Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/A8896B1892E811F0A5E48134C4F9AE02.roa
File:                     A8896B1892E811F0A5E48134C4F9AE02.roa (raw, json)
Hash identifier:          igIIxOdVfOFaRjkyfF2zGfACTv4UGuFgRRFoA3gtY0I=
Subject key identifier:   53:3C:BB:AE:B7:C9:A9:4C:B1:AC:12:13:C4:27:D3:72:B1:FE:9D:D1
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0A54
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/A8896B1892E811F0A5E48134C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 20:41:00 +0000
ROA not before:           Fri 31 Jul 2026 20:41:00 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152865
IP address blocks:        2406:7ec0:1008::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 19:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2644 (0xa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Jul 31 20:41:00 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6d085c-a137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:64:dd:6a:f5:a5:0f:d3:2f:45:60:b8:d8:
                    d8:d2:0e:89:43:76:06:2e:8e:22:2c:10:90:9b:a5:
                    f3:21:07:aa:95:e7:56:67:40:51:22:dc:cd:87:5c:
                    af:0a:1c:b9:7c:57:e0:d7:a9:39:05:d2:d7:a6:01:
                    e0:ba:f8:52:c8:2d:bf:01:ce:3b:64:f5:de:58:3e:
                    7b:3c:63:bb:06:2b:23:5b:c1:a7:ee:65:52:4d:20:
                    63:de:d8:9a:d2:b4:49:9d:f9:a6:1d:98:64:e6:43:
                    67:21:2d:92:28:cf:97:58:a5:47:97:6f:39:ec:05:
                    76:9d:dc:c7:7d:86:73:04:9c:d3:5e:51:73:f2:14:
                    09:73:43:f2:17:ef:09:d8:0f:e2:69:ff:5c:75:9f:
                    64:4d:da:76:8c:c1:83:f3:88:bb:03:c3:cd:87:d7:
                    14:1c:8c:d4:37:b8:e7:1b:cd:0c:f7:85:e3:09:3b:
                    7a:64:64:b2:3a:dc:dc:9f:cc:65:72:4a:d4:35:05:
                    5c:6d:92:81:73:94:de:54:d9:ba:37:b7:0a:b4:93:
                    5f:62:7f:f6:52:59:4e:94:c7:fc:f0:69:d2:6f:d2:
                    66:e0:ff:62:31:53:30:07:c5:99:47:a4:07:8a:74:
                    73:ed:b3:06:93:23:58:f6:22:e3:25:fb:5a:17:f4:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:BB:AE:B7:C9:A9:4C:B1:AC:12:13:C4:27:D3:72:B1:FE:9D:D1
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/A8896B1892E811F0A5E48134C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ec0:1008::/46

    Signature Algorithm: sha256WithRSAEncryption
         34:78:60:a0:cc:5a:18:35:ce:8a:fe:e1:1d:c6:d9:eb:1e:82:
         91:55:ab:ef:9f:ef:fd:5e:29:17:83:7a:f3:fe:fe:de:71:f8:
         d8:99:38:b9:96:8e:2e:f1:18:dc:5a:9c:84:bf:6f:64:21:22:
         71:eb:dc:f4:6a:78:ce:01:18:92:4f:3d:19:e2:55:18:17:d2:
         3f:03:df:85:d0:26:4e:50:f5:e8:ca:75:96:4b:f7:9a:7c:d7:
         79:49:5e:2d:b0:1e:e0:6c:4f:75:50:d9:fb:16:2e:1b:78:d5:
         f2:0c:6e:07:8e:25:94:74:18:54:e0:1c:15:0f:73:67:a0:95:
         b2:57:95:57:81:1e:d1:9d:03:b7:eb:b2:60:b5:9d:82:f6:2d:
         69:c0:9e:34:e5:6c:1c:72:f3:dd:6c:7b:9d:48:48:4c:9b:49:
         30:ba:b2:00:74:84:4d:14:dc:95:95:5b:b5:0e:32:dc:46:56:
         21:0d:16:01:5e:9e:e8:c1:75:ce:06:0f:8b:af:17:64:be:96:
         2e:57:3a:22:8c:2e:5b:07:c2:58:d3:0e:fe:ab:24:7f:4d:46:
         43:d1:a4:cf:ae:2d:43:6d:2f:7b:1a:fc:77:68:ff:24:6d:b4:
         c6:35:b1:92:bc:47:8f:7d:40:05:20:b1:ee:ef:b9:10:fc:f0:
         88:54:ab:1d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICClQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC
QjYwNjlCQzkwHhcNMjYwNzMxMjA0MTAwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkMDg1Yy1hMTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqa1k3Wr1pQ/TL0VguNjY0g6JQ3YGLo4iLBCQm6XzIQeqledWZ0BRItzNh1yv
Chy5fFfg16k5BdLXpgHguvhSyC2/Ac47ZPXeWD57PGO7BisjW8Gn7mVSTSBj3tia
0rRJnfmmHZhk5kNnIS2SKM+XWKVHl2857AV2ndzHfYZzBJzTXlFz8hQJc0PyF+8J
2A/iaf9cdZ9kTdp2jMGD84i7A8PNh9cUHIzUN7jnG80M94XjCTt6ZGSyOtzcn8xl
ckrUNQVcbZKBc5TeVNm6N7cKtJNfYn/2UllOlMf88GnSb9Jm4P9iMVMwB8WZR6QH
inRz7bMGkyNY9iLjJftaF/QG/QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFM8u663
yalMsawSE8Qn03Kx/p3RMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw
QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjc3NzAvRTY4MTA0MTBDMEFFMTFFQUI5NUFCNTcyQzRGOUFFMDIvQTg4OTZCMTg5
MkU4MTFGMEE1RTQ4MTM0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAZ+wBAIMA0GCSqGSIb3DQEBCwUAA4IBAQA0eGCgzFoYNc6K/uEd
xtnrHoKRVavvn+/9XikXg3rz/v7ecfjYmTi5lo4u8RjcWpyEv29kISJx69z0anjO
ARiSTz0Z4lUYF9I/A9+F0CZOUPXoynWWS/eafNd5SV4tsB7gbE91UNn7Fi4beNXy
DG4HjiWUdBhU4BwVD3NnoJWyV5VXgR7RnQO367JgtZ2C9i1pwJ405WwccvPdbHud
SEhMm0kwurIAdIRNFNyVlVu1DjLcRlYhDRYBXp7owXXOBg+LrxdkvpYuVzoijC5b
B8JY0w7+qyR/TUZD0aTPri1DbS97Gvx3aP8kbbTGNbGSvEePfUAFILHu77kQ/PCI
VKsd
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:05:32 2026 by rpki-client