Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa
File:                     F99E9E78571B11F093AD0C10C4F9AE02.roa (raw, json)
Hash identifier:          dUUwZU3vNKGFlq4SqfawU3zy7/pCPL6xtG7GnE/gNvk=
Subject key identifier:   E6:71:ED:F0:02:0D:4D:A5:33:10:55:5F:38:BD:19:9F:C0:9B:F5:05
Certificate issuer:       /CN=A9170DA5/serialNumber=3EC7B1A6DA21A1A775815D1CBFE72314B8A95DD9
Certificate serial:       D3
Authority key identifier: 3E:C7:B1:A6:DA:21:A1:A7:75:81:5D:1C:BF:E7:23:14:B8:A9:5D:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 06:56:40 +0000
ROA not before:           Fri 07 Aug 2026 06:56:40 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154002
IP address blocks:        2001:df5:ce40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.crl
                          rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170DA5, serialNumber=3EC7B1A6DA21A1A775815D1CBFE72314B8A95DD9
        Validity
            Not Before: Aug  7 06:56:40 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7581a7-3132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:0f:c8:60:40:1b:5f:cc:d6:38:47:5a:f9:
                    53:18:d2:f6:56:ba:21:75:5f:3d:a6:f2:b7:5c:06:
                    39:27:48:57:80:36:44:55:3f:f2:dc:33:78:44:87:
                    35:0f:7f:b6:e9:00:cc:bb:54:e0:f3:44:08:ec:55:
                    a3:45:c9:9e:0a:01:5e:c1:12:24:79:4e:75:84:da:
                    21:8c:3e:73:bf:64:e8:55:a6:55:4e:fb:8f:72:2d:
                    14:c2:c3:02:1a:73:05:94:29:a5:77:58:71:51:7e:
                    17:7c:6e:36:18:c1:7a:89:13:20:db:d8:90:f6:62:
                    ee:c3:81:a4:4d:85:8b:60:cd:50:5c:38:9e:96:1d:
                    b7:7e:e5:6d:ad:ad:7a:88:56:95:07:1a:5f:f3:37:
                    00:87:3a:54:02:61:4e:84:55:ba:65:69:ba:4b:53:
                    4a:6e:2a:24:28:fc:66:38:4c:88:56:86:cf:23:be:
                    6c:f7:03:58:83:b4:20:c3:b5:41:47:73:9b:6b:8a:
                    8f:65:96:14:d5:7b:4b:3d:dc:4f:8a:15:83:fe:9a:
                    0a:bd:c1:5e:bb:17:03:c7:67:01:b9:99:23:0e:68:
                    5d:15:17:4e:63:e2:02:3e:ba:2b:cb:9f:8b:54:3e:
                    5e:5a:b6:8c:06:ab:c0:0d:7a:b8:2d:9a:6a:b4:df:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:71:ED:F0:02:0D:4D:A5:33:10:55:5F:38:BD:19:9F:C0:9B:F5:05
            X509v3 Authority Key Identifier:
                keyid:3E:C7:B1:A6:DA:21:A1:A7:75:81:5D:1C:BF:E7:23:14:B8:A9:5D:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/Psexptohoad1gV0cv-cjFLipXdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psexptohoad1gV0cv-cjFLipXdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DA5/CE0EDA26571A11F0B8507341C4F9AE02/F99E9E78571B11F093AD0C10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:ce40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:97:79:4f:7a:ff:81:24:b7:a7:e7:a6:92:72:32:af:aa:
         0b:b9:b8:39:1f:db:6c:1f:6f:58:5a:2b:a6:19:6a:8b:9c:c3:
         1b:d6:1d:ba:50:1a:4f:1c:c4:fb:47:04:16:74:e1:1c:e7:9e:
         22:8b:f7:aa:33:10:1c:00:b9:20:e3:6e:80:4c:09:38:83:be:
         f6:53:67:a1:06:83:6b:e3:5f:42:8f:3a:93:3b:f8:46:31:4d:
         b1:e9:85:b8:5e:89:00:90:81:be:05:72:c4:10:c5:f3:a3:7e:
         1c:f2:b4:75:58:11:76:e6:43:69:2e:72:c1:f7:66:91:ab:5c:
         c5:4e:6c:8e:aa:c2:33:90:db:bf:51:94:4f:94:2d:bd:5d:1d:
         fa:96:4e:4a:0f:bb:61:39:30:d1:b5:a9:ef:af:97:72:6c:8c:
         69:3d:7c:73:93:bb:04:7e:5e:1e:6f:87:74:fe:cf:52:93:36:
         f8:ff:2f:3b:e7:fc:7e:71:d4:b8:f9:af:76:6d:cd:56:61:54:
         7e:52:70:47:7d:fc:8a:67:9e:75:c3:85:38:74:a5:4e:c1:05:
         6a:5a:98:df:21:8e:c4:bb:5e:c8:48:4b:60:f9:eb:7f:eb:1a:
         00:6b:94:cb:94:bd:72:aa:3f:b8:e9:9a:63:ba:6f:85:9e:0c:
         b6:dd:de:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:07 2026 by rpki-client