Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/E68B45D6596711F094054D6BC4F9AE02.roa
File:                     E68B45D6596711F094054D6BC4F9AE02.roa (raw, json)
Hash identifier:          /HqWI5ntcqgAV28J97Qo5sNN14hNlJPbAdQ01ylf29M=
Subject key identifier:   9C:7F:97:35:B0:BA:8E:7E:E1:BC:7E:FE:F6:22:54:42:EE:C7:B8:F4
Certificate issuer:       /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Certificate serial:       E2
Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/E68B45D6596711F094054D6BC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 06:57:04 +0000
ROA not before:           Thu 03 Sep 2026 06:57:04 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134732
IP address blocks:        2001:df5:d3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
        Validity
            Not Before: Sep  3 06:57:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a991a40-a5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:ef:83:f5:e8:ff:4a:ae:32:1d:72:15:05:
                    fa:5e:0f:cb:97:bb:ce:ee:57:2d:ba:03:04:3b:f7:
                    66:70:4b:71:e7:08:e3:d1:fb:36:d8:78:2f:44:cd:
                    3f:af:d6:33:e0:7b:4a:f8:38:f2:28:ce:31:2c:a5:
                    b5:20:04:a0:cf:d5:60:f7:2a:0d:7f:a6:33:a1:84:
                    bb:5e:89:7e:82:bd:b5:13:66:bb:a5:e4:09:9e:b7:
                    7a:8f:c1:04:00:e9:08:aa:e5:d1:b1:85:f0:e8:ee:
                    fc:2e:a2:33:d8:44:fc:f4:2e:4c:4d:27:5b:2c:39:
                    b1:7f:b3:93:0e:ee:da:30:00:18:08:81:55:c8:e7:
                    a9:57:04:29:8c:0a:ed:cf:1e:23:ed:94:d9:88:12:
                    0d:37:47:89:ea:27:c6:57:dc:06:10:02:f1:c2:21:
                    81:ef:7b:ed:a5:95:6e:57:49:f6:7d:82:5c:32:2e:
                    43:bf:ca:a6:ed:35:bb:b5:6c:06:a7:28:ea:2e:6f:
                    b4:a2:c8:31:88:1f:5b:0a:3a:b6:34:f9:a6:29:89:
                    7f:64:f9:51:a1:d9:21:48:e1:c1:36:f2:26:ee:eb:
                    b8:27:ce:4e:9b:be:b1:9c:8d:fe:a4:8c:cb:72:aa:
                    ad:2d:a5:3a:86:ef:27:7b:3b:34:3f:14:33:2b:f9:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7F:97:35:B0:BA:8E:7E:E1:BC:7E:FE:F6:22:54:42:EE:C7:B8:F4
            X509v3 Authority Key Identifier:
                keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/E68B45D6596711F094054D6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:d3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:d9:6d:ca:09:1f:b9:7b:06:21:a2:03:b6:93:ad:cf:05:a9:
         c4:16:e2:27:52:84:42:9a:1f:5c:c8:ea:fc:e2:c4:6a:a9:a5:
         3e:1f:91:e1:f8:d4:74:3f:95:7f:58:c8:a1:43:d1:28:6a:92:
         c9:59:a1:24:3d:2c:b0:a4:d2:f2:c3:42:11:2a:66:28:09:c4:
         46:95:30:06:a1:00:1d:a4:f7:31:f5:2b:0b:66:83:4e:f1:78:
         6c:14:17:91:88:64:34:a6:e8:94:03:50:8a:f8:71:92:38:09:
         c7:f0:82:41:91:8d:bf:1c:49:fa:29:ba:0b:c3:c0:10:85:e0:
         1f:20:a2:60:1b:dd:58:7d:78:aa:a9:12:5c:ed:83:db:70:d6:
         21:a0:15:79:76:65:cb:3b:55:f8:db:13:33:7f:69:a3:dc:8a:
         e3:40:15:dd:58:10:60:ea:40:8e:51:ec:56:55:d7:2b:69:ce:
         5d:69:4b:cc:fb:9e:23:cd:fc:e1:a8:57:81:6a:1f:96:5a:dd:
         99:60:00:4d:d6:31:c3:ab:66:c0:e5:4f:96:be:f5:0b:a5:c6:
         87:eb:c5:dd:a2:bc:6d:a6:e4:aa:d2:61:91:98:7d:37:8b:72:
         92:c0:26:e4:d0:e8:f4:a2:87:dd:ce:2f:26:9c:42:f2:92:e0:
         c2:e0:07:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:21:31 2026 by rpki-client