Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa
File:                     7350B2AE2BB011EEBF8C0962C4F9AE02.roa (raw, json)
Hash identifier:          sB4yEk24brV7U55HdiVRGWHChZuTolQ5lII/wEtR7uo=
Subject key identifier:   80:A7:5B:D1:A7:D2:45:6C:65:DE:76:30:22:02:7C:0B:D7:FA:79:06
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       36A3
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:17:11 +0000
ROA not before:           Wed 30 Sep 2026 16:17:11 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     148002
IP address blocks:        240a:ee00::/28 maxlen: 28
                          240a:eff4::/32 maxlen: 32
                          240a:eff5::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13987 (0x36a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Sep 30 16:17:11 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3607-e955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:6d:cc:18:6a:fa:8b:02:f4:76:20:73:f5:
                    4f:ce:de:35:59:2b:97:3a:72:c2:82:b7:e3:3e:95:
                    3c:d6:0f:54:40:b9:b5:7f:e1:c3:c6:1c:e4:18:0f:
                    ce:92:28:84:53:74:e2:4b:94:7a:c0:22:ae:c9:67:
                    c9:a7:c0:86:f1:5d:6f:ee:23:31:ad:96:e0:c1:b9:
                    39:ed:ce:c2:99:6e:b6:fd:00:97:2b:2a:39:5b:6c:
                    99:6e:08:0c:df:c7:38:7d:df:38:b9:20:6a:54:79:
                    e1:3e:d2:9d:66:17:f8:cf:46:66:44:27:d4:7e:bc:
                    f6:7c:59:25:5a:72:c0:ea:a8:db:79:d4:a6:e3:d1:
                    60:6e:7a:5e:c2:0d:a6:5c:d1:3a:c0:f7:b3:a0:86:
                    57:ef:44:45:ca:59:d7:6d:54:4a:f5:3b:ae:cf:ca:
                    48:c7:e4:69:70:d3:95:92:36:0a:27:8a:49:8e:ed:
                    ab:ec:09:e1:52:5b:59:3c:5d:d1:a2:0d:c7:01:0c:
                    2d:93:fe:b2:92:c1:d0:f1:db:ae:f7:47:04:54:04:
                    36:31:f2:6f:46:72:b5:6e:15:e4:41:0e:0f:d7:b8:
                    02:75:d8:6b:e3:3e:8b:e7:a8:35:cc:31:17:2b:90:
                    fe:29:cd:fe:03:e0:29:9d:73:7c:4a:19:a8:61:2d:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A7:5B:D1:A7:D2:45:6C:65:DE:76:30:22:02:7C:0B:D7:FA:79:06
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:ee00::/28
                  240a:eff4::/31

    Signature Algorithm: sha256WithRSAEncryption
         54:72:47:df:7d:09:7b:1b:d7:4c:15:e6:d3:ac:86:7a:18:e1:
         e3:aa:ac:1c:03:aa:27:5f:9e:73:f2:4a:70:bf:83:76:7e:e6:
         34:c5:62:dc:1b:4b:1f:75:8f:46:70:e5:7e:24:89:a8:c0:bf:
         53:00:c5:ac:38:de:a4:de:44:e0:96:5f:c5:24:22:24:92:5a:
         a5:6c:0e:d1:41:b2:31:3a:b0:7d:85:96:c9:24:25:22:07:af:
         ab:7d:48:2b:4f:08:62:0c:4a:25:06:30:ac:5d:2c:68:d1:8b:
         6b:c5:c3:d6:fb:55:71:f1:97:6d:cd:cc:f6:31:d5:9e:93:21:
         ee:05:51:b4:56:3d:36:df:e2:b3:65:9e:f7:7e:3d:3d:96:a8:
         e1:0b:c4:15:fa:62:74:55:62:60:de:9f:39:dd:2f:9c:70:88:
         d2:f0:98:69:02:87:3f:c7:dd:58:65:6f:99:ba:d5:f3:0b:54:
         c1:e6:72:30:99:88:e4:06:70:63:10:fa:cb:10:b1:01:c0:f7:
         08:3c:6a:e5:9e:f4:af:af:d2:80:39:4c:4d:12:6e:e4:8e:57:
         86:bb:9d:1d:d1:fb:f7:e4:4f:5f:5d:b5:10:df:51:43:19:bd:
         0f:95:75:62:59:7b:1e:c2:ff:ae:b8:bb:c5:08:96:7e:5f:33:
         1a:a5:11:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:44:03 2026 by rpki-client