Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/81CDB96A53F111EB85FBFA19C4F9AE02.roa
File:                     81CDB96A53F111EB85FBFA19C4F9AE02.roa (raw, json)
Hash identifier:          FRg/vpc/AMBGrvMjIcOoVz1j/708E2nJzNJ2bFS2Beg=
Subject key identifier:   D4:E8:15:62:1E:A0:4E:31:0C:7B:8D:FF:64:0E:CD:23:D1:8B:7B:7B
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0FA0
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/81CDB96A53F111EB85FBFA19C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 18:35:58 +0000
ROA not before:           Wed 02 Sep 2026 18:35:58 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     59598
IP address blocks:        2405:84c0:ff20::/44 maxlen: 44
                          2405:84c0:ff20::/48 maxlen: 48
                          2405:84c0:ff21::/48 maxlen: 48
                          2405:84c0:ff22::/48 maxlen: 48
                          2405:84c0:ff23::/48 maxlen: 48
                          2405:84c0:ff24::/48 maxlen: 48
                          2405:84c0:ff25::/48 maxlen: 48
                          2405:84c0:ff26::/48 maxlen: 48
                          2405:84c0:ff27::/48 maxlen: 48
                          2405:84c0:ff28::/48 maxlen: 48
                          2405:84c0:ff29::/48 maxlen: 48
                          2405:84c0:ff2a::/48 maxlen: 48
                          2405:84c0:ff2b::/48 maxlen: 48
                          2405:84c0:ff2c::/48 maxlen: 48
                          2405:84c0:ff2d::/48 maxlen: 48
                          2405:84c0:ff2e::/48 maxlen: 48
                          2405:84c0:ff2f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4000 (0xfa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Sep  2 18:35:58 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a986c8e-b257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:63:df:94:f0:b4:f1:f5:89:c2:bd:be:11:
                    99:ea:1c:b2:15:3c:1e:8e:f3:82:a7:e7:bc:50:96:
                    1c:55:52:80:28:43:86:36:2e:f3:11:58:64:12:04:
                    b5:6f:1d:8e:38:70:38:7b:86:00:b7:2a:4a:e9:d0:
                    db:15:7c:db:f8:2e:69:1f:49:c5:a6:7a:c4:13:85:
                    94:4b:16:c0:39:8a:b2:d0:42:ab:4f:4f:2b:2c:44:
                    71:1b:0c:15:5b:6a:66:2c:25:36:43:75:1e:55:be:
                    f8:7e:e0:22:34:db:50:92:3d:2f:bd:c2:db:a1:73:
                    8d:4b:96:5c:0e:fe:11:ec:ba:d9:75:8f:88:d9:10:
                    de:26:cf:35:89:26:a2:ce:0b:93:d4:c5:4d:76:da:
                    ca:27:8e:e1:fe:51:04:52:4a:9c:0d:81:39:f3:3d:
                    9c:a5:b4:cd:ff:10:53:7f:1f:f1:11:f5:da:05:16:
                    eb:26:bd:1e:a9:bc:84:23:8e:d3:40:4e:8c:53:0e:
                    2c:de:7f:96:26:2e:46:ce:da:9c:f5:8d:bd:41:17:
                    03:40:50:11:f4:1e:cc:f9:88:69:a3:59:34:f8:1e:
                    2d:06:aa:62:fd:2f:03:ea:8e:9a:0f:fc:31:70:4e:
                    ba:f7:82:01:54:36:b0:be:0a:62:04:91:e8:4f:0b:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E8:15:62:1E:A0:4E:31:0C:7B:8D:FF:64:0E:CD:23:D1:8B:7B:7B
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/81CDB96A53F111EB85FBFA19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:84c0:ff20::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:72:18:64:6b:b5:9e:69:6f:a6:30:c8:72:d4:e8:af:73:
         2d:44:01:b7:87:d7:74:f2:09:26:e8:51:37:87:c0:f6:4c:a5:
         1a:56:15:af:2c:d7:76:e5:b0:8d:e0:62:55:f3:03:9e:3d:91:
         f7:8c:a4:b6:ee:4f:8f:6d:69:90:11:73:99:de:bc:47:81:2c:
         e2:fe:ca:16:94:49:f6:cd:9f:07:8a:8b:d1:3d:08:06:c0:18:
         11:81:8d:41:48:52:bb:79:1e:e7:34:6b:f7:77:3f:88:cb:48:
         ac:e0:a6:77:eb:4e:54:68:f7:12:41:7c:b4:28:98:76:85:d7:
         6b:c3:ff:d0:d7:13:9d:a6:87:5e:b7:1d:57:27:1e:c0:5d:68:
         f4:de:b7:f9:a4:80:1d:4d:37:42:74:b6:02:43:67:ec:3d:14:
         f2:c0:3a:2d:36:be:04:37:46:4f:e0:ff:d3:60:c0:fe:28:d7:
         8a:b5:6b:ad:fa:ca:ba:da:37:80:22:3e:87:1a:c5:ef:b5:02:
         98:27:a6:ca:40:32:e7:c5:c0:20:13:4e:eb:59:92:20:65:d3:
         86:d4:61:9a:75:b6:9e:b5:94:f2:f9:03:6a:62:d9:2a:c3:bb:
         42:08:35:3d:c1:cf:5c:87:bd:24:9a:55:bf:02:85:fc:81:d2:
         89:7e:24:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:15 2026 by rpki-client