Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa
File:                     3DB131DC86F211F1B8F66003A7EE528E.roa (raw, json)
Hash identifier:          sUfxM8axC54H/lShffOwTy/FoQUoQiyfwyQ2W0FeNjo=
Subject key identifier:   EB:8C:F2:F2:DE:A3:D5:C7:A4:C0:90:CC:05:EE:CA:28:DB:F2:5A:66
Certificate issuer:       /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial:       0840
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa
Signing time:             Thu 23 Jul 2026 23:57:20 +0000
ROA not before:           Thu 23 Jul 2026 23:57:20 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142045
IP address blocks:        2407:4ac0:1400::/38 maxlen: 40
                          2407:4ac0:1800::/37 maxlen: 40
                          2407:4ac0:2000::/35 maxlen: 40
                          2407:4ac0:6000::/35 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
                          rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2112 (0x840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91756B7, serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
        Validity
            Not Before: Jul 23 23:57:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a62aa60-a37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:b9:d0:0f:24:18:57:ce:b1:5e:03:fd:d5:
                    5a:d0:8c:8e:e3:07:c4:4b:2f:ec:1c:97:0c:e6:17:
                    ed:c8:3d:5f:2d:31:58:b8:6c:9d:36:88:ba:28:4c:
                    bf:48:fa:3a:9c:b1:20:c5:ed:90:07:28:0f:51:c0:
                    49:ad:71:d9:28:72:9f:5b:d5:03:30:df:62:20:1a:
                    66:12:bf:72:bc:2d:77:c6:ff:e6:c5:70:40:96:0c:
                    15:20:73:c4:fe:3a:5a:4a:7d:21:4a:b5:2d:9c:d9:
                    53:65:25:f5:7f:32:b5:55:4c:b4:f0:ec:1d:80:5f:
                    b2:7e:14:84:d6:27:8e:65:80:8f:f5:2d:18:6e:21:
                    90:fb:df:7e:ac:99:96:55:19:b1:55:72:11:5a:1d:
                    74:12:88:37:82:d2:31:58:b0:40:45:11:e2:b5:35:
                    c6:c5:79:82:84:1a:79:2d:d8:20:f6:11:b8:96:0b:
                    e8:27:8a:f8:ba:b2:7c:98:05:4b:ef:2b:89:38:64:
                    e8:33:a2:87:40:51:86:ee:d3:21:6e:27:4d:51:d4:
                    bd:3a:8d:4f:e2:0d:22:70:48:e5:a0:3d:f5:0f:b0:
                    4f:4a:4e:d2:33:f1:6e:de:1c:0b:cf:e2:71:47:4a:
                    28:70:54:2f:36:3b:80:45:50:b8:bf:db:91:ce:10:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8C:F2:F2:DE:A3:D5:C7:A4:C0:90:CC:05:EE:CA:28:DB:F2:5A:66
            X509v3 Authority Key Identifier:
                keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/3DB131DC86F211F1B8F66003A7EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4ac0:1400::-2407:4ac0:3fff:ffff:ffff:ffff:ffff:ffff
                  2407:4ac0:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         64:b7:cf:40:49:ca:d6:a4:05:88:9c:a9:ce:c6:75:03:7b:6b:
         15:7b:8f:b9:89:30:7b:69:53:37:99:99:cd:03:aa:9b:6c:c2:
         a7:8d:a0:2d:5c:8d:fa:70:6f:e9:58:05:e0:67:50:08:3e:13:
         bd:0f:0a:97:5e:35:c1:60:18:34:14:dd:fc:0f:e9:67:a2:c3:
         a2:88:82:74:77:af:b9:de:0e:ee:73:ff:c3:bd:52:3b:7a:c3:
         b1:c0:25:26:18:98:c2:e4:20:59:93:09:23:cb:fb:d1:5c:36:
         07:ef:5c:a7:9c:45:5c:2a:e7:b6:f0:1e:1a:a3:07:46:ff:9a:
         11:a7:ca:49:c9:cc:1a:05:e0:76:3f:2b:93:6e:92:14:83:a7:
         61:f5:ba:d3:e7:88:b0:4e:27:fc:4f:e2:15:11:fe:0c:00:c8:
         87:35:17:8d:68:e1:e5:9c:29:7b:3d:31:22:60:9b:a1:eb:d4:
         7c:5d:d4:4c:9e:32:7e:85:a6:63:76:0d:40:d9:94:66:c8:9d:
         cb:76:c0:b5:ff:35:ad:df:5b:5c:97:82:73:1e:62:e8:c7:01:
         9e:4d:09:92:77:07:fd:0c:b1:29:b5:3f:b7:6e:54:d3:79:c9:
         3b:f9:9c:a0:ac:ac:c7:13:58:60:72:c1:cd:40:a3:65:f3:bf:
         da:3a:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:19 2026 by rpki-client