Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/33A082DA948D11F1A5BE36406611F970.roa
File:                     33A082DA948D11F1A5BE36406611F970.roa (raw, json)
Hash identifier:          Zrbzfz5Z2TeRzK/kWg662lvjXfu9AESyGMfzdvdsjVE=
Subject key identifier:   8A:F9:62:33:48:0D:BA:E5:A7:50:46:FC:CA:9C:0A:45:71:97:F9:E5
Certificate issuer:       /CN=A91C7836/serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Certificate serial:       10
Authority key identifier: 55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/33A082DA948D11F1A5BE36406611F970.roa
Signing time:             Mon 10 Aug 2026 07:29:20 +0000
ROA not before:           Mon 10 Aug 2026 07:29:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45117
IP address blocks:        2001:df7:3440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7836, serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
        Validity
            Not Before: Aug 10 07:29:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a797dd0-8491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:40:e6:9c:46:5c:b6:af:f0:c7:4c:37:fb:
                    a8:09:c2:fe:ff:c7:76:c7:1c:c8:22:1c:3d:12:ba:
                    74:59:9b:41:8b:56:23:e2:83:c7:b3:4f:7f:b2:fb:
                    c1:ab:bb:e0:e4:74:2a:15:6a:e5:03:18:f3:38:23:
                    b4:c5:11:4b:9f:29:fb:ca:fc:11:83:d6:ea:72:b9:
                    c8:07:2c:07:aa:9d:f9:41:10:46:70:3a:c7:f8:83:
                    97:15:b5:52:1a:81:66:7e:8d:33:b3:cf:e3:d6:ea:
                    dc:1d:57:05:41:89:78:78:11:d3:08:c8:b4:ea:7f:
                    dd:19:86:65:02:d5:93:bc:5b:7f:53:54:7a:5c:8f:
                    71:9f:ac:74:67:d9:66:a3:f4:82:39:62:68:02:da:
                    b1:16:24:f6:7a:07:6f:30:a7:28:25:68:ff:f2:55:
                    e9:5f:08:af:6a:fc:b3:7e:36:1f:83:04:7f:38:0e:
                    0f:3e:84:d4:41:fe:b6:7f:40:02:11:34:34:12:13:
                    02:93:34:13:63:54:20:4b:cf:2b:59:67:6f:27:fe:
                    b2:f4:42:3e:7b:c1:95:fe:7f:7b:7d:ef:8e:42:97:
                    a3:24:51:a2:e3:03:bd:17:b0:42:fc:5f:32:87:43:
                    e4:56:7e:52:d4:72:99:e7:ff:fc:a2:91:c9:25:92:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:62:33:48:0D:BA:E5:A7:50:46:FC:CA:9C:0A:45:71:97:F9:E5
            X509v3 Authority Key Identifier:
                keyid:55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/33A082DA948D11F1A5BE36406611F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:3440::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:07:fb:7d:ec:bc:57:8d:9d:6a:cc:bd:4d:ee:67:7b:44:
         bf:ff:60:e9:93:ed:b8:11:80:5d:6e:2f:14:21:87:af:5b:4d:
         4e:6a:01:d9:9c:f0:2b:02:2a:4c:77:4c:5f:1a:ad:e8:fd:93:
         c2:ef:fd:47:b2:3e:5a:96:61:73:8e:03:23:a6:74:4b:e7:0d:
         49:99:da:05:d1:49:34:a0:df:45:2f:65:7f:c7:65:9f:99:7c:
         b4:e2:9d:0d:e0:cb:ca:90:df:75:8b:26:d1:7b:06:33:d1:e7:
         42:0b:c8:ed:8b:da:40:12:57:5e:e5:0b:69:dd:8d:5e:bc:c2:
         39:40:5f:8c:d7:22:0a:d3:6e:53:d0:9b:02:21:d2:56:df:da:
         11:20:ed:b4:6b:73:4f:1a:05:85:c2:00:5b:09:4c:24:a7:d4:
         4b:a7:76:64:c7:2c:66:9f:2e:d4:bd:24:c3:5f:e4:3c:79:41:
         b3:23:01:b9:eb:31:63:a0:6d:fa:02:2b:0d:b7:4d:91:cd:36:
         3a:aa:d9:71:26:f7:30:62:79:d4:37:84:ae:79:3f:20:a1:70:
         75:35:64:14:8f:b2:6d:cb:e1:18:9c:06:e6:26:6f:2f:86:6c:
         6a:6e:2c:5c:66:eb:6f:c6:07:6f:be:66:ad:b2:c8:b0:d0:8a:
         25:68:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:57 2026 by rpki-client