Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/8DB4437A5B0C11F1A290872FAE833773.roa
File:                     8DB4437A5B0C11F1A290872FAE833773.roa (raw, json)
Hash identifier:          2h3y8zlQJ+5L/RD1VFOM8gQPQw1g78QSU956pQJuSJA=
Subject key identifier:   F0:94:FA:F7:37:53:FA:8F:1A:86:97:95:9E:73:1D:A8:2C:89:08:9D
Certificate issuer:       /CN=A91A26B4/serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
Certificate serial:       06
Authority key identifier: 94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/8DB4437A5B0C11F1A290872FAE833773.roa
Signing time:             Fri 29 May 2026 03:14:51 +0000
ROA not before:           Fri 29 May 2026 03:14:51 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154690
IP address blocks:        2402:5fa0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A26B4, serialNumber=94443098B8801FDAB3F50AA1AD67DF9D4AD8FAE4
        Validity
            Not Before: May 29 03:14:51 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1904aa-3238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:60:66:20:08:9a:8b:f3:f6:b2:2f:15:a0:
                    8c:0b:d7:c6:75:fc:7d:7a:2d:cc:fc:03:cb:cf:65:
                    ef:00:6f:0b:10:74:42:14:6c:45:d4:d5:4a:42:44:
                    a9:1d:36:06:70:4b:85:53:4d:e2:d6:46:e8:15:a4:
                    41:69:ff:d7:fd:e1:78:b5:aa:ab:56:3c:2b:3a:1a:
                    7a:8e:73:cf:18:2d:c6:64:c6:19:d5:a5:8f:4c:14:
                    19:e7:d0:f6:02:1e:27:d9:48:9e:81:b1:6f:4c:3d:
                    80:93:ae:ab:78:df:40:14:04:b5:92:83:76:63:9f:
                    ef:c2:59:69:fa:1b:90:60:56:87:fd:62:4d:60:a5:
                    b4:b8:e4:0c:66:7a:4e:07:c2:58:08:08:16:2f:6f:
                    a1:d1:0a:75:f4:56:b5:92:2e:c8:64:d5:93:21:1b:
                    cb:dd:84:46:b1:39:f8:b2:53:fb:4d:bd:7c:1b:a2:
                    8e:ad:e0:20:fa:82:df:13:7a:91:23:02:cf:78:e7:
                    2b:24:d9:b6:e9:0a:c3:2b:ba:14:4c:02:df:2e:d4:
                    f5:aa:8f:29:0a:92:cc:71:cd:44:6b:8a:18:a2:9d:
                    a0:e7:df:85:53:b9:9c:24:79:26:b7:d5:43:2d:ed:
                    f3:25:df:a9:d1:d0:d8:5d:d5:50:9f:e5:b7:46:ff:
                    8b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:94:FA:F7:37:53:FA:8F:1A:86:97:95:9E:73:1D:A8:2C:89:08:9D
            X509v3 Authority Key Identifier:
                keyid:94:44:30:98:B8:80:1F:DA:B3:F5:0A:A1:AD:67:DF:9D:4A:D8:FA:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/lEQwmLiAH9qz9QqhrWffnUrY-uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEQwmLiAH9qz9QqhrWffnUrY-uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A26B4/7ECAFBD255A911F18E92BC479B833773/8DB4437A5B0C11F1A290872FAE833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:fa:3b:ee:ca:06:a5:0c:ab:31:d1:ea:87:21:88:3f:74:20:
         9c:b4:a1:6e:f4:00:8b:27:a6:b8:66:84:f8:27:d5:97:55:59:
         d7:0f:b0:48:28:db:96:53:f5:9c:b0:ac:8c:d3:ee:4e:97:ef:
         9a:1f:91:ad:40:2d:87:ef:23:60:a2:65:4a:f5:b7:02:a5:6a:
         93:23:42:35:d8:46:5b:77:16:33:0d:9b:af:96:c7:5b:48:f8:
         d1:be:44:97:8c:45:47:e9:4f:18:47:53:b3:07:53:85:dd:ef:
         c6:63:bb:65:1f:25:fd:a0:14:10:61:1c:b5:3a:2a:49:d4:3a:
         87:8c:bb:6b:aa:b8:a1:dc:d5:45:b2:95:09:b9:23:44:fb:5a:
         ed:07:bd:54:8f:c3:54:77:44:da:ae:fd:87:fa:43:a7:dc:49:
         a8:4a:5f:af:8f:3b:66:36:8c:85:c8:bb:69:f1:24:7a:3d:a3:
         2e:72:94:f0:ff:a7:28:56:d6:94:72:66:d2:de:d1:09:eb:17:
         2f:42:2d:83:2a:d2:c2:bd:9b:c2:b7:23:43:27:8b:31:eb:d7:
         c7:fa:29:a9:22:95:c7:e6:98:3f:77:21:18:84:68:28:79:7d:
         f4:52:2f:51:90:7d:42:7d:b4:56:f1:92:22:82:0b:96:e2:08:
         d5:f1:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:39:34 2026 by rpki-client