Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa
File:                     DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (raw, json)
Hash identifier:          ZsEUMIVjzFVUMpYghqJxPHIHlWGqgjtA3XVgf6lM9TM=
Subject key identifier:   E2:AD:FB:40:62:5B:04:40:44:0C:39:96:5E:EF:0A:C5:3A:88:92:89
Certificate issuer:       /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial:       09D1
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa
Signing time:             Tue 08 Sep 2026 20:40:56 +0000
ROA not before:           Tue 08 Sep 2026 20:40:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     400105
IP address blocks:        2001:df4:d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
                          rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2513 (0x9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
        Validity
            Not Before: Sep  8 20:40:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa072d8-8018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:81:2c:7f:a2:99:8f:0a:0f:aa:19:aa:e3:50:
                    0d:91:d6:cf:81:9b:b9:54:0e:46:ba:a7:4f:26:24:
                    81:92:c4:3d:51:5d:34:61:c1:fc:b9:37:f9:e1:e0:
                    c1:98:c7:4e:f4:8c:95:5a:26:f1:62:dd:b2:20:01:
                    c2:3c:43:2b:24:55:c3:5b:46:a2:f0:d5:b9:71:c8:
                    ce:c8:9b:a8:dc:f0:74:e5:da:e8:d5:bf:4a:40:26:
                    68:45:9c:a8:c9:e4:7c:fc:87:7e:bd:68:ce:df:0d:
                    dd:d3:a0:22:59:7f:bd:b6:34:f9:bf:f5:09:80:c0:
                    08:39:19:e9:e5:f0:2f:63:ca:1e:17:5a:12:a0:6d:
                    80:49:79:9a:a1:c3:c8:c9:ef:0a:23:7f:ba:d7:fe:
                    81:31:f4:b2:3f:45:82:38:a9:ea:5f:0b:d2:b7:9d:
                    06:d0:12:14:9e:ef:5a:94:9c:0f:9d:3e:f9:d6:b9:
                    c5:48:2e:5e:1d:a3:ed:b0:34:50:4a:8a:68:1c:cd:
                    29:3e:93:04:b9:dc:97:c7:e3:b1:aa:88:e4:0e:d5:
                    af:73:c4:86:25:92:f3:18:3f:f2:24:dd:c4:c3:aa:
                    36:0a:f4:2c:9b:74:51:b6:30:93:55:d5:41:0a:12:
                    36:83:82:24:2e:6c:18:c5:3c:03:2b:11:94:b3:c1:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AD:FB:40:62:5B:04:40:44:0C:39:96:5E:EF:0A:C5:3A:88:92:89
            X509v3 Authority Key Identifier:
                keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:83:77:e1:d0:f9:a9:e7:40:ff:65:3d:c7:58:9f:55:48:df:
         a8:35:ec:38:ba:c2:12:08:63:b3:25:3d:3d:15:8e:7c:67:f7:
         58:b1:92:2e:19:d6:b2:f4:c7:e9:44:91:fa:14:66:ef:0a:b1:
         1d:a9:29:4f:35:8b:d4:b9:d2:b8:7f:26:5d:27:b8:6d:f5:fc:
         6a:c6:bf:3c:4e:f5:50:91:f4:a1:bd:f2:66:23:32:63:83:88:
         dc:b2:42:66:89:54:97:69:06:86:9c:41:c4:e9:a3:8f:7e:78:
         87:7e:38:30:08:a7:fe:7d:e4:e9:7a:43:e8:26:ba:00:99:f4:
         e8:d0:44:e9:d0:f6:6f:d5:a9:75:74:be:9a:77:d4:bd:f5:09:
         4d:9b:00:45:73:7d:65:42:9e:d4:33:f1:28:ea:ef:82:f2:35:
         be:5c:55:99:e6:91:d0:e0:c7:0c:d8:1d:9a:e9:4d:c9:71:54:
         e8:65:3b:51:fd:cd:6e:60:74:82:91:ff:10:a3:39:f0:b1:ef:
         64:9a:53:45:8f:e9:f1:e9:13:88:09:9c:c6:40:67:36:5f:41:
         bf:e7:bb:75:45:b8:75:1b:de:e6:7b:bc:cd:e3:ff:3d:17:8e:
         6f:98:5c:d8:c4:35:99:22:e3:e5:02:e9:08:fe:04:2e:e9:14:
         70:f1:d7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:11 2026 by rpki-client