Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/ABC3DCD0DE4D11F1A1E793670566CEF9.roa
File:                     ABC3DCD0DE4D11F1A1E793670566CEF9.roa (raw, json)
Hash identifier:          TB5/LIly9DVwXlTzlYMAKP6cB/Kq062C8yIoudPiouE=
Subject key identifier:   A9:24:C3:5E:7E:69:6B:DE:32:91:93:59:C2:C9:13:C0:3E:06:A1:45
Certificate issuer:       /CN=A91AC70D/serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661
Certificate serial:       40
Authority key identifier: 1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/ABC3DCD0DE4D11F1A1E793670566CEF9.roa
Signing time:             Thu 12 Nov 2026 04:01:00 +0000
ROA not before:           Thu 12 Nov 2026 04:01:00 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     24429
IP address blocks:        2404:8d02:28c8::/48 maxlen: 48
                          2404:8d02:4881::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl
                          rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 09:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC70D, serialNumber=1D144CE260195E8CB35F8F288731E2EA08800661
        Validity
            Not Before: Nov 12 04:01:00 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6af539fc-8ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:de:de:34:83:68:3d:87:94:d0:2e:82:58:
                    85:cc:a3:82:0f:f2:f0:5a:39:f7:87:1e:cf:9f:96:
                    e7:c8:b3:68:df:81:d4:33:bb:5e:9b:b2:72:19:37:
                    af:a4:94:00:9c:c2:6e:af:fb:22:19:fe:1f:26:f0:
                    60:f9:0e:4f:93:23:43:88:c8:77:ea:f8:9e:f4:01:
                    71:e3:23:ac:35:7f:96:a8:78:36:72:fd:1d:71:f7:
                    1e:61:71:62:fa:8f:26:07:ad:ca:d0:76:61:13:29:
                    d2:57:ef:60:e3:5c:db:84:a0:4b:6a:d9:2f:c3:9b:
                    65:3d:b1:f3:c1:36:27:3d:c0:09:9f:cf:a0:81:07:
                    57:43:88:09:03:3e:59:34:d1:b9:e8:1a:50:a8:fd:
                    98:61:c1:4b:65:9e:29:ff:a7:0c:3b:fc:83:3b:8e:
                    83:a6:c0:39:74:0b:36:ac:90:fe:52:4c:70:5f:91:
                    54:98:0c:d3:0a:c0:ba:fa:fe:56:ad:57:43:83:27:
                    66:4b:fb:12:74:60:8f:ab:5a:e1:bb:9e:dc:34:b5:
                    15:e6:7e:e1:29:4b:f5:6b:f1:4d:24:7e:0e:4d:27:
                    dc:ed:b0:0a:d2:40:1d:76:90:7d:fc:26:c1:65:b1:
                    2f:93:fb:6a:ed:85:b0:81:3d:21:48:81:a4:8a:a2:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:24:C3:5E:7E:69:6B:DE:32:91:93:59:C2:C9:13:C0:3E:06:A1:45
            X509v3 Authority Key Identifier:
                keyid:1D:14:4C:E2:60:19:5E:8C:B3:5F:8F:28:87:31:E2:EA:08:80:06:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/HRRM4mAZXoyzX48ohzHi6giABmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRRM4mAZXoyzX48ohzHi6giABmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC70D/92DF3974C08B11F1B1408C005411F970/ABC3DCD0DE4D11F1A1E793670566CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8d02:28c8::/48
                  2404:8d02:4881::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:6b:40:7b:f9:9b:bf:1a:1c:e0:19:0d:70:a1:fa:14:80:1b:
         11:a8:f2:9d:4c:ab:49:90:35:42:66:04:10:73:f5:e1:07:2e:
         3d:73:fe:58:1c:27:1b:7d:02:b5:e4:26:4f:23:3f:58:2e:b5:
         ac:16:0d:2b:f5:54:2a:7a:82:7e:c5:a4:a2:4d:c9:ff:de:61:
         6b:ef:4a:ba:fc:35:99:ac:ed:de:59:5c:49:b7:e8:a7:7d:fb:
         52:40:09:3d:bd:89:40:60:b5:c5:28:db:79:89:f0:82:94:8a:
         6a:ea:85:cb:a9:a5:54:84:cd:a6:33:ab:da:3f:3b:ef:1b:17:
         4c:89:29:d3:bd:57:a8:88:a6:f2:df:aa:e1:2b:34:44:c0:69:
         d4:17:73:00:06:a2:10:a6:c4:e2:a9:f0:36:d0:aa:c2:87:39:
         a3:8d:cd:fb:b7:ee:d0:5d:57:45:75:f5:9d:7d:6d:4d:65:53:
         21:86:e2:0d:f9:98:e5:d5:38:f9:1f:cf:f1:d1:d7:b3:a8:e1:
         d4:3c:a3:0b:cf:5a:20:1a:e6:89:17:49:cf:f1:ff:bb:6a:06:
         d0:03:73:c8:8d:55:8e:46:42:ca:40:a8:77:61:72:27:12:c1:
         af:30:07:3c:b5:7f:d1:b3:fe:e0:11:63:f3:5a:fd:12:18:03:
         29:4e:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:56:46 2026 by rpki-client