Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa
File:                     FBB6EA4E558B11F082FD5637C4F9AE02.roa (raw, json)
Hash identifier:          bMi2hylwOv+y3lsJeuDpvluBUTPX8zaf7HLJqLtbS1k=
Subject key identifier:   CC:83:55:C1:33:95:E9:AB:5D:65:93:1B:B8:5C:89:41:30:00:A0:20
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       02F8
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa
Signing time:             Thu 05 Nov 2026 03:49:16 +0000
ROA not before:           Thu 05 Nov 2026 03:49:16 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     139311
IP address blocks:        2402:be0:feff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Nov  5 03:49:16 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aebfcbc-b84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:f0:fb:3b:8c:bd:2d:a7:38:01:5b:98:85:
                    5a:26:d7:c1:53:13:e6:b7:70:14:c1:6f:b3:4f:5c:
                    40:c0:3e:b2:06:20:4b:32:58:33:4d:9d:97:82:bd:
                    b2:45:33:74:e0:49:39:77:0c:01:2a:20:7d:d3:ac:
                    ed:9b:18:e9:24:82:5b:c2:71:cb:4c:42:f0:0d:a6:
                    b3:45:d9:7f:02:e6:0e:1b:1f:1a:11:c9:74:80:91:
                    90:82:56:e1:a3:3b:da:f7:12:6b:0b:f6:78:c4:47:
                    99:9d:2a:c4:b2:43:3b:c3:17:ce:88:ef:8a:18:10:
                    e2:95:99:bb:70:ce:95:28:06:07:b9:e0:ed:9c:5b:
                    b5:85:09:97:21:9e:ad:ac:a1:3d:db:e4:cf:a1:92:
                    00:f6:7a:5f:9e:3a:2f:47:db:84:5b:46:9b:3f:5b:
                    00:22:f6:6e:83:bf:20:59:1d:2a:af:2a:22:d3:c1:
                    fe:14:d3:6e:83:b3:65:1e:23:ca:d9:1b:a3:7c:21:
                    34:12:c5:b7:98:13:0f:70:22:b3:0b:df:19:f6:d3:
                    17:61:2d:56:08:24:2f:56:36:e3:09:ce:5b:03:2b:
                    39:dd:3e:2a:2d:b0:0c:3f:dd:4a:b0:33:36:59:82:
                    3c:aa:67:a0:da:e2:cc:43:0c:1b:08:9d:a4:77:4a:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:83:55:C1:33:95:E9:AB:5D:65:93:1B:B8:5C:89:41:30:00:A0:20
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/FBB6EA4E558B11F082FD5637C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:feff::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:2e:35:f7:ac:41:42:9d:92:e8:c8:00:19:a8:cc:0f:fd:76:
         ca:56:5e:9d:81:7d:66:85:5c:1f:f8:12:66:ac:00:b7:90:f3:
         f3:a1:eb:4a:ca:25:0c:bd:c2:ea:80:5b:e4:60:75:57:bc:ef:
         3b:9a:e5:a0:b4:f0:ae:4a:11:6c:51:2f:71:91:b9:2f:a9:10:
         af:24:1e:8b:9c:a1:90:bb:42:45:3a:af:38:53:8a:2b:5c:73:
         30:dd:96:b0:6c:c3:ed:ab:0c:de:27:db:4d:c2:15:89:7d:e8:
         bc:5f:c0:5d:29:a5:68:14:df:a0:f7:38:0c:e6:d7:50:ce:d0:
         f4:a1:b4:03:05:1e:28:8b:97:e0:c0:bc:05:30:79:c7:2e:de:
         3f:46:b1:17:98:37:3b:50:53:d8:2f:86:e3:95:85:57:9f:57:
         48:8d:4b:34:d1:68:75:b3:d1:c7:22:cc:b7:6c:82:82:4c:34:
         f6:be:bb:c2:b9:66:88:30:b1:16:18:be:07:5c:5b:80:2b:2a:
         5f:57:b3:e3:93:30:e7:fa:0e:9a:b9:6d:7e:64:9b:82:e1:2d:
         9d:eb:af:c0:f9:01:59:ab:bc:8c:10:12:13:ee:f4:c1:06:30:
         32:cb:38:0f:96:f8:ca:34:32:b2:17:9b:9d:32:13:7b:2f:86:
         42:46:49:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:30:29 2026 by rpki-client