Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/327147F689B011F19349356D4711F970.roa
File:                     327147F689B011F19349356D4711F970.roa (raw, json)
Hash identifier:          x1QHkC56woVfrGk/yopOqidMeYOkcITbTOwUk15HedQ=
Subject key identifier:   15:E1:6A:63:8A:0C:03:71:1F:29:6D:A6:35:0E:F7:6E:01:6E:14:F1
Certificate issuer:       /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
Certificate serial:       028A
Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/327147F689B011F19349356D4711F970.roa
Signing time:             Mon 27 Jul 2026 11:42:08 +0000
ROA not before:           Mon 27 Jul 2026 11:42:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133370
IP address blocks:        2401:7840::/39 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl
                          rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529
        Validity
            Not Before: Jul 27 11:42:08 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a674410-9ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:78:34:88:ff:31:ef:9e:ee:70:01:d6:77:
                    b8:b3:57:22:93:b3:20:6b:90:fc:ac:be:76:26:98:
                    ce:39:8b:90:e9:db:2c:41:9f:26:9f:23:7b:6e:80:
                    9c:6d:91:0b:3d:cc:f4:aa:e5:50:15:94:b0:3d:35:
                    85:e5:dc:97:cb:9b:8b:68:40:e9:6e:31:01:18:7d:
                    da:dd:c8:a2:9f:7f:8a:68:00:98:4b:1c:a8:d1:ba:
                    e3:ea:69:e2:d3:65:7b:10:80:c6:01:2c:6b:06:a9:
                    e5:78:20:b0:f1:61:53:d2:77:d2:fc:94:00:b4:a6:
                    6b:b8:06:0a:ad:eb:72:77:14:d2:25:60:c4:55:af:
                    87:63:db:8a:2d:c2:dd:0e:b5:3a:18:51:1a:b6:d2:
                    30:f4:f7:e1:3a:da:5d:19:58:2b:24:c3:2f:f4:cf:
                    8a:54:7b:27:e5:d9:76:d5:fc:9e:b4:13:f7:42:4e:
                    03:9c:43:11:ea:12:ea:04:39:42:71:da:d5:fe:e6:
                    c8:53:ca:f2:14:c5:fa:44:3e:3c:77:96:dc:9a:8d:
                    22:93:24:24:eb:27:38:c5:91:3e:23:cc:eb:64:95:
                    ac:11:78:5f:62:9f:5d:72:61:b3:76:c6:fa:7f:e9:
                    1a:a6:88:14:8a:76:7f:79:2f:41:7f:92:54:78:ff:
                    a7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E1:6A:63:8A:0C:03:71:1F:29:6D:A6:35:0E:F7:6E:01:6E:14:F1
            X509v3 Authority Key Identifier:
                keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/327147F689B011F19349356D4711F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7840::/39

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:3e:d7:ce:1a:e3:5f:74:6c:8f:a0:7d:de:51:ab:37:20:
         7a:9c:49:1d:a5:5f:f5:17:2f:70:26:81:ee:c7:57:e9:c0:b8:
         fe:8d:85:b8:6a:24:76:98:c3:05:1b:38:2d:71:f6:b9:a9:af:
         2b:31:1e:1a:6b:c3:6b:3e:ad:ab:b2:cd:39:6e:71:a9:ac:74:
         aa:c8:63:48:a8:13:1f:de:ff:a5:52:08:52:f7:21:30:f6:ce:
         d1:84:6e:66:2f:ae:d5:01:ed:c5:2c:e8:9a:97:c9:f1:ea:88:
         87:a5:49:d7:a3:9e:61:4c:37:bd:f1:a2:5d:94:7b:c5:06:40:
         ef:53:ab:46:fe:af:15:e5:86:f6:4f:40:76:f6:07:8f:af:69:
         2c:75:e9:87:83:40:72:f5:64:42:d9:24:f6:4d:24:65:36:f7:
         96:10:0f:13:16:aa:cf:ef:d6:72:9c:3f:89:12:b3:b8:11:00:
         15:09:d8:b3:5b:cf:c4:b3:ab:4b:ca:41:9f:38:8e:b9:59:64:
         9d:e3:2c:fc:5d:8f:2b:2d:71:a3:d0:1c:3a:c6:fb:0a:e7:ff:
         42:ca:44:a0:50:36:3c:b5:42:d6:8e:c1:35:53:4f:7e:81:27:
         8c:fe:d4:ca:7b:a6:6b:17:bd:f3:ab:84:bf:e1:ce:3e:f6:67:
         4f:93:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:10 2026 by rpki-client