Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/854D2E98B73E11F180636EBF3711F970.roa
File:                     854D2E98B73E11F180636EBF3711F970.roa (raw, json)
Hash identifier:          HQtlb2V3nIX90poa83Ikw5eFvg7jAOPZVR+dozSxCc4=
Subject key identifier:   04:47:B5:A3:37:D0:2D:BB:26:FD:45:8F:D9:48:18:87:C5:4A:AD:CF
Certificate issuer:       /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292
Certificate serial:       0E09
Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/854D2E98B73E11F180636EBF3711F970.roa
Signing time:             Wed 23 Sep 2026 11:04:18 +0000
ROA not before:           Wed 23 Sep 2026 11:04:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138417
IP address blocks:        2407:e7c0:109::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl
                          rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3593 (0xe09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292
        Validity
            Not Before: Sep 23 11:04:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ab3b232-ca57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:4c:f8:a2:43:6c:6b:f1:48:f9:16:4c:ee:
                    f8:80:e9:e4:85:89:45:a7:00:98:15:ce:1c:06:c7:
                    cc:6b:c7:4d:2d:dd:c6:14:b8:b6:0c:11:87:8e:50:
                    bb:1e:ea:28:68:3b:0e:e4:fa:ef:0c:90:17:49:62:
                    fc:b0:85:4b:20:af:96:f7:9a:1b:45:ae:70:37:15:
                    a6:f1:51:d1:4b:da:62:db:e4:b2:8f:14:58:e0:b4:
                    d1:7e:9e:0e:ca:df:b9:5a:50:00:7c:64:12:2d:7c:
                    51:af:df:5c:07:81:5d:dc:84:7e:5f:2b:35:5c:74:
                    82:60:f9:be:48:ab:c0:ef:c2:d9:72:f5:15:c4:b0:
                    5a:15:de:f8:6e:e7:60:d7:00:a8:a9:bb:23:c0:0c:
                    83:a2:cc:67:2e:43:34:a7:d9:40:07:2b:e2:c5:fb:
                    5e:36:89:95:77:23:31:cb:02:4f:0a:b1:4f:58:27:
                    9a:ae:0f:df:07:dd:fa:53:a8:2f:79:39:2d:ed:48:
                    68:25:49:10:e7:5e:8b:33:3d:aa:db:1e:36:2c:94:
                    6f:3b:fa:a0:dd:5f:5a:ce:cd:03:16:8f:09:af:7b:
                    1d:96:95:db:7e:e7:6a:3c:76:2b:37:23:86:78:8b:
                    12:55:e1:c3:aa:b3:14:ee:59:15:ab:55:34:8a:56:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:47:B5:A3:37:D0:2D:BB:26:FD:45:8F:D9:48:18:87:C5:4A:AD:CF
            X509v3 Authority Key Identifier:
                keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/854D2E98B73E11F180636EBF3711F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:e7c0:109::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:58:c9:dc:7b:64:39:cd:1e:81:57:e9:ab:6d:2e:ef:67:
         7c:1a:cd:41:28:06:78:2b:73:6f:de:2d:ec:9b:5b:4c:ed:27:
         dd:d0:50:26:fc:29:59:b7:d3:1f:c7:63:9e:4a:a8:3b:d2:65:
         75:c6:71:5d:a0:b4:bc:6a:f1:0d:c7:4e:49:6e:ce:b5:6e:ec:
         c5:0d:9c:c1:7e:bd:13:70:ab:88:67:39:36:a6:60:0f:bd:e3:
         3c:ee:35:ab:17:5f:bf:e1:d5:04:43:8c:bc:e5:b9:59:91:c8:
         f5:18:d2:3b:25:68:61:53:b4:63:27:d5:f8:74:eb:06:2b:37:
         d5:fd:88:76:e4:b0:f9:42:5e:cd:b7:a8:43:bb:20:b5:d1:59:
         44:9a:ff:d4:f1:ae:3c:0b:59:2d:af:8f:4a:f2:17:13:02:d6:
         cc:18:1b:50:13:33:c5:05:59:17:f4:ed:0c:68:31:73:7a:0b:
         0d:6d:79:55:97:55:1b:a2:21:24:a3:a7:cb:50:38:0b:04:a2:
         a2:3d:47:3c:a7:b0:6e:2a:1a:a7:2b:81:00:d9:0c:a8:ca:9b:
         1b:61:16:28:b2:a2:5e:42:a2:27:bd:d1:69:e1:ba:00:2f:7d:
         77:0d:00:a3:be:c2:59:52:3a:46:1f:73:22:40:12:b2:86:4c:
         c5:91:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:42:53 2026 by rpki-client