Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/1711B84EB1C711F1B879334B3D11F970.roa
File:                     1711B84EB1C711F1B879334B3D11F970.roa (raw, json)
Hash identifier:          z+Ax1f/s+Krl8qzQ4GAD12Iq94nm1tol9t6/RvO+ogQ=
Subject key identifier:   FB:13:1F:1D:CD:B8:91:CD:3F:66:89:2D:FC:08:07:2D:40:FB:41:12
Certificate issuer:       /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial:       B7
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/1711B84EB1C711F1B879334B3D11F970.roa
Signing time:             Wed 16 Sep 2026 12:06:47 +0000
ROA not before:           Wed 16 Sep 2026 12:06:47 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     140849
IP address blocks:        2402:37a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
                          rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
        Validity
            Not Before: Sep 16 12:06:47 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aaa8657-d3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:92:53:94:6d:57:00:e1:e3:3b:58:b6:86:
                    34:2c:75:49:ba:29:15:48:93:19:33:63:57:96:0a:
                    dc:c7:17:05:ff:8e:3c:bc:3e:74:30:eb:00:a6:e4:
                    23:54:da:1f:7b:67:36:53:66:d4:e7:f0:33:f1:8a:
                    10:b8:09:cd:2d:b7:66:3b:1c:42:b1:01:10:52:7c:
                    ea:73:a9:a4:4d:a5:64:6e:da:c4:fd:54:11:69:4b:
                    99:b2:dd:f3:a5:6d:19:d2:7a:bf:5d:2c:b6:12:ed:
                    73:bf:af:a3:4c:98:a2:9b:cb:75:de:9c:64:af:83:
                    5a:2d:a2:9e:f2:30:0b:09:77:12:51:50:b0:fb:94:
                    5d:5d:8d:5f:23:db:ea:1b:29:bd:a2:2f:88:d7:10:
                    7d:43:f0:e9:e5:39:d2:34:60:7b:eb:35:97:33:9f:
                    ae:bb:af:61:a8:12:63:14:83:94:eb:c2:13:35:48:
                    ce:db:81:d9:3e:40:53:75:4c:3f:33:96:70:c1:bd:
                    31:79:b1:c4:e4:42:c5:72:2a:cc:4e:52:3e:ce:17:
                    00:fd:91:a1:f4:d8:9d:e5:a1:66:6a:72:d8:e6:68:
                    3c:f9:0b:f4:0d:b4:3d:75:8e:64:79:98:ad:fd:6e:
                    12:22:20:6e:d1:6b:9d:3f:69:6e:59:98:62:e8:40:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:13:1F:1D:CD:B8:91:CD:3F:66:89:2D:FC:08:07:2D:40:FB:41:12
            X509v3 Authority Key Identifier:
                keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/1711B84EB1C711F1B879334B3D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:37a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:07:65:41:21:b4:14:69:d4:d9:7b:a9:0a:78:a7:64:44:df:
         91:da:eb:76:41:ba:d2:4c:cd:58:6e:2d:ed:eb:a1:8a:01:4e:
         83:af:85:a1:6e:e3:10:f4:d1:95:fc:d8:73:01:ac:d5:d1:0e:
         8b:7b:a6:d3:dc:10:de:90:f3:24:b8:cc:ec:9c:c0:78:a0:24:
         10:7a:cf:74:f6:b4:94:d7:c5:9a:e6:8b:bc:13:42:c1:3c:e2:
         8c:0c:3c:f0:37:45:69:81:93:55:fe:c8:51:a5:ba:28:17:d2:
         24:7c:d5:79:63:af:31:02:53:11:f7:ae:88:70:96:28:e0:7b:
         6d:74:dc:cf:7b:76:78:7e:31:2f:d0:19:a2:79:63:88:c5:ac:
         fc:7e:23:72:55:78:2d:6d:a5:a3:ba:7a:9d:cd:68:40:e6:31:
         5b:33:34:98:e2:d1:70:6d:f4:00:ef:57:13:79:de:af:0d:fe:
         c9:53:5b:5c:fd:cf:97:d9:07:9e:a6:04:8e:9e:32:be:f7:1a:
         22:4f:a3:4c:6a:af:e5:bf:17:dd:ac:87:43:1b:c3:16:4c:54:
         1e:92:db:04:fc:10:b0:10:08:41:ec:c1:c7:33:e4:8d:b5:e2:
         55:4b:70:60:08:4a:64:a3:5f:a7:0a:3f:53:c2:f2:b7:c4:18:
         60:fc:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:28:46 2026 by rpki-client