Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa
File:                     14C4C7D4002611EFBD462953C4F9AE02.roa (raw, json)
Hash identifier:          XNwJRzeuKeHDcBqNhhKVmwXSnNPS4SmsbpnOy4X5BaY=
Subject key identifier:   6E:B5:2C:B4:A3:A8:B2:86:AE:8A:37:66:56:1D:8C:F8:0C:49:BB:4E
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       031A
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 02:52:28 +0000
ROA not before:           Fri 07 Aug 2026 02:52:28 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     216183
IP address blocks:        2401:b60:19::/48 maxlen: 48
                          2401:b60:20::/48 maxlen: 48
                          2401:b60:21::/48 maxlen: 48
                          2401:b60:210::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Aug  7 02:52:28 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a75486c-f656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:d3:79:f7:e8:08:e4:2c:68:7c:c2:fb:86:
                    7a:45:47:42:f4:09:f8:5c:26:17:d1:88:d1:73:b8:
                    39:2d:4c:03:3b:2b:1d:53:88:55:06:29:67:ad:09:
                    6f:c6:f8:27:3a:e0:1a:0f:6b:04:5c:cb:0a:45:1c:
                    39:9e:42:3d:99:f6:8c:0b:47:87:a7:e9:1a:d7:dc:
                    f8:1b:c2:5f:36:12:b4:ae:c2:67:83:b7:38:32:41:
                    fe:10:8b:62:1b:fd:f3:01:9c:64:65:2f:8b:3d:ab:
                    c1:6a:c8:07:70:dc:48:4f:9d:b0:2e:79:f8:85:03:
                    75:96:0d:d0:38:aa:5f:6c:06:c0:b0:eb:10:72:d5:
                    23:87:6b:0d:af:54:ab:05:3a:f8:90:a5:4c:c0:38:
                    50:7d:c0:7f:21:e8:5d:0c:e8:c9:3a:21:ca:47:26:
                    97:5c:13:47:f4:d7:e5:8a:94:a8:e9:b1:fb:68:ce:
                    bb:0b:35:e5:0e:40:e4:af:26:eb:de:eb:16:f9:00:
                    dd:df:9d:47:0a:7b:d4:21:b4:ec:15:8c:78:3a:27:
                    0c:dc:a6:51:e2:09:cc:d8:01:65:bf:86:4f:59:17:
                    20:f1:48:25:95:e5:1b:19:87:10:fa:15:be:08:97:
                    ba:e5:0a:2f:fe:81:98:46:28:04:c0:0e:f5:89:bc:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B5:2C:B4:A3:A8:B2:86:AE:8A:37:66:56:1D:8C:F8:0C:49:BB:4E
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/14C4C7D4002611EFBD462953C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:19::/48
                  2401:b60:20::/47
                  2401:b60:210::/44

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:ed:96:dd:58:6a:38:56:3c:96:96:1d:28:b9:da:8f:ab:
         9b:c1:3b:05:3c:c6:fe:c4:fd:89:2f:d4:48:46:65:13:70:c1:
         ec:46:ff:47:3f:55:eb:f1:80:af:03:3d:e3:af:c1:80:65:d8:
         5c:b7:b1:3f:9f:17:9f:2c:24:28:3f:59:93:ec:d5:9f:bf:27:
         d6:79:13:53:06:5b:e5:24:f2:15:fe:b4:f7:36:44:d0:4b:bd:
         ce:39:6a:d1:64:f3:00:63:08:35:95:72:77:5d:d9:66:d7:61:
         2c:d3:09:fd:c1:b9:a1:5d:a7:56:88:25:6c:c1:ae:ad:d3:0d:
         9f:84:14:c8:7a:d1:84:d3:83:82:8d:ac:c5:a5:62:3f:98:33:
         d5:71:b0:22:09:4f:60:f4:6f:ed:f4:ca:ef:b1:07:3b:12:c7:
         2a:4c:1a:30:2b:60:e2:8d:66:be:14:4d:fe:01:ec:c9:5c:56:
         b6:c0:f9:11:c1:ab:b1:f5:76:04:c9:8d:c0:82:00:5a:99:a2:
         0e:9b:61:66:b2:a9:f4:fd:22:a0:bf:6e:fe:39:04:ee:ea:27:
         3f:df:84:04:65:a6:b9:2f:aa:b3:a1:e5:23:f4:d0:52:e0:01:
         38:4b:46:b0:e1:49:ad:18:44:bf:f7:e3:7e:8f:75:63:34:49:
         a9:23:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:38:00 2026 by rpki-client