Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/EAC6021AD7FD11F18C87F15C1F66CEF9.roa
File:                     EAC6021AD7FD11F18C87F15C1F66CEF9.roa (raw, json)
Hash identifier:          do/Ks940b40mcagbfFTKz+QsHZrW+8WgeGmDL1si7w4=
Subject key identifier:   A5:CA:5B:49:41:4B:43:10:B6:7D:71:9B:F1:41:B2:07:F7:07:B9:CE
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0883
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/EAC6021AD7FD11F18C87F15C1F66CEF9.roa
Signing time:             Wed 04 Nov 2026 03:14:59 +0000
ROA not before:           Wed 04 Nov 2026 03:14:59 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     1054
IP address blocks:        2401:2660:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Nov  4 03:14:59 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aeaa333-0b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:52:b4:5b:71:48:8b:2b:2e:88:9b:25:51:
                    9c:30:36:ec:fa:ea:33:db:c5:9e:0d:7c:7f:02:39:
                    ee:c7:90:17:0c:9a:aa:61:68:dd:14:a6:0e:4d:a9:
                    62:7a:ba:52:af:08:98:cd:00:a9:58:50:98:f7:d7:
                    b9:80:40:1f:78:37:db:48:3b:54:8a:cc:20:23:a8:
                    26:e0:09:22:21:b8:5f:6a:e1:37:c5:09:c0:3d:39:
                    a8:67:4b:a4:c1:c3:1b:46:3e:d3:c0:f0:2b:69:bf:
                    b3:30:bc:36:c5:08:d7:8d:73:7e:6c:30:b1:9e:18:
                    03:d1:ea:6a:40:95:c5:e2:35:e8:12:87:88:27:69:
                    ec:61:c3:af:0c:5c:c1:1d:83:c0:be:ad:c1:a1:00:
                    35:9f:36:66:7d:8d:f2:0c:68:3a:0c:8f:db:63:db:
                    a9:fb:15:1a:09:62:57:c9:c8:f4:a2:a9:9d:2f:de:
                    b8:2a:1c:21:e3:8d:3e:6c:6d:ca:5a:c8:5e:11:c7:
                    0a:07:18:78:45:58:29:b3:44:02:dd:ed:05:8a:d3:
                    68:ef:2a:03:4d:c6:d7:5d:03:54:84:e5:c8:16:39:
                    c2:b8:d2:49:ae:39:ac:1b:a6:d2:44:8a:53:5c:b8:
                    9a:0e:b6:51:b6:da:82:77:95:a1:ee:e4:b9:6d:a1:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CA:5B:49:41:4B:43:10:B6:7D:71:9B:F1:41:B2:07:F7:07:B9:CE
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/EAC6021AD7FD11F18C87F15C1F66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2660:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:30:a5:40:40:a2:9c:9e:ef:48:02:f9:d1:e6:86:b0:57:c0:
         7f:ce:d1:36:6b:64:d8:a8:01:03:c3:8b:5f:c3:a7:54:ec:ce:
         ec:08:f9:55:f4:34:1e:85:65:ae:79:5f:e6:06:8b:b7:5e:1a:
         96:14:54:fb:d3:cf:ad:eb:4a:24:dc:fc:f5:ca:1a:58:fc:fb:
         e0:ba:05:c6:e6:21:1a:f2:a4:fd:fe:b3:e7:97:63:b7:6a:51:
         d6:ff:19:dc:3e:ab:46:d7:de:3d:e0:02:44:70:4b:64:dc:27:
         9a:01:b6:db:09:41:46:4f:a6:4b:bd:9b:d2:6c:f4:93:d2:72:
         83:5f:52:b0:f1:dc:bf:b1:2d:3c:16:6c:d5:56:7c:f2:85:99:
         d3:52:8c:0f:85:9b:54:e9:9f:89:cb:83:1b:a6:07:cb:a1:31:
         4c:86:16:cd:60:05:b9:c6:ad:98:8b:f5:48:83:fb:43:66:b6:
         c1:b5:60:c7:38:c3:f3:e4:36:23:a7:e4:06:ef:53:36:1f:79:
         26:3f:27:20:23:f8:3e:4a:a3:3b:4b:79:a3:5c:e1:75:97:4a:
         d6:dd:73:01:54:75:39:59:ea:fa:1f:da:4e:ce:d6:3a:68:a7:
         1c:a2:e8:02:39:c2:ae:20:e1:03:5b:66:26:3f:ed:c4:58:2d:
         3a:99:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:59:27 2026 by rpki-client