2:bd:e6:94:c3:86:38:23:08:d3:b2:a6:85:58:8b:75:b3:
         cf:53:f9:1f:6a:cf:b0:fd:3b:49:e8:fb:09:ec:7f:62:34:dc:
         e4:eb:d8:76:a4:4f:69:d6:e8:5b:91:5a:a0:65:57:e9:a2:c5:
         8c:f5:5b:ba:c9:f0:f2:33:f8:0d:e0:d9:28:34:8e:12:b7:48:
         4b:d6:4c:6d:f3:20:2c:52:e6:6c:88:10:63:f9:70:c5:93:27:
         05:9e:8a:e4:58:db:42:c4:17:fb:d0:08:0f:e2:ea:a7:78:42:
         55:05:08:a4:96:d9:78:d4:cc:21:12:7d:4b:e5:46:4e:4f:7d:
         db:03:64:75:85:d9:72:52:6f:26:66:69:ae:68:90:06:b5:ea:
         cd:e7:d4:ac:a7:d0:5d:1c:73:55:67:d6:af:ef:32:6c:56:cb:
         86:00:75:6e:e8:b2:d5:9d:cc:10:69:a1:35:ba:77:d9:e5:fe:
         3a:63:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:30 2026 by rpki-client