Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/670B99448DD911F1843D5C1C5311F970.roa
File:                     670B99448DD911F1843D5C1C5311F970.roa (raw, json)
Hash identifier:          7mgCpKMqeBXQIoSnmIOvCGihzUbiwKzPjz5fyITalUE=
Subject key identifier:   1E:BC:3B:56:8C:41:93:2A:C6:EB:4C:62:9B:7C:F3:0D:46:27:A3:BB
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       85
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/670B99448DD911F1843D5C1C5311F970.roa
Signing time:             Sat 01 Aug 2026 18:47:10 +0000
ROA not before:           Sat 01 Aug 2026 18:47:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152648
IP address blocks:        2402:3ea0:f000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Aug  1 18:47:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a6e3f2e-8928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:2c:9f:ae:fc:33:8c:99:b0:7f:6f:37:a5:
                    09:bf:2f:34:1b:df:0d:7f:af:97:46:e4:00:b4:c1:
                    69:fe:36:d8:ab:2e:37:20:f2:de:e1:d9:18:a6:0a:
                    15:66:e4:e6:36:49:69:3e:ca:0b:8e:a5:a3:17:55:
                    0b:fe:d1:a5:89:71:94:a5:8d:f0:53:2d:e7:5f:bd:
                    8c:d7:a5:ba:43:de:82:3d:ee:f4:4a:d5:c1:9f:eb:
                    26:d6:6e:75:df:37:5d:02:7d:f9:7c:d2:ef:50:8e:
                    f5:b5:83:ce:e0:c0:86:60:4a:1f:38:db:9e:ab:e1:
                    57:e2:4d:af:f8:bd:da:1f:53:c6:58:47:b6:bb:cf:
                    ad:f9:52:54:32:e6:6c:2a:f0:da:5e:f9:87:34:5b:
                    bd:3a:08:01:5e:43:5d:8a:09:8d:5b:77:2c:df:ae:
                    19:8d:7a:30:f5:b9:e5:1e:01:62:08:73:6c:20:3d:
                    ac:2c:50:f8:b1:ad:94:d0:8d:13:ad:bd:ae:74:26:
                    d1:55:48:97:5d:93:9f:65:cd:a5:37:0c:2d:b8:43:
                    02:14:6e:20:13:dd:05:71:91:11:d8:34:13:4d:92:
                    ac:50:05:d8:9d:f2:0d:42:54:60:32:3e:29:8a:8e:
                    ad:b0:3f:57:0d:fb:84:a0:ec:cd:b4:ea:95:fd:00:
                    a7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BC:3B:56:8C:41:93:2A:C6:EB:4C:62:9B:7C:F3:0D:46:27:A3:BB
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/670B99448DD911F1843D5C1C5311F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3ea0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:9d:8c:36:31:af:d0:73:a8:15:e9:3b:7e:d2:b7:05:6b:
         2e:aa:37:7a:79:b2:f7:7b:17:a7:d3:7d:16:16:9d:79:b6:bc:
         c0:7b:51:3c:6b:b5:a0:fa:88:65:08:3d:34:4e:22:b4:b5:50:
         3a:44:32:0f:59:cd:ff:ea:30:7f:63:c1:2e:d0:ce:55:00:9b:
         23:2e:4c:f2:61:91:03:4b:54:9d:b6:c1:ae:6f:75:0b:09:45:
         b8:9e:a8:04:7f:ab:e2:71:bb:0c:15:be:7b:3c:b9:f7:43:bd:
         0d:9d:c0:d4:45:d0:31:c1:1d:6e:fc:e9:bd:ac:4c:74:91:04:
         a7:01:99:e6:6c:84:ea:e1:c4:1f:f1:fe:34:51:e4:7d:69:25:
         f5:f5:46:76:52:1e:88:10:de:69:dc:fc:34:72:d8:bd:3d:b7:
         21:b7:82:ec:bf:fa:08:58:ed:f7:15:ff:08:e0:bb:12:5d:f5:
         6c:50:0e:33:78:3e:08:a7:42:22:43:88:2d:ad:20:ce:4b:5b:
         2d:a9:ab:11:77:a4:df:55:ac:c7:34:90:e1:a5:58:f1:1f:4b:
         ed:83:7d:3c:97:3f:e9:53:61:f2:20:b3:7c:43:2f:4f:61:a5:
         47:37:49:ec:e4:5e:5c:87:9c:88:27:a5:6b:1d:36:79:73:f8:
         f9:3e:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:34:37 2026 by rpki-client