Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/E89A614284AC11F1A2853A1C8EA30FBC.roa
File:                     E89A614284AC11F1A2853A1C8EA30FBC.roa (raw, json)
Hash identifier:          VPhwajy+N2wSuiXdOPatR57VMIgQE7fhTICmlszMMqY=
Subject key identifier:   E9:BD:8B:7F:39:4D:B7:3D:49:3C:6C:43:C8:C9:2F:91:5F:B4:C1:03
Certificate issuer:       /CN=A91629D4/serialNumber=FE3896E32A536ACA941926596265736ABA30A160
Certificate serial:       06
Authority key identifier: FE:38:96:E3:2A:53:6A:CA:94:19:26:59:62:65:73:6A:BA:30:A1:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/E89A614284AC11F1A2853A1C8EA30FBC.roa
Signing time:             Tue 21 Jul 2026 02:36:00 +0000
ROA not before:           Tue 21 Jul 2026 02:36:00 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154018
IP address blocks:        2001:df7:3ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.crl
                          rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629D4, serialNumber=FE3896E32A536ACA941926596265736ABA30A160
        Validity
            Not Before: Jul 21 02:36:00 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a5edb10-6360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:87:51:82:e4:46:83:0b:e7:b5:52:a4:69:
                    9e:ab:07:35:36:38:6a:26:13:11:11:8a:a1:71:d8:
                    3d:90:79:a4:1f:03:fa:24:08:b2:51:ea:83:2b:c8:
                    cc:1f:2d:00:ae:66:77:e7:cb:9b:7c:43:c2:b1:27:
                    27:c4:bb:01:5a:57:84:9d:41:c0:b4:52:95:08:2b:
                    6d:6b:da:8b:ff:5e:4f:26:c5:e2:5e:7c:80:93:d3:
                    93:0e:dc:04:53:a2:79:0d:96:a6:01:68:3d:d3:6e:
                    d6:bd:00:13:cf:8f:ac:93:6b:88:cb:c3:27:c4:ad:
                    5d:f0:fc:5b:91:eb:f0:cc:4f:62:fb:ae:32:c6:d0:
                    ca:00:ba:52:a3:d5:9b:d6:be:7d:ee:5e:51:b4:86:
                    18:be:d2:9d:26:26:f5:40:0d:86:d5:ff:90:11:47:
                    d0:98:4e:60:2b:0e:18:c3:57:3b:73:47:48:67:6d:
                    93:02:06:f8:2e:ea:02:2b:05:e9:7d:7c:a2:5d:c6:
                    ae:20:2d:78:0b:13:1a:6b:cd:49:c1:03:18:13:08:
                    7b:02:7f:98:b9:05:96:bb:78:5f:10:31:17:6a:f5:
                    6d:b8:bc:3c:86:f3:8f:36:e0:7d:33:cb:bd:73:20:
                    bb:86:75:44:42:ae:f1:23:bd:dd:f4:f2:10:d4:fd:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:8B:7F:39:4D:B7:3D:49:3C:6C:43:C8:C9:2F:91:5F:B4:C1:03
            X509v3 Authority Key Identifier:
                keyid:FE:38:96:E3:2A:53:6A:CA:94:19:26:59:62:65:73:6A:BA:30:A1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/_jiW4ypTasqUGSZZYmVzarowoWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jiW4ypTasqUGSZZYmVzarowoWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629D4/A8C4E4BE840411F199F5AD1197A30FBC/E89A614284AC11F1A2853A1C8EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:3ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:55:92:45:f8:c7:3c:c5:77:45:3d:fa:90:6c:7d:ba:95:62:
         01:5b:cf:aa:70:1f:39:9e:8e:28:28:cd:6e:d5:37:3f:13:45:
         cc:07:d8:23:4d:c1:ad:90:4f:81:04:9a:40:a0:c9:3d:0b:3c:
         33:94:f4:17:8d:e0:9a:af:93:34:f1:64:20:75:eb:fc:70:24:
         b3:60:f2:cf:29:8d:4a:0c:21:d1:63:a7:a6:aa:8e:fa:5b:2a:
         75:53:7b:85:21:56:de:2e:62:37:8f:73:a2:4d:43:8b:70:8e:
         03:2f:08:c6:be:a3:1c:96:20:c8:62:28:b4:0a:7f:55:2b:4d:
         a3:fb:dd:fe:53:25:8e:8e:b5:e7:08:b9:ac:7d:59:03:ba:8c:
         c1:2d:56:45:d4:f4:e8:39:b9:93:65:df:d0:06:05:a9:a6:29:
         13:f7:54:aa:25:65:4d:78:7c:2d:17:6d:dd:96:22:13:4d:6a:
         b0:38:9f:6f:52:bd:b4:6a:91:3d:61:63:f1:e7:ba:f8:8d:87:
         07:6b:f5:1f:6e:35:b6:e1:a7:46:ad:36:d8:dc:48:31:9d:f1:
         0d:83:8d:88:50:7a:33:31:98:4d:53:5d:67:9f:76:de:6c:dc:
         41:bd:4e:4e:20:50:15:fa:40:73:f3:b0:ec:db:7a:08:48:cf:
         c8:28:78:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:32 2026 by rpki-client