Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/2C7BB8BAB92411EC8E787A55C4F9AE02.roa
File:                     2C7BB8BAB92411EC8E787A55C4F9AE02.roa (raw, json)
Hash identifier:          yzAh74QnI7xyTD/atFR7iNhPzV1EnHb55VWVnS3oImY=
Subject key identifier:   26:6D:47:BA:30:5A:78:7B:58:4B:BE:73:25:BA:4D:7D:61:C3:0A:AD
Certificate issuer:       /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Certificate serial:       0466
Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/2C7BB8BAB92411EC8E787A55C4F9AE02.roa
Signing time:             Sat 07 Nov 2026 00:46:42 +0000
ROA not before:           Sat 07 Nov 2026 00:46:42 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     133145
IP address blocks:        2001:df4:d080::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
                          rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Nov 2026 23:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126 (0x466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
        Validity
            Not Before: Nov  7 00:46:42 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aee74f2-534e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:f6:68:35:d5:8f:5c:fb:6d:87:a4:90:ef:
                    9c:3f:bd:78:31:79:42:66:a3:71:66:cf:a7:67:31:
                    ec:df:cb:f9:0e:71:85:03:6b:86:73:27:cd:fb:9e:
                    9d:41:3b:8c:e6:55:07:52:b8:c2:79:a4:96:a3:de:
                    86:2d:ef:4c:10:d3:eb:36:30:ff:06:ee:dc:63:ee:
                    9d:5d:09:7b:23:91:c5:5c:26:7d:01:48:b7:29:6c:
                    cf:5c:45:f3:cb:e9:2a:a9:59:c7:88:5f:e1:e2:72:
                    5a:f8:01:1a:73:c8:7b:86:9c:97:5e:9f:40:fd:05:
                    1e:da:40:d3:fe:ad:cf:4c:9e:f2:97:61:28:06:a5:
                    53:6f:fb:5d:94:51:6a:94:8e:a8:2d:a5:96:c4:b7:
                    f6:16:51:c2:7e:9a:53:2f:ef:51:79:36:c0:43:97:
                    23:13:48:65:95:28:a0:ac:2f:b6:d9:35:99:03:6d:
                    87:1c:88:08:6e:cd:1c:26:35:ec:a7:f5:a7:94:55:
                    44:31:a0:5d:60:2f:9c:9f:91:5a:cd:81:0d:37:68:
                    6b:2b:8f:68:6a:b6:f4:35:0c:42:a8:97:7e:4e:d9:
                    a8:71:e0:67:d5:dd:2e:6d:14:97:74:36:f6:02:88:
                    fd:e5:55:1e:c5:b0:c4:ea:11:17:25:58:ed:b9:01:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6D:47:BA:30:5A:78:7B:58:4B:BE:73:25:BA:4D:7D:61:C3:0A:AD
            X509v3 Authority Key Identifier:
                keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/2C7BB8BAB92411EC8E787A55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:d080::/47

    Signature Algorithm: sha256WithRSAEncryption
         c3:63:78:c8:9c:50:65:43:fe:7a:6f:78:b9:1b:a5:60:5c:8a:
         5c:bb:3f:06:a0:55:27:e9:b6:43:6c:6d:21:30:65:0a:cf:d9:
         be:69:b1:ad:24:ac:e8:59:f3:e6:99:30:16:84:38:e7:72:0b:
         9e:fe:fb:d7:4c:80:1f:42:e4:c6:39:1b:74:5b:3c:1a:dc:bb:
         2b:fb:89:e0:25:8b:ed:3e:64:af:7b:ac:3b:da:a3:a6:e3:8f:
         4c:10:3c:7a:df:63:86:62:a0:81:71:27:33:bd:42:24:1a:99:
         59:61:06:7c:7d:f7:3b:a8:9f:4f:96:80:73:18:5b:93:fa:5f:
         ac:82:20:8b:d2:f8:7e:5c:17:23:98:56:86:21:c7:c2:6d:da:
         a7:22:bb:d9:6a:61:a2:1a:fa:a5:1d:d4:4b:83:da:d5:26:df:
         3b:db:bc:b7:1d:23:04:f2:08:31:8b:a0:e0:f3:c7:fe:e4:48:
         b0:d9:b8:27:a8:df:5c:20:34:5b:37:2e:0b:26:8e:86:5c:eb:
         b7:94:b2:40:c9:ea:ef:a1:f2:20:6a:ad:27:c4:c6:aa:50:67:
         45:ac:47:1a:da:ce:ae:95:4e:7b:d0:e5:10:42:78:de:25:18:
         72:2f:3b:e3:3e:b7:7c:b7:d3:c9:82:40:5e:9e:75:53:98:cb:
         36:47:c6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:37:44 2026 by rpki-client