Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/2AD1C746940111F0B07D7068C4F9AE02.roa
File:                     2AD1C746940111F0B07D7068C4F9AE02.roa (raw, json)
Hash identifier:          RT811XLV5/H+z9rXyjPOcwNWUnb5MPdvTXm8sb3lfDk=
Subject key identifier:   5D:5D:7B:59:B9:67:99:40:2F:42:33:D7:A4:5C:4E:69:E5:0A:3E:42
Certificate issuer:       /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
Certificate serial:       03E8
Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/2AD1C746940111F0B07D7068C4F9AE02.roa
Signing time:             Sun 16 Aug 2026 20:40:55 +0000
ROA not before:           Sun 16 Aug 2026 20:40:55 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140981
IP address blocks:        2001:df4:6880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
        Validity
            Not Before: Aug 16 20:40:55 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a822057-2653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:74:7d:ea:2d:c2:6f:dd:4c:e7:28:8e:45:
                    8e:95:19:2d:db:8d:75:60:d4:6f:c7:53:1b:0e:bf:
                    98:fe:8a:4e:5e:b7:f9:b9:7a:02:5c:3e:9d:04:2b:
                    5f:99:64:5d:65:cf:ad:6b:3e:96:b2:ab:85:43:d8:
                    0f:e5:49:47:46:5e:b8:18:10:28:b0:d8:0c:ca:7c:
                    99:a2:f7:dc:87:83:a2:41:ac:10:58:96:6a:13:7d:
                    7d:25:10:55:c1:b6:6c:7d:83:ae:32:78:7f:b6:3b:
                    69:7d:cf:11:ae:0c:ca:70:d7:89:b5:c4:b8:1d:a8:
                    28:56:5a:17:98:06:ed:d4:ec:b0:29:e1:84:d0:54:
                    eb:66:f9:bb:b2:23:2d:e3:8e:cc:ca:13:fe:9e:c7:
                    14:9d:a5:d7:9d:8c:ef:d7:98:c8:84:36:66:d1:44:
                    ba:3e:d1:0d:87:1e:b6:22:d5:ad:a7:ac:11:b6:dc:
                    b7:d1:84:dc:a9:5c:fb:b1:f2:5a:f1:0a:20:de:e9:
                    38:51:14:ca:76:58:9d:68:e7:99:c3:36:f6:ee:7f:
                    59:91:10:3b:98:4c:84:a8:a0:e7:ee:1a:64:a4:af:
                    b7:eb:a4:6f:85:d1:99:6b:a6:4b:63:55:1a:d4:da:
                    75:a2:23:1a:47:4f:da:97:9d:fc:bd:98:6f:12:65:
                    bd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5D:7B:59:B9:67:99:40:2F:42:33:D7:A4:5C:4E:69:E5:0A:3E:42
            X509v3 Authority Key Identifier:
                keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/2AD1C746940111F0B07D7068C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:6880::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:20:ac:80:54:b7:39:e8:0f:45:c9:21:71:c9:24:4b:a8:65:
         be:fd:50:d4:d4:e6:74:8f:60:fc:c1:34:73:66:04:4f:b6:91:
         4c:66:e0:fa:f7:63:9a:f1:5b:cf:c0:3d:d2:a4:27:b3:02:4e:
         11:2d:3f:fe:d6:6f:a8:cc:3c:ae:5d:e6:d0:e0:8b:d7:28:d5:
         74:61:de:69:bd:79:cd:9d:f1:3e:af:39:8d:2f:75:8d:01:33:
         3b:9a:3e:fd:44:e3:eb:50:a3:c9:ac:db:80:c1:90:c6:41:44:
         cc:ee:58:09:18:8a:d4:52:71:54:7b:eb:ad:be:19:a4:17:7f:
         d8:08:f8:7b:75:c8:64:4f:58:d0:d5:6c:2d:e9:10:bb:ff:c5:
         3d:06:b3:e7:ad:7a:62:1d:2c:f8:0a:06:27:1d:1c:78:53:83:
         80:18:43:8a:6a:2f:56:71:4e:be:cc:f1:6b:3e:30:45:b4:ac:
         d5:e0:b7:a9:02:5c:cf:5b:5c:0f:66:91:b9:72:00:64:96:dc:
         76:8f:5e:41:d4:7a:72:93:7e:b7:66:6e:9d:19:2e:af:ed:36:
         72:67:31:bd:14:a0:f0:7f:31:0d:42:48:eb:43:e4:49:d1:3b:
         55:14:46:28:28:b2:06:14:d9:02:bf:ac:66:1e:91:f0:f4:eb:
         51:da:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:42 2026 by rpki-client