Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
File:                     3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (raw, json)
Hash identifier:          XDu+IeKyxj5n2r5Q1uVJ/WbOchHWT5+N2NY6KVXQfNE=
Subject key identifier:   1C:2E:BE:14:CF:C6:50:7A:36:6D:3C:C0:E5:EA:B5:22:13:D1:51:B2
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       020B
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 04:30:09 +0000
ROA not before:           Sat 11 Jul 2026 04:30:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        2001:dec:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Jul 11 04:30:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a51c6d1-a8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:92:f5:10:4a:21:ea:94:7d:9d:30:cd:3e:
                    b3:cd:6e:e9:34:4d:1c:95:08:0e:d2:82:c6:75:10:
                    7a:d2:de:26:4d:23:ee:95:0e:61:9a:57:32:3c:40:
                    dd:99:f2:a9:86:12:d6:5c:dc:0f:eb:c5:ff:b6:0f:
                    dd:4b:18:7d:28:5e:29:55:01:30:99:4b:16:87:57:
                    cf:01:22:7c:33:a9:94:ee:9d:44:01:20:c6:82:53:
                    d2:54:e8:e6:a2:f4:41:ee:9a:c5:13:06:b3:88:cd:
                    68:f1:79:cb:e2:3c:96:df:28:1c:57:13:fd:17:5f:
                    8f:50:c5:07:c3:87:ad:0a:4c:2d:ce:fa:05:7d:c1:
                    38:a3:0b:27:34:80:e3:ab:44:7e:2a:64:6a:e2:7b:
                    5d:5d:ca:4f:3a:88:ee:81:d0:b8:fd:de:71:6c:33:
                    6c:68:60:15:91:d5:dd:6c:9a:ad:7e:96:be:cf:5f:
                    37:1c:20:cc:74:7e:47:00:c8:70:a8:72:9e:b4:04:
                    54:c6:c7:99:e1:38:b7:84:d2:47:1b:d2:7c:39:38:
                    c6:e1:ea:66:51:85:8a:67:ba:d1:66:ec:d0:a6:49:
                    ff:d0:fb:6f:8a:45:d7:8b:3e:80:83:8f:12:48:2a:
                    d6:fe:91:95:23:aa:c2:ad:c2:f6:75:56:c3:94:49:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2E:BE:14:CF:C6:50:7A:36:6D:3C:C0:E5:EA:B5:22:13:D1:51:B2
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dec:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:fc:63:35:7f:84:17:e5:a2:68:81:fc:7d:68:f1:d2:ac:
         16:84:be:28:f7:33:4b:6e:31:d3:06:c0:d9:6c:fa:47:ea:48:
         29:f7:e0:97:e0:68:bf:55:5e:c8:9c:ef:cb:19:b7:5f:df:4f:
         c9:74:07:86:70:51:2a:a1:80:0b:dc:7e:11:90:2c:56:df:15:
         bc:6a:76:c9:39:1c:a3:d4:be:9c:cd:52:9b:55:bd:51:b6:99:
         8b:28:0b:79:5d:24:e0:fe:f6:d0:34:ce:3d:b9:9d:83:a5:7e:
         84:13:81:50:5d:ee:f5:00:3a:7e:81:3e:0c:ee:4e:f4:29:49:
         f4:61:cf:5f:b9:6c:88:d8:96:6e:57:6f:ef:81:be:60:e9:b9:
         19:44:0b:8a:cd:6d:5b:c6:b6:f2:38:f4:0e:6d:32:05:91:a9:
         84:6a:c3:b2:d4:86:bf:36:f2:3c:cf:4e:f4:20:46:73:28:09:
         80:02:dc:fd:81:49:52:ea:a0:4a:49:b4:e5:73:72:fd:55:32:
         9f:84:19:2e:61:f9:4e:a4:44:cc:f8:72:ed:46:45:22:b8:07:
         ea:a7:9c:4f:33:db:e5:eb:8e:b9:d0:0f:35:66:6c:2b:37:f4:
         81:6c:c4:cb:0d:2a:0a:b9:99:fc:23:5b:2c:65:b9:e1:82:9e:
         c5:bd:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:08 2026 by rpki-client