Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/2571056C8F1611F1B716621D3511F970.roa
File:                     2571056C8F1611F1B716621D3511F970.roa (raw, json)
Hash identifier:          hfGZNvQE+P3B8l2oyHgnKQJxAfVEZlWoNG/6zvrHKow=
Subject key identifier:   B7:8E:BE:E2:7F:A6:AC:5C:11:A9:6B:7A:56:71:E0:78:DB:7C:CB:1F
Certificate issuer:       /CN=A91C9ADB/serialNumber=884268D01D19EAA33492A9E25CF6B2B9EE6F1B7E
Certificate serial:       04
Authority key identifier: 88:42:68:D0:1D:19:EA:A3:34:92:A9:E2:5C:F6:B2:B9:EE:6F:1B:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/2571056C8F1611F1B716621D3511F970.roa
Signing time:             Mon 03 Aug 2026 08:34:31 +0000
ROA not before:           Mon 03 Aug 2026 08:34:31 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151302
IP address blocks:        2402:6b60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.crl
                          rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9ADB, serialNumber=884268D01D19EAA33492A9E25CF6B2B9EE6F1B7E
        Validity
            Not Before: Aug  3 08:34:31 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a705296-ff2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:5f:b9:44:92:22:d5:85:31:b9:4b:0c:26:
                    e3:15:a3:36:e8:d3:b3:fc:15:08:7d:98:59:3f:d0:
                    7e:f0:dd:75:b2:2a:ba:94:3e:3a:46:e7:55:a5:b4:
                    69:46:8d:31:5c:4f:18:05:96:4f:6d:fd:64:99:bf:
                    ba:41:85:c3:49:e9:93:84:7b:eb:01:ff:59:cf:8c:
                    dd:88:e4:be:b1:80:f1:f6:9a:a8:f0:ad:c0:5d:c2:
                    b2:ba:e8:e9:ef:ce:87:90:21:bb:26:4b:2a:ae:37:
                    59:01:82:4e:c5:02:2a:2a:3d:a4:73:53:72:f1:14:
                    14:c9:29:e9:29:a5:6b:a8:69:46:ff:07:bc:81:36:
                    88:59:51:75:4f:53:eb:da:62:bd:07:8c:63:d1:d6:
                    52:20:39:bb:c6:c9:3b:fc:c9:ed:2b:78:ae:94:e2:
                    7c:58:eb:b1:17:57:58:0a:b2:de:3f:b4:ee:45:3d:
                    f7:b3:32:3a:ac:e2:f3:0b:eb:34:2e:c7:11:90:5e:
                    1c:2e:37:75:21:f5:bf:31:57:68:b5:22:c0:2c:4a:
                    ab:c2:fe:cd:da:29:5e:f9:d5:a2:a3:a1:6a:e6:82:
                    b0:73:a4:5e:d4:ea:3e:b4:d8:22:53:b5:03:af:62:
                    90:bf:b7:ab:0e:5c:23:66:39:b2:87:c0:13:43:c0:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:BE:E2:7F:A6:AC:5C:11:A9:6B:7A:56:71:E0:78:DB:7C:CB:1F
            X509v3 Authority Key Identifier:
                keyid:88:42:68:D0:1D:19:EA:A3:34:92:A9:E2:5C:F6:B2:B9:EE:6F:1B:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/iEJo0B0Z6qM0kqniXPayue5vG34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEJo0B0Z6qM0kqniXPayue5vG34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9ADB/296A08F48F1511F1933762B93411F970/2571056C8F1611F1B716621D3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:26:ff:5a:e7:72:e2:d0:0f:a3:93:fb:89:57:01:f5:5c:f7:
         06:59:05:05:a2:df:de:8f:98:95:8b:89:72:c5:d1:eb:cc:20:
         37:4c:fe:a0:ad:a1:d6:2b:6f:76:5b:cd:98:cd:0d:77:d8:16:
         45:69:33:e3:f9:0e:38:62:31:5e:f3:89:c9:b6:c6:06:29:f3:
         65:4b:da:6f:7f:47:0a:9e:5f:de:ce:95:d8:c8:e9:25:ce:30:
         61:4b:6e:f8:57:13:1c:52:0c:5f:ba:8a:65:38:3d:cc:30:b9:
         c3:c4:ce:18:e7:ec:b1:4e:5a:58:b3:56:8c:cc:9e:b4:54:c2:
         9c:34:f1:46:12:95:5e:c7:1e:14:6b:be:99:9f:81:be:e5:ba:
         fe:f9:ae:a3:6e:2b:f5:e5:d8:fe:c2:02:f1:38:0d:31:5a:a8:
         ec:6b:ef:64:51:47:fc:84:66:3e:59:5d:dc:47:8e:61:af:cc:
         3e:80:7a:06:65:33:d3:49:ac:81:74:4f:91:ce:f8:c1:cf:16:
         26:4d:81:d3:77:ae:b3:d9:1f:b5:2c:af:77:d2:6f:a0:af:95:
         77:b3:4f:e4:6c:ef:0d:4f:5b:1a:8f:a2:43:37:b2:ca:0c:3b:
         9d:88:41:f3:83:f6:cc:b7:32:0a:59:23:cb:be:c2:73:ee:78:
         b1:f2:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:42 2026 by rpki-client