Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/71C6AD52D8D311F1A5B4B3452266CEF9.roa
File:                     71C6AD52D8D311F1A5B4B3452266CEF9.roa (raw, json)
Hash identifier:          g+WdkXlcP6j+Hmpa7/qi/VUZN5L6qvZX65NXlFKBAJ4=
Subject key identifier:   35:13:8F:77:ED:8D:2A:8D:2E:D0:33:64:2B:EC:7A:1D:31:FA:E4:8C
Certificate issuer:       /CN=A916845C/serialNumber=19235BFE3E0BCD94146B1239263914014CCFE4E5
Certificate serial:       03
Authority key identifier: 19:23:5B:FE:3E:0B:CD:94:14:6B:12:39:26:39:14:01:4C:CF:E4:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSNb_j4LzZQUaxI5JjkUAUzP5OU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/71C6AD52D8D311F1A5B4B3452266CEF9.roa
Signing time:             Thu 05 Nov 2026 04:43:28 +0000
ROA not before:           Thu 05 Nov 2026 04:43:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     141035
IP address blocks:        2402:1a60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/GSNb_j4LzZQUaxI5JjkUAUzP5OU.crl
                          rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/GSNb_j4LzZQUaxI5JjkUAUzP5OU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSNb_j4LzZQUaxI5JjkUAUzP5OU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 09:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916845C, serialNumber=19235BFE3E0BCD94146B1239263914014CCFE4E5
        Validity
            Not Before: Nov  5 04:43:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aec0970-e73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:31:37:c2:0c:55:83:91:0f:d0:67:eb:c6:
                    5c:5a:91:ab:3d:49:1b:4c:ec:e6:1c:b6:83:4b:c7:
                    05:c9:02:f5:3e:d3:4a:89:d9:c0:8b:d5:5d:83:56:
                    0a:11:78:4b:c6:20:2b:fb:94:6f:55:32:73:89:3d:
                    be:14:07:ca:b9:ce:d0:05:0b:ce:cc:5a:e5:2c:ad:
                    26:9a:9d:a3:84:09:a0:40:7f:6b:cf:34:87:4a:21:
                    fe:b4:e7:6e:de:d2:52:90:fe:fc:37:59:5f:b3:7e:
                    a0:48:7c:0a:98:e3:b9:9b:81:23:c0:29:76:e3:6f:
                    e5:ba:de:03:ca:51:d8:da:a9:9b:e3:44:e5:75:45:
                    67:93:16:84:a5:1f:89:67:ea:31:94:44:61:d4:be:
                    2d:f2:84:52:4c:fc:05:7c:8f:da:ed:7b:4d:c1:6e:
                    a0:fa:0b:c7:25:d6:cb:0d:4b:c0:d5:56:5f:9f:0e:
                    23:69:6c:b7:84:0d:29:91:20:f5:14:92:20:63:66:
                    c1:15:86:82:d6:7e:48:f5:3c:1c:da:8e:df:50:8b:
                    0c:01:53:82:38:f5:2c:eb:86:32:62:bc:09:dd:ea:
                    e3:06:77:2b:ad:73:3d:bf:cb:79:67:69:f4:44:49:
                    22:99:69:d7:76:00:5f:4e:01:e8:6d:b5:24:5b:78:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:13:8F:77:ED:8D:2A:8D:2E:D0:33:64:2B:EC:7A:1D:31:FA:E4:8C
            X509v3 Authority Key Identifier:
                keyid:19:23:5B:FE:3E:0B:CD:94:14:6B:12:39:26:39:14:01:4C:CF:E4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/GSNb_j4LzZQUaxI5JjkUAUzP5OU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSNb_j4LzZQUaxI5JjkUAUzP5OU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916845C/472171F8D7EE11F18E6C7EB21A66CEF9/71C6AD52D8D311F1A5B4B3452266CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:4d:df:f9:0b:19:a0:6d:08:2d:86:0f:27:f7:04:b7:88:7f:
         32:00:d5:09:f9:75:de:ab:a5:a5:5b:b8:0a:8c:a8:10:e5:0d:
         e7:37:f7:ce:3b:f9:2e:b2:86:1b:7f:52:9e:23:2a:e7:d7:49:
         2c:50:14:a5:40:eb:3a:66:52:c3:79:5d:db:fa:32:ab:ed:f0:
         88:4b:0d:b0:8a:6d:44:ee:7a:06:e2:0e:7a:10:ba:ce:86:59:
         1a:57:d2:53:3a:58:c1:d7:18:8e:b7:27:5c:61:b3:0b:0e:3f:
         28:d3:ce:ff:1b:3a:8e:a0:46:fe:26:e9:87:39:ed:33:d6:ef:
         ed:83:09:a9:ad:7e:52:8c:23:3e:64:b5:c1:e8:df:81:95:97:
         f2:6c:3d:b2:82:80:05:41:cf:db:ff:c1:73:1e:81:c2:f5:8d:
         8e:76:2b:72:03:09:e7:d7:bc:53:ac:7a:34:ab:c4:f8:aa:b1:
         b3:ac:2a:f0:b7:bd:97:5e:b3:32:28:ce:ee:9e:69:07:a5:f8:
         95:4e:6e:5a:ca:f5:38:6f:93:ca:ae:22:89:f9:2a:65:b1:90:
         fb:78:d4:c8:8a:97:1b:13:ad:80:1c:ff:11:e8:b8:85:02:09:
         97:7e:1c:a2:0f:d8:3b:52:56:2e:bf:43:76:a3:03:43:5f:a6:
         69:58:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:11 2026 by rpki-client