Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/D2DF3ACCE25911EF9C741573C4F9AE02.roa
File:                     D2DF3ACCE25911EF9C741573C4F9AE02.roa (raw, json)
Hash identifier:          /8aNoHkd5WMBzFS5RQwttij8J4S9+4VU4+ch/fZt/28=
Subject key identifier:   48:52:59:69:A7:DC:28:16:51:3A:2A:30:3F:0B:9A:01:39:16:79:A2
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       031F
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/D2DF3ACCE25911EF9C741573C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 02:52:38 +0000
ROA not before:           Fri 07 Aug 2026 02:52:38 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     53835
IP address blocks:        2401:b60:e100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 02:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799 (0x31f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Aug  7 02:52:38 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a754876-c6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:68:03:b5:ce:74:cf:d6:7e:96:fc:89:42:
                    86:43:64:34:e2:7e:7c:bc:f3:99:a0:b0:34:17:8f:
                    a1:f7:ca:4a:28:7a:de:63:97:93:9e:6a:12:c5:03:
                    44:28:09:39:76:ae:9f:b4:7c:47:58:d8:1f:74:9b:
                    f5:36:d4:43:f7:fa:bf:c2:dd:86:05:9a:c1:6e:d0:
                    f6:c5:64:92:19:d4:52:45:b3:74:d2:1a:38:0a:28:
                    b3:8c:8d:be:38:dd:ec:dd:ac:f0:05:4c:7f:82:96:
                    56:b1:11:ee:d4:3e:f7:a4:bb:c6:72:b3:03:8e:2b:
                    36:ff:31:54:40:51:24:d2:1a:2d:80:21:60:23:c4:
                    cb:93:5e:f2:7c:3f:2c:d9:98:e4:16:8c:2c:51:6d:
                    a4:58:76:ce:c5:88:6a:ac:81:49:31:fa:ad:e0:b6:
                    59:73:65:2c:51:09:21:aa:41:27:45:1f:99:79:2a:
                    21:c3:1c:d8:61:13:9e:f4:a6:99:49:be:09:f6:ad:
                    30:38:1a:c7:44:77:59:73:a8:75:04:73:17:87:1a:
                    66:4a:9c:54:e8:37:b1:d1:43:aa:50:96:0a:e0:78:
                    20:68:bd:24:f3:b5:eb:49:e2:53:1b:a6:73:89:3f:
                    33:00:87:07:e4:79:1f:de:a9:3b:71:89:6e:47:e9:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:52:59:69:A7:DC:28:16:51:3A:2A:30:3F:0B:9A:01:39:16:79:A2
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/D2DF3ACCE25911EF9C741573C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:3f:2f:24:47:29:b3:b3:2f:d6:3d:f5:72:31:0d:ec:04:f7:
         ac:21:53:7b:53:21:9f:d6:47:f3:92:2b:f7:83:3b:eb:7a:e6:
         29:43:0a:88:10:fa:3c:04:d5:4a:77:cc:40:7f:67:c4:c2:bb:
         a5:ba:75:89:13:79:9a:f8:1f:a3:7e:3d:c1:d5:7d:c6:21:fc:
         2a:dc:1a:26:93:7f:24:5b:42:0c:93:be:8c:32:df:19:bf:58:
         de:c9:94:72:fe:12:1f:7d:71:a7:a8:66:b9:dd:59:dc:7f:0b:
         c5:b8:36:51:00:6a:56:aa:f8:16:31:6f:48:47:a3:8c:6f:ba:
         d4:d7:67:99:42:1e:16:8d:a6:c6:ba:5c:d0:f1:bf:5e:e0:14:
         86:ef:91:f4:b8:23:41:80:c4:55:5e:df:85:e0:00:5a:d1:01:
         66:8d:b7:50:b9:67:1a:52:15:de:65:7f:b0:78:33:73:57:15:
         d5:38:2f:2e:04:94:75:bf:a3:6a:fc:ac:ad:36:fa:f7:c7:c1:
         b2:b7:38:4d:4a:34:86:b7:a5:92:a7:f3:67:e8:72:61:e4:3a:
         4f:b2:cd:90:e9:0c:92:60:04:93:0f:af:15:40:aa:6a:d4:9f:
         97:b7:3e:81:a2:4e:6a:bd:e4:cb:9a:ec:46:a4:d5:ca:ae:1e:
         08:ca:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:21 2026 by rpki-client