Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa
File:                     D633730A5AD711EF8665FF81C4F9AE02.roa (raw, json)
Hash identifier:          Wccg8kNGUBCLT/sRVkDKLDrzp/1nNs6rKjY6plM3zMI=
Subject key identifier:   12:6B:77:A1:98:A6:71:B1:D4:2E:3C:DF:74:35:B7:C1:86:2D:E2:A8
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       0233
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa
Signing time:             Fri 11 Sep 2026 02:53:35 +0000
ROA not before:           Fri 11 Sep 2026 02:53:35 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137527
IP address blocks:        2407:b140:ae5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:45:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: Sep 11 02:53:35 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa36d2e-03ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:44:5c:b0:cd:d7:3b:82:67:72:0c:3a:64:
                    b4:2d:4b:bf:c0:22:93:2c:6d:07:44:36:6c:fa:bb:
                    e6:ca:6e:8b:81:8d:3c:0e:f1:6c:66:d8:d4:d1:16:
                    6b:5d:ee:11:b4:53:f0:95:a2:50:57:da:93:f1:11:
                    5f:b1:d9:1f:d7:e5:cf:d2:60:fe:76:d1:8b:86:15:
                    8b:32:8c:e2:85:aa:3d:fb:84:6b:50:a9:b7:3c:d7:
                    e8:e0:60:f6:52:0d:bd:ba:45:89:eb:10:74:86:0f:
                    d7:e6:8a:4e:ea:bd:ff:a0:db:bb:e2:a8:d6:27:be:
                    9f:da:8d:be:ae:df:03:c6:f2:0c:c2:da:53:95:1a:
                    04:36:2d:94:08:91:78:be:fd:af:1e:b6:59:73:e6:
                    55:90:0b:2a:2c:01:a6:52:c7:40:53:50:00:6e:b5:
                    82:ef:57:0a:ea:43:c0:8a:b0:bc:d5:9b:2d:01:f8:
                    7d:65:ae:28:0c:50:d8:ca:84:e8:7b:08:a0:bb:a3:
                    4c:7b:44:d4:b1:c1:fe:c0:68:c0:a0:0a:84:57:c1:
                    26:bd:97:b7:e7:85:a7:25:d9:ba:5a:2c:6b:91:0b:
                    97:a1:f0:ff:a5:a3:33:71:5f:77:f5:29:ef:02:a3:
                    dc:36:d2:4a:60:74:e3:9a:03:ea:91:3e:00:84:3a:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6B:77:A1:98:A6:71:B1:D4:2E:3C:DF:74:35:B7:C1:86:2D:E2:A8
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b140:ae5::/64

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:d0:9d:3e:5f:99:5e:b4:13:03:6a:fa:66:49:3c:b3:c0:
         4b:1f:d8:39:d8:9b:b8:e4:a4:77:3c:32:9a:14:60:c7:3a:77:
         3d:3c:3e:fd:42:87:a7:e8:b5:b4:56:ed:74:0e:01:ca:73:93:
         ae:74:34:b1:19:f3:ab:2a:81:bc:dd:38:d8:06:6c:38:4b:e9:
         7d:c9:ba:eb:ca:85:bb:41:1b:83:5d:5e:72:f9:26:3f:37:47:
         a5:e1:58:50:ff:fe:bb:24:5c:f0:49:ca:58:d7:c3:57:ea:1d:
         66:14:14:98:bd:d8:80:76:9a:f5:ba:ce:e7:a0:20:1c:3a:f1:
         6f:de:1a:25:67:65:8b:62:e1:e6:f3:79:e6:25:3e:b4:ee:72:
         52:5b:97:2d:d1:c0:29:39:7c:40:2b:88:76:86:75:a7:a7:9b:
         15:6d:c9:f1:ac:be:c9:66:93:e1:7c:23:5f:45:c6:da:8a:5c:
         6d:55:9a:02:0d:a0:a4:f6:e8:59:47:6a:ba:29:02:7e:c3:49:
         dd:87:c7:50:2e:81:7e:1c:ba:c6:be:d6:01:09:69:f1:44:a3:
         bc:b7:c6:f3:0f:a9:56:bf:e3:dc:c1:b3:89:6b:5b:c9:34:67:
         64:3c:70:43:2d:76:c6:b5:53:5d:75:e7:fc:7e:30:a0:b1:cc:
         ac:43:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:47:43 2026 by rpki-client