Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
File:                     0C5EDCDA716911EDA03D4A50C4F9AE02.roa (raw, json)
Hash identifier:          kEuwzt75DLMLyOAlCwhu5iAg9XxPhV8CMhcAksq12Q4=
Subject key identifier:   2E:E2:C2:DC:C6:7B:1E:81:71:5E:87:67:91:60:C1:7A:57:F9:31:47
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       0D92
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa
Signing time:             Wed 04 Nov 2026 23:45:48 +0000
ROA not before:           Wed 04 Nov 2026 23:45:48 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     16625
IP address blocks:        2400:5200:402::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3474 (0xd92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Nov  4 23:45:48 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aebc3ac-738a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:af:71:d9:3a:db:a1:66:79:e1:db:f6:54:72:
                    99:c7:b1:b0:1d:08:5f:70:cc:f3:49:5d:90:2f:71:
                    79:a3:13:ec:f5:b1:ac:9c:be:c8:d2:e5:c6:b2:0a:
                    fd:0c:3c:21:e7:44:d8:99:53:3f:92:e2:b6:2e:9e:
                    63:83:ae:ba:c6:09:c1:f8:72:22:21:16:d1:66:e2:
                    64:8f:f7:e4:ed:7d:c4:87:d4:41:71:f8:bb:a2:b6:
                    72:82:b5:83:59:90:2a:63:a1:23:7a:92:9e:fa:ae:
                    e1:be:5e:ea:56:2d:8f:2d:5c:81:14:9b:a5:5c:59:
                    ea:a1:bd:4c:83:66:96:9e:a7:c7:90:61:be:b9:fb:
                    55:5e:96:a2:94:e2:74:a9:b4:6e:a2:a4:97:d0:7f:
                    45:f5:95:30:65:0c:1f:73:2d:b2:d4:0a:c8:6e:2b:
                    3a:8c:2c:a1:fb:7b:2c:0b:5b:b8:bb:c6:1e:d8:ac:
                    a0:56:ac:e8:17:e7:24:75:ed:67:14:08:9c:12:ff:
                    83:f1:49:46:6c:86:94:08:52:ab:5d:d9:ae:a6:b0:
                    43:37:c4:d6:62:70:ef:6a:9a:ef:fe:ce:4c:4e:eb:
                    a0:92:78:20:f2:f8:72:a5:30:49:26:53:6a:d4:e4:
                    8e:f6:f4:d1:cb:3f:2a:29:5e:64:28:bc:97:22:96:
                    48:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:C2:DC:C6:7B:1E:81:71:5E:87:67:91:60:C1:7A:57:F9:31:47
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0C5EDCDA716911EDA03D4A50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5200:402::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:2c:d3:fe:11:25:78:5e:a1:4a:0c:cd:89:b2:8d:cc:b5:
         2d:35:29:a8:62:f6:70:82:38:f0:a3:b9:aa:3d:c9:12:7c:01:
         be:eb:02:6a:ef:2d:35:b6:99:e0:e4:df:86:4f:63:0f:5d:d8:
         34:8d:ab:02:99:70:4e:56:d9:fc:59:b4:94:6b:c2:81:94:6b:
         39:1f:ee:29:fb:a3:dd:f4:18:49:f4:86:c1:c7:bf:c5:82:b4:
         92:99:f0:2f:99:ba:13:4e:8f:03:2a:60:3c:56:86:eb:ea:7e:
         b1:3b:18:5f:9f:2e:d3:4f:94:a5:7c:aa:d0:c4:9a:70:23:f4:
         9e:84:49:c6:3c:c7:89:77:82:93:62:72:16:ad:bc:2d:30:aa:
         76:75:a8:cc:87:5b:b1:6d:1d:bc:eb:39:32:e7:f2:41:b5:11:
         c6:c7:cb:4f:14:81:18:a1:d5:1e:c4:76:1c:21:a4:77:1c:25:
         e1:cf:ff:96:72:ef:0d:b9:fa:8d:d3:ce:02:31:c2:54:2a:6b:
         6b:59:31:ac:1c:d8:8a:8f:3e:57:f4:1f:2a:f6:19:c4:b3:ac:
         76:61:48:da:84:6a:2d:c6:f6:40:79:11:a0:1e:e6:d8:24:70:
         be:7c:14:ef:63:ce:0d:90:fd:54:3c:7a:46:d6:69:b6:87:1d:
         c0:dd:74:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:18:24 2026 by rpki-client