Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/469F3FE44CDF11F08D2EFF16C4F9AE02.roa
File:                     469F3FE44CDF11F08D2EFF16C4F9AE02.roa (raw, json)
Hash identifier:          a0gJVidh3CzBFwIa6hJB8PakgEK14/bCQvJ2r5FU3Og=
Subject key identifier:   FA:46:72:71:F2:D5:8A:79:8E:7D:0D:DA:48:FF:F4:41:71:2E:4B:CF
Certificate issuer:       /CN=A916523A/serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
Certificate serial:       D0
Authority key identifier: CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/469F3FE44CDF11F08D2EFF16C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 08:34:05 +0000
ROA not before:           Thu 23 Jul 2026 08:34:05 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153980
IP address blocks:        2001:df5:c0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl
                          rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916523A, serialNumber=CC44B67BD18F45F6E137ADE4731335A551A66127
        Validity
            Not Before: Jul 23 08:34:05 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a61d1fd-234d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:ac:62:6b:fe:38:5a:3d:82:5d:f9:35:b6:
                    f7:2e:30:da:11:88:aa:cc:45:d2:ae:7d:c1:2c:da:
                    32:e1:a7:05:ba:8d:14:c3:41:13:d7:16:a0:7f:c6:
                    8b:b3:66:3e:2f:27:1d:ac:03:af:4f:a0:45:6d:7a:
                    14:22:cc:60:8e:c3:9d:72:31:64:b8:b9:bd:ac:85:
                    66:35:6e:ac:e5:6f:21:e7:fc:b3:6a:49:c1:45:3c:
                    b6:bd:16:d8:38:29:e5:08:2e:27:9a:d0:68:21:7b:
                    65:ea:2f:4d:07:b1:9b:8d:eb:0d:c8:da:c2:e6:51:
                    27:f9:21:47:cc:1a:8d:45:95:c7:80:eb:b6:e7:6b:
                    db:7a:aa:12:8a:62:49:43:5f:d4:80:7d:16:6c:a2:
                    98:97:d2:7d:e1:f8:29:79:1b:4d:f1:7c:48:6c:e2:
                    18:08:9d:ae:ba:9b:3b:a7:d4:82:48:54:2c:78:a9:
                    35:da:57:fe:aa:d1:4c:d1:87:57:65:c5:3d:df:f3:
                    9f:06:87:b3:42:3b:0c:21:21:94:6d:27:43:6a:1e:
                    56:ae:d5:28:e4:fc:77:b6:b7:16:62:06:3c:7c:8e:
                    52:86:51:44:8b:92:64:54:5b:3e:e9:f8:2f:40:e5:
                    62:c0:b8:3d:d7:26:8a:33:02:90:54:27:5e:66:91:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:46:72:71:F2:D5:8A:79:8E:7D:0D:DA:48:FF:F4:41:71:2E:4B:CF
            X509v3 Authority Key Identifier:
                keyid:CC:44:B6:7B:D1:8F:45:F6:E1:37:AD:E4:73:13:35:A5:51:A6:61:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/zES2e9GPRfbhN63kcxM1pVGmYSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zES2e9GPRfbhN63kcxM1pVGmYSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/E75B878C4CDD11F0BFA08F80C4F9AE02/469F3FE44CDF11F08D2EFF16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:c0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:12:59:bc:23:76:fb:ba:9b:5e:4f:55:ac:a8:72:bc:2f:63:
         14:7b:eb:85:00:58:0f:10:fe:07:69:fa:06:4a:e9:cc:c9:84:
         30:35:69:7f:54:db:8f:f3:64:43:d5:9f:21:5a:92:62:41:50:
         46:8d:2b:71:71:ff:72:b3:68:da:93:96:df:15:56:52:57:fe:
         aa:e0:d8:0b:07:f9:8e:1f:78:fa:4a:fe:31:f4:9a:e7:6b:b4:
         67:77:26:bb:c6:7b:3e:ec:cc:b8:5a:0e:69:9d:98:24:7e:59:
         99:c1:c5:4d:88:e1:9e:df:1f:8c:66:93:f0:0e:00:18:52:a2:
         96:ab:ac:86:e3:12:18:43:7a:25:03:1e:92:f9:c4:3d:f5:0e:
         74:20:a5:c8:03:f7:b9:61:a7:b0:94:e7:3a:80:cd:74:9d:f5:
         c1:32:59:7a:19:94:e1:e4:b1:07:0b:c0:80:b1:34:db:f0:b6:
         bc:e7:30:da:a5:16:b9:1d:48:4b:b0:f6:d3:6f:77:31:7a:79:
         54:66:84:92:26:6d:0c:12:95:f7:02:69:43:e9:bb:94:91:63:
         c9:09:09:db:5c:ec:73:de:b7:cc:26:05:e5:9d:c9:62:3a:d8:
         49:82:ba:5b:69:3a:10:cc:bb:2d:bf:8e:ad:2d:02:ae:c2:55:
         a5:f3:69:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:58 2026 by rpki-client