Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/4A79F05471CE11F1BC39DFE663A30FBC.roa
File:                     4A79F05471CE11F1BC39DFE663A30FBC.roa (raw, json)
Hash identifier:          tt1BIck5czmyxUfrc/spGUbtOW46AikfpGJWq4smioc=
Subject key identifier:   3F:DB:7C:7D:2B:34:7B:1F:A2:FE:3E:A5:9E:E1:2E:04:E6:E4:F0:45
Certificate issuer:       /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial:       45
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/4A79F05471CE11F1BC39DFE663A30FBC.roa
Signing time:             Sat 27 Jun 2026 02:17:06 +0000
ROA not before:           Sat 27 Jun 2026 02:17:06 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152698
IP address blocks:        2402:5720::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
                          rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 10:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
        Validity
            Not Before: Jun 27 02:17:06 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3f32a1-3f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:26:84:44:a5:e5:44:23:35:5f:da:03:33:
                    fc:52:8b:78:44:9b:27:79:de:b1:39:25:27:2c:03:
                    b5:87:f4:60:73:10:ef:ad:be:50:f5:69:11:c9:20:
                    68:a7:ae:61:37:22:f1:da:53:86:fb:ce:3a:4b:10:
                    67:d7:96:4c:82:71:ce:ee:1c:33:da:e6:cd:54:29:
                    b7:11:ab:b3:f3:d5:d2:fa:7f:63:e1:68:6f:6a:9b:
                    26:e9:54:d3:4d:07:8b:38:06:59:46:20:04:31:a3:
                    b6:96:f3:c2:b6:bf:63:b4:18:96:7d:aa:ef:64:cc:
                    6d:bb:f4:46:df:10:09:3d:e4:17:92:3b:a8:11:8e:
                    16:eb:9d:5d:f6:9e:15:04:c4:fc:14:e9:14:d0:44:
                    a7:18:64:bf:51:56:8a:6b:d2:f0:6c:18:8b:8c:68:
                    d7:a6:9e:cf:49:bd:e8:7c:db:b0:c0:e1:55:93:37:
                    57:ea:30:48:62:f3:5e:46:12:2f:04:61:d4:fb:9f:
                    2d:14:8e:1f:bc:3e:f0:22:08:68:c1:8c:c9:51:23:
                    51:26:cd:21:1b:41:c9:81:8f:22:1e:d0:45:12:21:
                    7f:47:92:ee:4b:bf:5a:31:e7:31:16:c4:c1:98:f9:
                    3a:c9:26:a6:6b:93:d6:3c:1d:05:76:0f:64:a9:4f:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DB:7C:7D:2B:34:7B:1F:A2:FE:3E:A5:9E:E1:2E:04:E6:E4:F0:45
            X509v3 Authority Key Identifier:
                keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/4A79F05471CE11F1BC39DFE663A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5720::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:86:51:23:68:48:65:fc:74:bc:99:7f:99:be:df:32:28:
         19:03:3c:88:10:21:cd:c5:78:52:a9:26:53:e4:2f:37:5f:19:
         80:57:b9:e8:f1:46:10:50:1f:20:25:80:01:c8:46:11:e6:03:
         01:2a:f6:7d:68:d5:36:9c:4c:2d:d1:c3:ab:65:59:9a:eb:e2:
         e6:93:0b:13:49:03:70:12:60:8f:51:bf:45:42:11:11:c6:aa:
         7a:88:79:58:de:69:38:43:ba:4b:e1:ba:30:85:07:cc:fe:60:
         7e:f6:41:7d:7e:ed:cf:7a:41:eb:95:f9:9b:b0:ab:21:fc:8c:
         c8:2b:34:70:20:85:f7:40:f6:96:ba:47:5d:59:04:32:04:4d:
         9e:f7:a3:5b:d5:69:ce:ff:1e:5f:33:96:1a:7d:50:02:07:9f:
         9d:a7:bf:bc:b8:2e:77:75:5c:5f:d7:3b:48:64:6b:3b:b7:e3:
         1b:71:78:58:ab:5b:4c:27:53:61:36:f7:13:c3:51:77:9f:08:
         85:fa:d6:db:aa:12:84:16:48:ff:18:cf:a0:f5:13:6c:b4:48:
         fe:78:7d:ad:20:e4:70:fa:ca:b0:0e:f2:7b:cd:21:09:5b:fc:
         9a:de:21:eb:25:b0:f3:a9:e8:e1:be:fc:8c:ad:52:58:03:37:
         29:a6:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:31:50 2026 by rpki-client