Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa
File:                     acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa (raw, json)
Hash identifier:          5YhfrgtOtCLCRBRZBWTMGZlLJHqL+UHDUiy0BZbew+A=
Subject key identifier:   A5:F3:73:F5:7E:4E:78:AD:76:D4:15:49:77:B9:7B:C8:63:FE:75:A0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       57E9016732481568C52A4D631E38C9C27F10BADF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa
Signing time:             Sun 18 Oct 2026 00:10:59 +0000
ROA not before:           Sun 18 Oct 2026 00:10:59 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 00:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e9:01:67:32:48:15:68:c5:2a:4d:63:1e:38:c9:c2:7f:10:ba:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Oct 18 00:10:59 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=7780b007fe943d30c28452a7039e3bddf95b0fd50c79f5bf079764b486f0c7c7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:75:74:39:36:26:2c:75:47:57:ed:c1:7f:
                    7b:53:05:05:46:d4:5e:14:da:2f:fb:e7:e3:37:1f:
                    82:54:be:68:5a:56:c6:aa:78:4c:6c:2b:92:70:e7:
                    ce:55:32:38:b0:5f:0b:ee:a2:f3:b9:de:91:33:5b:
                    a6:fc:bd:c4:ad:7f:05:05:69:27:b5:89:d9:e4:16:
                    31:9a:5f:68:bc:82:a6:4e:c7:52:ad:5c:de:91:02:
                    77:78:a8:3d:49:7a:ee:06:fc:51:75:84:07:8e:40:
                    ef:ef:a1:24:f9:ac:b3:61:28:b2:a9:e9:ae:14:4d:
                    e8:2d:60:07:b5:32:f0:af:45:36:eb:f3:99:dc:89:
                    9b:0c:78:ab:53:5a:9f:c9:ae:80:0e:18:2f:24:1b:
                    0c:0e:78:f1:8f:98:bc:19:82:41:ed:cf:0a:63:16:
                    50:11:47:b6:b4:e6:cf:71:2c:ca:93:02:6a:38:df:
                    f0:2b:5e:ca:d9:f3:ab:ad:20:a8:50:df:07:2d:3f:
                    24:10:a4:20:8c:b1:fe:d2:99:aa:2f:95:b2:11:b8:
                    f7:02:41:cf:fa:07:6d:43:5d:25:11:16:bf:d2:bf:
                    fb:00:12:e6:c3:2c:f0:9f:c0:fa:36:e2:15:cc:3d:
                    7d:29:9a:22:fe:af:93:38:aa:07:03:29:2d:08:d9:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F3:73:F5:7E:4E:78:AD:76:D4:15:49:77:B9:7B:C8:63:FE:75:A0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:ff:95:db:d0:6e:41:cf:f5:58:80:54:83:8d:12:9c:2d:
         d9:37:1c:79:f8:59:0b:00:31:5c:13:01:e8:a0:67:96:24:61:
         20:75:04:38:73:b8:1f:6a:9b:23:ba:00:a0:1f:f7:3c:2a:fd:
         a6:bd:51:84:66:3e:2d:fb:2f:b2:a6:7c:58:f3:bd:c1:5f:b8:
         48:71:a2:45:29:7f:c6:d3:08:6d:55:90:f3:e4:23:ce:24:85:
         d4:d2:2f:d9:59:09:97:0d:fb:ce:94:68:4e:0a:b1:59:63:09:
         f4:34:05:f5:0f:d9:f6:c8:3f:ee:4f:98:c9:c9:1d:4f:03:3c:
         a1:76:7e:c1:36:31:74:04:50:92:05:40:2a:85:7b:43:a5:94:
         ac:9b:78:63:c2:07:e3:b7:5c:97:13:c3:3e:4f:5d:81:e1:bf:
         b0:6d:90:fc:6f:2b:a1:b1:c6:50:92:68:7e:4b:66:f7:00:a1:
         3e:b4:36:94:7e:bd:5e:59:96:95:4a:7e:78:72:47:fc:7d:b7:
         3f:56:24:7f:92:9b:00:62:7e:d1:78:41:b2:7a:b6:82:26:16:
         d0:38:17:6d:5f:9e:1a:06:ae:33:ef:80:ab:af:84:5b:5f:bd:
         8d:44:30:d4:66:28:ac:62:cb:81:8b:32:3f:10:76:79:be:75:
         15:6c:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:40:48 2026 by rpki-client