Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/EEA88E78AD0C11F1A1B76E9C3C11F970.roa
File:                     EEA88E78AD0C11F1A1B76E9C3C11F970.roa (raw, json)
Hash identifier:          /b7wdkd1tUOXcTuWD0AJo9xrePpTHVqnq+j16rznxnk=
Subject key identifier:   3D:10:BD:D8:08:68:46:1F:FD:04:5D:A9:14:D8:79:C2:5C:56:A3:14
Certificate issuer:       /CN=A911B8D9/serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE
Certificate serial:       07
Authority key identifier: 67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/EEA88E78AD0C11F1A1B76E9C3C11F970.roa
Signing time:             Thu 10 Sep 2026 11:44:08 +0000
ROA not before:           Thu 10 Sep 2026 11:44:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134122
IP address blocks:        2400:eb20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl
                          rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B8D9, serialNumber=673D6C8185588B0CF06679C354FBBD0CCBBB54DE
        Validity
            Not Before: Sep 10 11:44:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa29808-202c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:44:4d:31:84:b8:43:3b:69:07:b1:6b:ae:
                    e9:f2:cf:93:7d:3f:b5:d7:b7:63:20:47:87:8f:d9:
                    e2:3a:9e:d4:b6:92:dc:90:f7:1c:f3:21:db:6c:6b:
                    03:da:f5:73:30:48:e4:90:35:76:19:45:c8:a8:e5:
                    12:1b:e1:0b:8d:93:30:b0:68:cc:23:5f:c9:48:80:
                    ec:1f:ee:88:22:f6:07:f7:8b:69:fa:7d:2d:29:c2:
                    3c:13:5e:f5:14:2c:49:a9:45:86:10:df:70:2e:45:
                    15:e6:c1:60:61:01:fd:f7:93:b4:d9:c8:d3:af:0d:
                    dd:79:fb:d4:b2:6b:e6:7f:8f:bf:52:06:22:ac:8e:
                    96:0e:4a:1e:69:6e:81:77:dc:76:77:85:43:34:70:
                    85:73:5b:cc:33:fc:25:1f:2a:bf:d0:43:22:60:94:
                    a6:c6:bc:e9:f5:ff:0b:f8:da:63:7b:3b:3f:dd:88:
                    50:4e:21:a0:34:cd:07:e7:74:63:7e:dc:96:ad:d8:
                    dc:84:4e:85:92:25:b6:9c:b8:a6:53:97:46:1f:11:
                    88:2a:05:31:2b:0c:0c:f9:83:21:b2:76:c7:64:59:
                    dd:b7:4f:d7:21:cc:46:de:78:48:db:57:5b:3c:e8:
                    ac:3c:2d:fe:d6:4a:6e:f2:23:23:1c:e1:1a:68:d0:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:10:BD:D8:08:68:46:1F:FD:04:5D:A9:14:D8:79:C2:5C:56:A3:14
            X509v3 Authority Key Identifier:
                keyid:67:3D:6C:81:85:58:8B:0C:F0:66:79:C3:54:FB:BD:0C:CB:BB:54:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz1sgYVYiwzwZnnDVPu9DMu7VN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/EEA88E78AD0C11F1A1B76E9C3C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:eb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:a0:f8:d9:db:71:9e:8c:4b:79:91:bd:44:fb:50:ad:14:8a:
         ed:91:e4:d5:4a:7e:63:3c:9b:f0:5c:d0:b4:d7:e9:cc:f4:79:
         a5:85:95:bb:6b:a6:61:9f:e7:08:f7:84:17:1c:83:e1:87:69:
         92:94:51:0f:87:90:3b:7a:89:0d:8e:66:49:47:23:cd:88:5f:
         a8:2e:ae:9d:3f:c9:7c:25:f8:04:9c:90:37:3c:c2:57:42:ba:
         62:fd:d0:e7:b9:e4:94:2d:15:08:48:9c:ec:9d:c2:e6:2b:7f:
         bf:f8:c0:50:50:f7:0b:a1:47:7a:05:22:3c:26:1d:9e:08:0b:
         f0:15:9e:37:2d:e8:b0:18:ba:e9:00:68:08:19:df:94:f0:41:
         16:ba:36:b5:8b:f1:3c:cf:db:6d:19:18:3a:3b:00:84:86:71:
         86:8a:20:88:c6:2c:69:d6:12:f6:75:0c:24:c1:96:e5:5b:40:
         87:e3:fb:e1:50:0f:1f:0e:79:cb:07:b3:2f:62:c4:b1:ab:09:
         66:42:b7:7d:60:c9:52:80:8c:23:d5:92:e2:c2:1f:41:cb:4b:
         ec:ff:da:cd:00:b4:10:6b:69:0f:dd:de:2e:1d:a6:da:66:4e:
         ec:07:6b:04:b3:e7:fe:47:f1:42:75:91:06:fc:de:e7:2f:42:
         5b:91:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:10:52 2026 by rpki-client