Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/264F1000BC4511EFB8D01632C4F9AE02.roa
File:                     264F1000BC4511EFB8D01632C4F9AE02.roa (raw, json)
Hash identifier:          q9/2fFLZFDKbxpd6XPvCe1eXSEc9UdfoyDPFGGlaFCE=
Subject key identifier:   D8:E0:11:05:42:16:E0:D6:3C:86:DF:4E:66:FC:00:0A:5A:F1:8B:34
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E2A
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/264F1000BC4511EFB8D01632C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:27:43 +0000
ROA not before:           Fri 02 Oct 2026 15:27:43 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149104
IP address blocks:        2400:8020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28202 (0x6e2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:27:43 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd6f-057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:04:08:8a:f1:ef:17:68:0d:93:c9:5e:be:ad:
                    39:6f:0e:83:9a:6b:99:9a:2d:47:2e:a9:ed:6b:1f:
                    14:96:0f:1a:0d:ff:06:50:b7:6d:06:57:01:aa:6f:
                    7e:0e:c4:c9:42:7c:f7:9a:9a:f7:b5:e1:71:a8:19:
                    b1:b9:8a:4f:03:31:2e:ea:15:d5:65:98:a2:1d:73:
                    f7:b8:08:8e:30:99:77:50:fc:c1:3c:09:11:8d:2b:
                    59:b2:0c:f9:af:d9:55:3a:7c:58:f3:9e:d2:3d:9f:
                    e1:63:08:5c:44:3b:d1:5a:26:35:46:a7:52:0a:d5:
                    29:c3:bc:4e:a6:91:66:6e:a9:64:cc:82:2a:e3:2a:
                    23:e2:fe:db:f7:0d:67:14:db:ae:c4:58:e6:76:18:
                    34:fe:a2:93:ed:1b:cf:39:50:88:8d:f0:fd:32:35:
                    81:47:73:fe:53:8d:2d:79:6b:07:2f:2d:c8:ab:83:
                    2f:0e:7c:30:25:62:cb:89:be:7e:8e:0b:91:d6:6c:
                    55:7e:14:42:92:a5:74:f2:fe:ce:b5:2e:68:68:63:
                    2a:5b:7a:c3:d5:c6:ca:73:d0:2d:6f:a4:85:91:b9:
                    22:b2:43:d6:6c:f4:14:a8:7f:76:58:74:41:6d:0e:
                    4e:b2:d5:22:54:b4:94:b5:ff:fb:6e:ab:3f:9c:20:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E0:11:05:42:16:E0:D6:3C:86:DF:4E:66:FC:00:0A:5A:F1:8B:34
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/264F1000BC4511EFB8D01632C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:0f:a5:8a:e5:68:9a:61:b7:45:36:81:e6:8f:b5:bb:8e:64:
         93:1c:c4:c1:29:51:59:bf:4b:39:7e:34:66:95:5c:a4:32:46:
         54:86:3b:ce:62:89:fa:cc:26:ef:b7:67:e8:ed:25:dc:8b:2d:
         98:e6:65:5d:25:30:20:54:34:44:f7:1f:45:c8:ad:e9:ab:66:
         e8:b4:96:ae:df:66:c7:d3:8e:a8:95:ee:38:ed:a9:4d:e5:87:
         e9:48:f7:c3:c8:1f:2e:be:fc:f6:8d:04:02:d8:23:4f:97:ab:
         31:ba:63:db:2e:85:e1:89:2d:5c:0e:04:f3:d7:46:c1:dd:cb:
         fc:80:ff:4e:7d:c7:6e:b6:10:2c:c0:5b:15:f9:66:9d:f5:44:
         f3:db:cb:6e:e6:11:3b:20:d0:bf:5e:03:e6:07:85:6e:8a:1a:
         86:af:9f:9f:14:79:20:16:ad:7c:73:94:d3:c7:55:25:e5:b3:
         1f:57:71:ac:1c:19:8d:a4:76:3e:8f:5b:93:eb:fe:3b:6f:91:
         4e:cd:91:07:86:76:8b:a5:e7:da:5b:4e:22:28:5c:ae:c7:a5:
         42:02:88:11:f1:50:7f:24:20:14:77:26:7a:cc:d2:6a:fd:28:
         29:a1:be:90:1e:b7:92:71:38:0b:1b:70:2b:29:e5:96:9c:4e:
         8d:78:ac:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:48 2026 by rpki-client