Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa
File:                     935296A6558B11F0BB2DB436C4F9AE02.roa (raw, json)
Hash identifier:          w6oumHH557ZKVZs6WxXOGaayFm4G0nEQpZ4z3V1LbMA=
Subject key identifier:   7F:44:28:3C:6C:FC:F4:8E:09:E1:50:11:5A:05:96:F2:E4:03:B2:0C
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       02FD
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa
Signing time:             Thu 05 Nov 2026 03:49:26 +0000
ROA not before:           Thu 05 Nov 2026 03:49:26 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     153997
IP address blocks:        2402:be0:fefe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Nov  5 03:49:26 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aebfcc6-eff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:ea:29:66:37:15:d5:93:d0:e6:3a:b3:b5:
                    e5:96:3e:4b:e8:0d:49:e9:c1:d4:3d:37:87:1e:33:
                    fa:39:ec:51:15:56:f9:73:49:03:86:71:72:22:58:
                    03:a6:09:b8:01:09:e3:42:7b:c2:10:98:b8:04:55:
                    86:69:5b:6b:36:1d:df:f2:89:04:dd:e7:0a:21:2c:
                    bf:79:78:f0:bf:2f:b0:a3:57:b3:6a:cf:ba:50:52:
                    49:b8:fe:ba:aa:88:46:fb:1d:07:c0:3b:e2:2b:b3:
                    0b:2a:8d:11:3e:f4:15:59:7f:d1:b6:e6:1d:71:67:
                    10:6f:46:98:65:20:60:5c:7d:9b:65:89:46:92:11:
                    44:c4:b7:44:ff:d3:f4:06:4f:e8:a1:ef:aa:a9:76:
                    30:ab:dd:3e:f8:cc:73:71:e4:b0:66:c9:2e:2c:1e:
                    37:04:36:e9:e2:8d:d0:71:b7:f5:ee:0b:ea:06:0a:
                    d7:11:15:35:87:14:70:b7:d2:ca:c1:ff:4d:dd:55:
                    22:74:2f:5e:e8:9d:2b:df:09:23:35:47:2d:71:9e:
                    53:73:ee:62:7c:e7:79:28:84:17:93:61:01:2c:ff:
                    24:4a:2c:f3:dc:b0:9e:59:b1:e5:2b:52:36:46:7d:
                    43:d9:09:b5:d4:b2:bf:db:09:94:45:73:71:e3:ad:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:44:28:3C:6C:FC:F4:8E:09:E1:50:11:5A:05:96:F2:E4:03:B2:0C
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/935296A6558B11F0BB2DB436C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:fefe::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:58:2b:55:39:4a:2a:13:00:7f:03:fd:ae:48:37:46:44:64:
         d3:56:f9:6f:b4:76:d0:69:32:72:37:65:46:f0:b1:17:05:08:
         38:27:99:a2:1f:30:12:ac:e6:f5:f3:f2:5a:2c:b9:49:57:25:
         54:85:54:02:1d:03:0e:09:be:0c:84:e6:33:89:4a:47:86:99:
         d1:e1:6b:60:61:ae:e0:51:e0:a4:15:75:26:70:26:83:a9:8c:
         90:9e:3a:94:2c:f2:14:94:7b:c0:6a:88:e8:08:df:4a:f2:ab:
         a3:f1:0d:00:c6:e0:83:62:02:3d:2a:98:1f:bf:97:9f:e3:a2:
         43:5a:e1:9d:16:41:0c:25:bb:d6:ea:61:c7:3b:6c:3a:8c:54:
         a4:c7:1d:81:23:ca:7e:38:d4:a3:f4:65:d7:80:5b:b1:18:dd:
         d4:1e:f7:26:01:f5:b5:8c:32:78:6b:c1:d7:3d:1c:ef:f6:c8:
         96:49:36:f1:26:23:4d:1e:e1:9f:f6:1d:c6:ec:27:7c:ca:d8:
         b3:86:25:d7:1b:2a:20:58:14:ea:b1:dd:16:e0:ec:97:dc:0c:
         a9:87:a9:0c:d6:69:e5:31:e0:ed:bd:b3:d3:ab:cd:33:d4:a6:
         5a:40:32:7c:8a:9e:a3:c1:d6:b2:0a:56:41:3c:c3:93:6b:36:
         a5:e8:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:31:36 2026 by rpki-client