Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa
File:                     95851A544E8F11F1BB8AFF5DB7833773.roa (raw, json)
Hash identifier:          bjzn1i56aX7nhZkQIU0OEQDjrscerkhHzwk56zyo5ro=
Subject key identifier:   9E:5F:EE:F5:A4:A9:7C:56:E0:C4:4C:14:EF:73:A8:5E:39:C2:BF:F2
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1B76
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa
Signing time:             Thu 06 Aug 2026 16:30:17 +0000
ROA not before:           Thu 06 Aug 2026 16:30:17 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        2401:1d80:3000::/40 maxlen: 48
                          2401:1d80:3100::/40 maxlen: 46
                          2401:1d80:3200::/40 maxlen: 48
                          2401:1d80:3300::/40 maxlen: 46
                          2401:1d80:4000::/40 maxlen: 46
                          2401:1d80:4100::/40 maxlen: 46
                          2401:1d80:4200::/40 maxlen: 46
                          2401:1d80:4300::/40 maxlen: 46
                          2401:1d80:5000::/40 maxlen: 46
                          2401:1d80:5100::/40 maxlen: 46
                          2401:1d80:5200::/40 maxlen: 46
                          2401:1d80:5300::/40 maxlen: 46
                          2401:1d80:5800::/40 maxlen: 46
                          2401:1d80:5900::/40 maxlen: 46
                          2401:1d80:5a00::/40 maxlen: 46
                          2401:1d80:5b00::/40 maxlen: 46
                          2401:1d80:6000::/40 maxlen: 46
                          2401:1d80:6100::/40 maxlen: 46
                          2401:1d80:6200::/40 maxlen: 46
                          2401:1d80:6300::/40 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7030 (0x1b76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Aug  6 16:30:17 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74b699-6993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:15:bd:b0:0d:56:91:df:a1:f2:ef:bd:4b:
                    6b:3d:f6:f6:20:b5:a0:3f:bf:a5:1c:54:09:eb:ed:
                    7a:3b:86:90:a3:2d:31:2c:a9:31:22:75:69:cd:b9:
                    ac:e8:d4:9d:7e:9b:6a:af:0d:38:22:f1:f7:7b:c8:
                    61:e9:48:c3:05:3a:e6:5f:36:7a:55:1c:a6:fa:55:
                    a0:1a:41:48:8b:54:62:7f:92:49:58:c3:c2:b6:7f:
                    f6:9f:75:4c:db:40:30:be:08:22:7d:7a:cc:af:e7:
                    3e:28:c2:5c:81:bd:83:ea:69:0b:c5:76:01:41:cc:
                    fe:e2:a3:18:9d:6b:5c:08:82:7f:d3:69:df:57:47:
                    c3:aa:ef:d4:44:fd:d4:3c:61:bf:99:38:83:2c:7c:
                    47:2e:f2:20:6b:bb:5f:5f:f3:3a:99:21:8b:dc:b6:
                    c9:55:e0:8e:8f:56:c0:bb:37:68:28:72:53:be:b2:
                    d3:26:02:f9:8f:77:cd:c8:b2:77:d3:0b:14:50:ab:
                    f3:b9:5a:a4:54:1e:88:ac:f4:5e:8b:82:20:46:3a:
                    11:c1:ce:35:99:1c:c2:2b:bb:6d:65:cb:f1:b8:c1:
                    0c:b9:20:90:2a:7e:42:de:31:fa:1a:3c:d4:06:df:
                    aa:8a:a9:22:94:71:7c:a4:18:6b:75:d6:f8:76:7f:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5F:EE:F5:A4:A9:7C:56:E0:C4:4C:14:EF:73:A8:5E:39:C2:BF:F2
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/95851A544E8F11F1BB8AFF5DB7833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1d80:3000::/38
                  2401:1d80:4000::/38
                  2401:1d80:5000::/38
                  2401:1d80:5800::/38
                  2401:1d80:6000::/38

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:d5:67:0d:a1:59:a3:fe:91:35:d6:e1:69:0e:50:c8:39:
         97:be:f5:e6:e5:b0:48:cc:2c:c3:33:7a:ce:fa:fd:68:77:d9:
         6f:1d:d7:0a:32:2e:8b:21:7f:2b:bb:fa:8e:b2:98:6b:26:86:
         a1:2b:b6:c0:1a:e5:f3:29:41:64:59:e8:6e:51:8e:25:73:6b:
         90:0f:b7:a4:18:6d:a7:eb:8e:79:01:95:5f:89:6c:7a:63:1d:
         07:f5:17:38:25:ad:9a:e4:71:01:7b:f6:ff:5f:ce:61:57:c5:
         66:76:49:4b:ff:0c:eb:3a:66:ee:77:f8:64:20:18:f7:64:7d:
         8f:a2:b5:b3:86:f8:f1:62:b7:5d:10:be:0d:c2:83:83:73:a5:
         16:0f:ff:e0:52:b4:2a:78:44:c1:fe:9b:92:07:b0:69:36:28:
         e5:e8:44:b4:93:de:33:c8:22:1f:6e:0a:ee:af:92:01:87:69:
         fc:06:2d:4b:3a:fa:d9:50:7c:39:10:03:f8:48:7a:1d:28:ac:
         ab:76:48:1c:c2:9e:c6:24:2b:8a:4c:a3:5a:ee:ff:97:e6:a1:
         e4:7b:d6:89:c4:45:54:df:a4:84:41:d7:96:b7:4c:4e:2c:b0:
         c9:08:f4:f0:06:41:2c:fc:f9:9e:69:e3:10:2e:93:b2:a7:27:
         39:e1:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:49 2026 by rpki-client