Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/A760CBA891D611F1A1097B9E5111F970.roa
File:                     A760CBA891D611F1A1097B9E5111F970.roa (raw, json)
Hash identifier:          rVJa4ebXuFql7e5EjczJk/uiGqznYyPnvPEFXZFvTA4=
Subject key identifier:   FF:7B:3D:7F:3E:14:A1:AC:3D:BB:89:2E:DE:F4:79:9E:14:21:C6:32
Certificate issuer:       /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial:       F7
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/A760CBA891D611F1A1097B9E5111F970.roa
Signing time:             Thu 06 Aug 2026 20:37:34 +0000
ROA not before:           Thu 06 Aug 2026 20:37:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197196
IP address blocks:        2402:1920:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Sep 2026 06:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
        Validity
            Not Before: Aug  6 20:37:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a74f08e-9f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:41:32:95:56:c0:72:35:47:18:3f:64:27:
                    90:d0:f6:0f:9b:69:09:53:46:af:ab:ad:e7:bc:91:
                    84:34:47:bd:f7:49:18:4f:5b:41:61:96:e6:80:38:
                    2b:7e:f9:2d:8a:6e:76:b3:99:f5:72:28:99:ba:e4:
                    0a:6f:f5:47:7b:da:30:f4:58:99:5d:4b:c6:b0:d1:
                    b4:7d:5f:bc:0e:39:74:93:ff:db:67:06:4d:f0:6a:
                    dc:06:61:ae:b8:46:9a:76:b5:5c:0c:61:aa:cf:6f:
                    38:1b:f2:51:78:c5:4c:3b:69:a8:42:b2:b2:8a:da:
                    c7:49:f5:15:d8:82:dd:54:6d:3d:c9:f5:9c:71:94:
                    4c:bc:0b:72:22:dc:70:25:69:ed:f1:48:ea:51:08:
                    13:ae:ff:56:30:3d:9f:6a:16:0f:68:24:38:3d:1a:
                    62:91:6d:85:0e:27:a5:10:28:b2:ef:92:ee:41:53:
                    52:62:1c:5e:b3:1a:c0:20:ba:4b:12:f7:fe:aa:8b:
                    5c:ad:fe:18:56:ee:06:ed:0e:ec:a4:32:ce:b1:89:
                    6f:b0:fd:19:3b:41:a1:2b:d2:03:b7:33:f1:47:0c:
                    52:f2:be:1b:98:50:13:27:4c:93:9a:21:ea:04:50:
                    4b:86:49:17:ae:78:17:45:dc:22:90:a5:be:08:dd:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7B:3D:7F:3E:14:A1:AC:3D:BB:89:2E:DE:F4:79:9E:14:21:C6:32
            X509v3 Authority Key Identifier:
                keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/A760CBA891D611F1A1097B9E5111F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1920:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:37:67:b5:fe:11:93:97:cd:26:30:3e:37:ed:03:e9:9b:37:
         72:80:2a:4d:ef:56:44:4f:45:b5:99:b7:6c:be:09:a4:5c:6c:
         78:4d:21:45:1e:bc:a0:8c:ef:60:b9:f9:b7:b9:3c:f0:af:a0:
         25:1d:2d:36:7c:3b:92:0a:1e:15:29:ad:f3:d3:8b:76:99:73:
         79:96:18:69:99:51:76:d5:91:b5:d3:8e:2a:1c:ad:04:e9:7a:
         23:65:b2:6d:7e:4e:1f:33:51:f4:5f:d9:28:9e:0f:5d:52:7f:
         31:13:a1:8b:20:1b:6b:21:c4:e2:7a:3c:4a:57:db:1c:0a:6c:
         93:eb:61:d1:62:b1:b6:b5:f0:e3:77:f1:70:43:4b:f2:70:28:
         50:3e:5e:f7:f5:ac:57:b8:54:f8:44:74:25:4b:02:7d:83:37:
         92:65:fb:13:42:0f:17:20:38:84:6c:63:e4:15:e6:30:bb:e1:
         fe:c8:2f:5d:3b:39:db:46:3d:54:d7:cd:71:92:ad:79:6e:6b:
         27:62:47:ea:aa:02:f4:02:2f:3e:dd:12:eb:5b:63:9a:7d:21:
         5c:8b:f1:15:3a:dd:9c:fd:7b:cc:00:4b:90:a6:f2:96:40:67:
         dc:39:eb:d8:9a:23:51:74:68:8f:80:0f:ce:a8:c1:bc:a3:0d:
         18:cb:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 16:18:03 2026 by rpki-client