Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/B370AF6CD18411EF960DE726C4F9AE02.roa
File:                     B370AF6CD18411EF960DE726C4F9AE02.roa (raw, json)
Hash identifier:          EVbOTWSObmfSCoKswfRNjOm7BEugmRdAaAMUF5K7E20=
Subject key identifier:   DB:05:9B:B4:92:B3:F8:4A:33:08:BA:FA:48:62:D4:8F:92:17:B2:1F
Certificate issuer:       /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Certificate serial:       03D3
Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/B370AF6CD18411EF960DE726C4F9AE02.roa
Signing time:             Fri 17 Jul 2026 01:26:40 +0000
ROA not before:           Fri 17 Jul 2026 01:26:40 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     149857
IP address blocks:        2400:83e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl
                          rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979 (0x3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3B1D, serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
        Validity
            Not Before: Jul 17 01:26:40 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5984d0-c5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:8c:6d:54:b8:f3:41:73:56:28:38:5b:bf:
                    94:07:95:24:24:24:1f:78:4a:d0:28:10:31:91:2a:
                    5c:06:b5:9b:69:11:c8:49:67:b4:e4:d0:7f:de:ff:
                    9c:a5:06:29:21:04:0d:cc:b5:e3:67:98:8a:14:36:
                    42:b8:82:cf:a9:b2:73:29:1e:03:d7:5f:4e:af:67:
                    8c:db:f2:9c:54:76:50:95:e9:1f:a6:9b:14:02:43:
                    1e:78:6b:f8:28:2b:5a:12:a4:f0:7f:e3:57:58:ce:
                    63:f7:80:97:16:f7:be:9d:f4:b5:c1:a2:20:63:03:
                    db:e3:6e:03:9b:17:b8:4f:87:f7:4b:b3:73:b2:f0:
                    1c:7c:93:27:25:75:15:5c:6f:30:0f:16:5f:3b:c6:
                    02:02:d1:85:ec:da:fd:c9:c4:51:00:4c:50:11:5e:
                    d1:8b:fd:11:7b:15:1b:94:6a:78:5a:38:a3:53:85:
                    58:10:21:29:86:0e:aa:a1:c3:33:a6:9b:18:fc:0e:
                    80:66:8f:16:d1:39:32:92:ba:3c:cd:6e:8b:0a:1c:
                    7a:69:25:f9:91:af:6c:8c:6b:a1:50:53:71:0b:e7:
                    fa:5d:0f:bf:49:c2:43:93:b9:0c:c5:ab:80:42:85:
                    05:38:96:7f:20:8e:75:f4:21:62:71:8d:03:52:77:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:05:9B:B4:92:B3:F8:4A:33:08:BA:FA:48:62:D4:8F:92:17:B2:1F
            X509v3 Authority Key Identifier:
                keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/B370AF6CD18411EF960DE726C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:83e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:97:bd:68:b7:32:17:82:3f:a2:d2:5e:c3:37:0e:83:a5:5d:
         58:da:6f:a5:ad:24:a3:ed:b3:35:ac:f3:cf:f7:4e:fc:8e:ad:
         92:e9:91:90:b9:a0:1e:4b:ab:eb:4b:6b:b9:2f:e4:2e:b3:d8:
         62:7d:b0:0f:18:d9:ae:79:d3:48:49:28:b8:54:f5:9b:28:3c:
         12:53:88:d8:5c:ca:1b:e6:a3:a1:8f:66:d3:e6:12:70:c8:e9:
         66:5c:1f:49:bc:5e:fc:c0:36:ce:74:27:73:2e:28:57:c5:34:
         54:b5:48:94:20:16:82:af:0f:92:a9:82:ed:b6:7c:90:5f:09:
         3d:2f:95:05:23:55:d8:62:25:77:b3:4e:2e:4c:20:8e:f2:ea:
         34:e3:c5:8f:23:5e:55:09:56:5b:9f:1a:7d:79:ef:58:40:61:
         84:77:12:a4:de:2d:7e:ee:b0:18:5f:93:d9:33:6e:23:84:80:
         58:2a:78:81:cc:0b:b9:d2:80:f0:78:08:c2:34:1d:37:77:9c:
         c6:49:e9:61:ae:36:30:c3:d3:d3:2a:33:61:cd:34:76:6f:fa:
         91:2f:b3:25:28:59:4e:89:2a:70:ae:7c:91:cf:b1:7a:b3:8d:
         56:7c:d9:cf:76:3a:6f:26:17:4c:58:c7:da:f1:ae:b7:69:11:
         9c:3d:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:21 2026 by rpki-client