Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa
File:                     12300E80ECD911EEB21F7B7FC4F9AE02.roa (raw, json)
Hash identifier:          o4HBq1xgFGnSG/Ii6CzGWaOkXzqOYR+uaeJex6SII34=
Subject key identifier:   94:C8:C7:AF:64:FB:0F:92:C0:25:14:74:25:41:51:76:BD:6D:2F:7F
Certificate issuer:       /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial:       13D4
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa
Signing time:             Wed 26 Aug 2026 15:10:36 +0000
ROA not before:           Wed 26 Aug 2026 15:10:36 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38272
IP address blocks:        2001:253::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 14:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5076 (0x13d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
        Validity
            Not Before: Aug 26 15:10:36 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8f01ec-d8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:ac:62:03:1b:6f:ef:3a:7d:57:ab:c2:c5:
                    05:c5:95:40:18:f5:2d:96:32:5c:e7:d4:34:7d:dc:
                    93:90:a9:a4:40:77:14:7b:af:90:42:22:27:1a:36:
                    4f:b0:dc:eb:20:77:ad:b5:a3:5d:e1:50:48:77:3e:
                    b5:3c:7e:6d:a8:a6:6a:7b:3b:d6:e9:ec:36:65:e2:
                    35:ad:28:1c:f7:23:66:04:7f:fc:bf:c3:bd:15:35:
                    17:fe:65:66:11:a7:77:f4:0f:95:ce:a4:34:d8:94:
                    c6:ce:16:12:c2:e2:ad:55:0b:61:6c:6e:eb:d0:3f:
                    00:86:0b:73:e7:08:c4:1f:23:2c:22:57:df:4d:81:
                    89:c1:a0:5f:42:b5:15:c0:5d:ba:13:eb:7b:55:76:
                    6e:49:79:8e:7d:31:11:60:8a:4b:cb:f2:28:78:67:
                    83:66:83:83:0c:f4:76:37:ed:1a:d8:56:6a:7f:90:
                    e6:66:bc:94:64:17:68:36:e8:40:c1:1c:5d:bf:7b:
                    13:10:25:bb:72:b8:07:6a:b5:97:37:d5:43:d0:bb:
                    b4:73:e4:20:13:31:89:52:36:db:0d:4c:84:4b:f8:
                    5f:52:da:63:57:8b:2f:dd:5b:f4:f9:57:03:27:f3:
                    2c:7d:0b:16:2c:8f:f9:bb:03:0c:df:6e:cf:24:f8:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C8:C7:AF:64:FB:0F:92:C0:25:14:74:25:41:51:76:BD:6D:2F:7F
            X509v3 Authority Key Identifier:
                keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/12300E80ECD911EEB21F7B7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:253::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:54:f4:9d:f8:01:ba:32:69:18:ee:3a:c1:9b:43:c7:c2:43:
         0a:d5:7b:1f:21:26:01:2b:d4:86:5e:f6:b1:7e:5a:cc:2a:4c:
         8e:71:9c:bb:bb:68:4e:ab:5a:e4:7a:c8:25:7d:a5:01:86:77:
         4d:55:e5:f2:dc:4b:84:16:fa:5d:87:b2:bc:09:53:8d:1a:fc:
         d3:5a:40:fc:b5:ee:85:49:04:bc:b9:fc:4f:e2:86:7c:27:4a:
         2c:f5:99:89:43:0b:9d:c8:ed:93:22:3a:65:e4:79:a4:97:57:
         08:33:f9:a3:9d:f3:9c:4d:88:67:89:4c:64:80:5c:74:3d:59:
         27:64:0a:5c:17:03:96:8f:5d:b3:bd:2f:ce:a3:aa:1c:7b:d5:
         60:a8:76:46:8a:51:8a:d1:3c:cb:f2:44:99:2e:bc:f2:2e:d9:
         77:42:b5:9a:d5:ad:fd:c7:59:e4:07:95:7e:41:97:aa:40:3f:
         1a:ca:a5:d5:14:72:75:ce:2d:e0:c0:68:5b:e4:2e:79:d5:75:
         37:0c:3d:de:26:0a:1d:44:d7:70:1e:50:a6:60:91:1f:e3:19:
         26:bd:50:b3:a6:a3:3d:0e:e6:1e:4c:7f:d7:02:2c:1d:cb:e6:
         30:fb:3c:c1:5d:5e:c9:f9:3a:e3:3b:a2:79:8c:1a:69:b6:f3:
         96:7f:51:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:52:34 2026 by rpki-client