Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa
File:                     752774D616A111F0B2CDBC72C4F9AE02.roa (raw, json)
Hash identifier:          suny3D8b6EtNlMBNr60aW4wrzdwyFWYaz0jtIBV7c9Y=
Subject key identifier:   61:56:DA:23:BB:2A:2C:65:2D:DF:6C:FF:0B:F2:DE:BF:67:CF:A0:47
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       0191
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa
Signing time:             Tue 07 Jul 2026 06:32:18 +0000
ROA not before:           Tue 07 Jul 2026 06:32:18 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     211691
IP address blocks:        2405:a280:ff00::/44 maxlen: 44
                          2405:a280:ff80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Jul  7 06:32:18 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4c9d72-9d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:e2:c6:e7:4a:8b:06:2b:be:6f:0a:92:4d:
                    30:03:f0:dc:62:68:e1:fe:71:81:45:78:97:a0:5c:
                    2b:47:53:30:07:4d:a6:db:78:42:d0:1d:b8:e5:94:
                    7b:ea:1f:83:40:02:1d:45:df:4c:5c:32:5d:7a:a0:
                    65:9e:a3:7f:73:54:c8:d0:ec:cd:df:10:6c:86:c3:
                    d8:f0:1f:ce:c0:15:ac:3f:39:1b:b9:df:a1:1e:ff:
                    4e:2f:59:ad:08:b9:70:ed:3e:93:b5:2f:56:f2:0a:
                    ac:0c:c6:dd:0c:65:18:91:61:2f:9f:75:15:a2:87:
                    2f:2b:6a:fd:db:bc:d3:88:fc:2d:8c:fa:ba:39:11:
                    9d:19:e2:cb:9b:8b:87:a8:4b:9a:71:aa:2e:a5:ac:
                    e0:c8:ff:55:91:f3:3f:7c:c9:21:4f:2b:fe:4a:a7:
                    2c:7b:50:ea:14:51:3d:8b:3b:cd:0f:e4:5e:2e:bc:
                    14:44:0a:64:04:bc:0a:85:2e:2e:ce:46:0e:60:b5:
                    ab:4b:7d:e4:cc:df:1f:13:cc:07:97:aa:37:4e:a3:
                    ff:03:3e:84:4a:72:23:37:09:57:1a:b8:03:db:60:
                    71:72:32:44:03:06:fc:ec:1a:bb:6e:f0:f9:64:0d:
                    5a:a8:6a:c2:a9:c2:e9:6f:63:11:a8:4f:13:e0:31:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:56:DA:23:BB:2A:2C:65:2D:DF:6C:FF:0B:F2:DE:BF:67:CF:A0:47
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a280:ff00::/44
                  2405:a280:ff80::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:6a:d1:7f:aa:8e:07:ce:d1:35:39:e8:f3:23:35:5f:2a:4e:
         2e:fc:40:78:06:be:c4:9a:f0:6f:17:18:45:18:d7:87:6a:72:
         07:f1:ef:a0:bd:1c:c6:bb:11:54:ee:be:d0:31:df:5d:78:f0:
         84:de:ce:6c:4a:0f:b9:d3:92:bd:a2:b0:f3:a4:37:3b:d9:df:
         9e:0a:3f:c9:38:6d:39:a1:c4:b1:e2:47:c8:57:b5:54:7f:ab:
         b9:93:7a:5a:19:ef:2d:33:d5:4a:4d:55:3b:52:ea:1a:12:dd:
         e7:db:7c:80:ef:c8:c5:df:86:8b:27:a0:5e:7b:c1:19:3f:c7:
         16:bf:8e:e0:bb:a9:6c:39:7e:4e:e5:6a:37:7e:8f:90:43:f2:
         61:42:17:68:8f:8e:08:2b:34:c8:27:a1:ad:9a:f9:db:d2:b2:
         2b:a8:48:da:7e:e1:01:07:8f:80:cb:f5:7c:86:07:37:c8:5c:
         da:5e:f5:83:f4:6f:db:69:93:5f:2a:39:c0:6c:2d:0d:c9:b1:
         1c:31:29:d5:fa:08:23:27:d0:a1:e5:90:67:30:cf:32:21:c3:
         a1:dd:c4:6f:bd:a0:1c:a1:1a:23:bf:99:54:30:e6:78:15:2d:
         60:b2:05:db:b8:61:de:36:ff:e6:10:03:2f:51:05:d7:12:a7:
         5f:e0:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:57 2026 by rpki-client