Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/F479571EA9E811F1B4B821653A11F970.roa
File:                     F479571EA9E811F1B4B821653A11F970.roa (raw, json)
Hash identifier:          AxdW5DLzXquSXQ5Nrhb4JxNTR1hChqtfyBA1g4oquxM=
Subject key identifier:   74:62:7E:3F:1A:ED:F8:66:8B:8C:46:D1:76:0F:8F:47:56:B7:7E:28
Certificate issuer:       /CN=A91647ED/serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
Certificate serial:       95
Authority key identifier: 63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/F479571EA9E811F1B4B821653A11F970.roa
Signing time:             Sun 06 Sep 2026 11:49:03 +0000
ROA not before:           Sun 06 Sep 2026 11:49:02 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141217
IP address blocks:        2402:34a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=634EAC19B4AD4B2A4D4128115F9F556794CC7523
        Validity
            Not Before: Sep  6 11:49:02 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a9d532e-95d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:28:ef:b7:05:46:a4:0f:ff:48:73:65:52:
                    0d:cb:c7:08:a4:5d:8d:c9:db:f1:d1:e3:9c:3e:76:
                    3a:fe:78:ed:11:67:44:da:d9:bc:77:d7:28:8b:f8:
                    76:9b:56:ce:3b:77:c0:c7:a0:cc:3f:5b:d9:58:ef:
                    e5:1b:d4:86:a9:a3:6d:15:c4:19:e7:4a:88:fd:71:
                    67:ee:e6:02:6a:3a:04:e5:f6:f8:46:6b:18:d1:b1:
                    a5:c6:40:e2:00:ed:97:59:91:34:cd:3a:c1:18:3a:
                    98:5d:6f:16:1e:82:ee:ea:7e:a5:8f:95:9c:b0:a2:
                    c6:36:1f:90:91:fc:0f:20:fe:22:5d:16:de:51:b8:
                    26:7d:05:68:78:86:70:d0:68:e4:49:25:a9:eb:ab:
                    87:41:b7:ab:66:9a:cb:13:3e:81:39:2e:f7:63:c5:
                    b4:da:0e:6f:26:0c:da:ba:63:22:10:f4:8f:0a:99:
                    0b:4d:89:46:fc:23:c3:88:d0:c9:1d:ff:a8:11:25:
                    b1:0a:70:11:64:ce:e3:09:43:5f:f7:54:40:89:38:
                    df:f2:d0:0c:82:ba:71:0f:05:32:2d:ea:cd:c1:b4:
                    63:fa:4e:0d:75:ed:4a:9b:dd:8c:80:0d:86:e8:8c:
                    12:a4:78:6f:46:37:d8:29:05:80:4b:19:55:f5:72:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:62:7E:3F:1A:ED:F8:66:8B:8C:46:D1:76:0F:8F:47:56:B7:7E:28
            X509v3 Authority Key Identifier:
                keyid:63:4E:AC:19:B4:AD:4B:2A:4D:41:28:11:5F:9F:55:67:94:CC:75:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/Y06sGbStSypNQSgRX59VZ5TMdSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y06sGbStSypNQSgRX59VZ5TMdSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/D474691ECB8011F0840F541CC4F9AE02/F479571EA9E811F1B4B821653A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:34a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:9d:ce:f2:39:ce:71:d6:0b:76:95:ba:b5:2b:85:a8:25:
         c5:39:3c:01:d0:74:7a:58:07:ca:1a:d5:4a:c1:8d:fb:cf:0b:
         68:f5:50:19:8c:7c:92:f1:24:86:2e:a1:2c:2c:a3:fb:9c:5d:
         a6:f0:71:9a:ac:24:03:f7:c5:63:94:21:59:ad:58:ee:1a:97:
         da:cc:16:68:ea:ce:08:fe:82:3c:54:e8:72:a3:d7:b8:95:54:
         93:66:f3:ed:a3:b8:d9:f2:6f:4f:ee:ab:ae:25:b7:c9:61:2b:
         b8:ee:72:54:f4:8e:e5:bd:6c:16:b7:3a:00:36:4d:72:12:26:
         17:38:8d:4b:9f:96:63:79:18:1b:50:8b:44:f0:c8:9a:d3:d9:
         c9:55:83:af:2c:21:b8:30:bd:f7:f0:47:ce:2e:27:15:be:95:
         e3:31:31:85:e3:1a:66:51:c3:4f:5b:ac:06:73:54:1b:b1:37:
         83:52:b4:35:f3:6b:20:ff:9c:46:a3:8b:36:e4:ef:db:25:0c:
         b2:61:49:7b:1f:f3:03:35:99:0a:42:93:69:65:19:c1:cf:38:
         0d:01:ec:99:f7:40:ba:72:49:02:f8:e7:80:ee:0b:9f:c5:61:
         99:ed:80:21:d9:ab:58:55:94:98:bf:c6:fe:34:2d:48:b4:df:
         e1:f7:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:48:46 2026 by rpki-client