Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa
File:                     8862654086CF11EF901ED838C4F9AE02.roa (raw, json)
Hash identifier:          U6VvuhJPseJ0lHoXp3AkLW41H91M0XAPA4H1vStBJ74=
Subject key identifier:   66:AF:68:B9:BC:A0:8B:DB:92:17:54:13:3E:F2:2E:D1:C1:F8:9B:4E
Certificate issuer:       /CN=A91106C7/serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7
Certificate serial:       0198
Authority key identifier: 78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa
Signing time:             Mon 27 Jul 2026 06:54:43 +0000
ROA not before:           Mon 27 Jul 2026 06:54:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152928
IP address blocks:        2001:df3:f640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl
                          rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91106C7, serialNumber=78FBFCD8D532BFBBAB7D79C51A7738EA494C26B7
        Validity
            Not Before: Jul 27 06:54:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6700b3-32ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:ae:b9:f0:05:d3:08:76:c8:09:c5:35:d4:
                    b8:00:76:3e:03:6c:5a:56:fe:6a:11:b8:39:e0:50:
                    5a:e3:aa:01:52:f1:61:49:0a:cb:c7:f7:ec:d5:50:
                    9a:62:4e:1b:9d:f5:31:b3:66:81:96:31:95:3d:fd:
                    9a:58:81:58:2a:7d:f3:92:47:2a:b6:37:c5:5a:a6:
                    b4:ed:bb:cc:06:99:7a:f8:2e:23:a1:a0:c8:3b:1a:
                    34:ac:a6:e1:ed:83:c1:39:ef:04:84:a1:0a:fd:cc:
                    cc:4d:05:c1:38:e4:fe:e6:7f:b4:94:06:4e:fc:d8:
                    1c:61:41:5a:02:93:38:ff:c9:db:02:0f:bc:6e:21:
                    0c:4f:06:98:cf:ea:22:d2:b2:2e:d0:5c:05:7e:47:
                    70:3a:d5:3b:8a:4e:fb:ad:49:06:a8:ed:87:5d:00:
                    eb:57:8e:2e:79:88:b7:77:3b:e1:a9:68:ee:5e:f8:
                    68:d7:f4:e1:92:df:e6:e7:22:a2:33:8e:c0:8d:7f:
                    b5:b7:33:04:19:83:58:6f:8b:76:e6:d3:01:bc:c6:
                    1f:a9:50:5c:05:4a:f3:5a:11:88:7c:83:9f:f8:af:
                    9e:9d:bf:7d:b3:d2:20:bb:e0:ea:6b:66:9f:5c:c6:
                    46:24:9a:e3:56:40:e9:a8:39:e3:33:b1:f1:08:6f:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:AF:68:B9:BC:A0:8B:DB:92:17:54:13:3E:F2:2E:D1:C1:F8:9B:4E
            X509v3 Authority Key Identifier:
                keyid:78:FB:FC:D8:D5:32:BF:BB:AB:7D:79:C5:1A:77:38:EA:49:4C:26:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/ePv82NUyv7urfXnFGnc46klMJrc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ePv82NUyv7urfXnFGnc46klMJrc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/77B69434320E11EFB6E0DA76C4F9AE02/8862654086CF11EF901ED838C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f640::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:2a:6a:cb:13:d4:46:7e:86:1a:90:43:98:8e:20:8b:7b:20:
         45:8c:14:d6:32:97:36:b7:90:0f:aa:5d:53:58:ef:3d:f0:66:
         38:ae:bf:d1:77:4d:c6:56:fd:8d:ab:71:56:4f:4f:44:f3:68:
         c6:e6:61:cd:65:51:b8:04:a0:9f:b6:9d:23:db:f3:13:f2:59:
         fc:d7:04:04:67:6d:74:19:e3:54:e9:e0:ba:0a:81:07:b0:ff:
         69:77:9f:3c:e8:f3:d6:e5:bb:65:54:47:df:b9:4d:ec:28:d9:
         70:c6:5a:95:96:18:91:4a:2a:a8:a6:a5:1c:4e:69:ac:7b:7a:
         31:30:1f:01:9a:43:4f:2f:c4:bf:c8:13:56:10:d5:ea:5b:8b:
         6e:fd:d0:cb:00:45:3b:24:f6:3f:b2:4c:be:97:63:57:46:e4:
         e5:3f:c7:82:0b:35:4f:4c:19:7d:0d:86:62:ac:75:1c:7c:ea:
         14:e4:52:5c:cc:4f:1e:e6:1d:00:f7:26:2c:c7:fe:8c:7b:a4:
         02:c2:aa:27:2f:63:e1:9a:1b:d4:ea:e2:d5:f9:0d:75:f4:ee:
         16:e1:1b:36:4e:91:d2:15:66:81:e7:a2:a4:1f:b5:63:d9:f0:
         ca:d7:7e:7a:17:bc:f8:19:e0:ef:26:4b:c2:35:35:6d:95:e9:
         1c:01:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:49:36 2026 by rpki-client