Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/0B7CF64642B211EF82734679C4F9AE02.roa
File:                     0B7CF64642B211EF82734679C4F9AE02.roa (raw, json)
Hash identifier:          kL62eWNNxCmIqWn148oDd5NiFkk9P6EuWtobo5V3pGM=
Subject key identifier:   D3:FC:05:A5:BF:7B:D4:82:08:F1:B7:F3:94:2E:A3:61:08:59:EC:73
Certificate issuer:       /CN=A913A748/serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
Certificate serial:       0186
Authority key identifier: B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/0B7CF64642B211EF82734679C4F9AE02.roa
Signing time:             Mon 27 Jul 2026 06:55:09 +0000
ROA not before:           Mon 27 Jul 2026 06:55:09 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152929
IP address blocks:        2001:df3:f9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
        Validity
            Not Before: Jul 27 06:55:09 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6700cd-2b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:85:03:23:ce:e9:9e:15:e1:ad:5f:ff:f4:
                    3c:7f:31:6d:6d:10:b5:c8:ab:02:72:86:31:78:87:
                    7e:a5:23:19:58:d0:49:f8:54:e7:1e:04:16:00:13:
                    c4:66:44:cd:d6:3f:e6:0b:c4:9f:b5:88:b2:0d:39:
                    b0:4c:21:36:29:1d:40:fe:af:be:82:4d:e0:8d:b3:
                    41:b4:84:79:5b:59:e5:2e:42:f6:fc:41:80:fd:61:
                    5e:6e:6a:1a:00:00:1a:41:63:6f:3a:04:cb:11:a9:
                    ef:41:c7:40:1d:d3:f8:ad:0c:a4:86:cf:9b:67:9a:
                    59:55:a8:8a:b9:48:ca:f4:bf:9c:e5:85:b8:4e:8e:
                    19:60:40:2d:d6:43:e7:e5:29:fd:d4:91:23:e7:0f:
                    46:58:9e:6d:d5:06:f9:d9:b6:4d:a8:d7:2b:f6:6a:
                    f9:44:e4:7b:f5:05:27:9e:42:8b:ab:f1:6d:9b:46:
                    ae:58:b2:0b:93:5b:9d:3e:15:29:d5:e4:19:78:51:
                    32:7b:6b:e4:46:e1:6f:c7:75:88:d8:d0:87:7f:c5:
                    6c:0d:bf:6b:dc:d7:80:2f:c2:9b:4b:d6:c6:25:98:
                    b9:69:8f:3c:a8:e4:27:73:9b:de:7e:52:f5:09:9e:
                    b5:3b:65:b0:c2:1c:93:10:ee:96:31:fe:d8:62:d8:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FC:05:A5:BF:7B:D4:82:08:F1:B7:F3:94:2E:A3:61:08:59:EC:73
            X509v3 Authority Key Identifier:
                keyid:B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/0B7CF64642B211EF82734679C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:38:ea:79:03:35:53:fd:73:79:1d:96:ad:3f:24:6b:a2:36:
         c5:7f:30:9d:77:3e:b4:b7:46:32:1d:1f:99:b9:75:fb:83:f9:
         10:50:16:92:5e:e2:f6:d5:3e:6e:32:de:c5:32:3c:e4:b2:c9:
         e3:1c:3c:15:e9:43:25:43:1f:30:fa:d3:d8:6d:83:87:0d:d7:
         6e:10:ef:64:d1:a7:dd:19:be:8b:d3:38:5f:93:e8:c7:0a:f4:
         aa:02:bd:71:39:26:03:30:8e:dc:65:fd:f4:a6:05:1c:fa:7a:
         1c:dc:a3:49:69:d9:59:50:3e:da:04:af:09:41:8c:bd:92:2e:
         18:d5:97:1f:8c:87:f8:60:f1:37:98:b7:40:11:9e:1d:55:94:
         6d:26:ed:7c:ae:85:a0:c0:dc:40:4a:18:25:60:07:28:36:63:
         30:2b:3c:f8:4d:1f:03:dc:eb:43:94:6e:34:46:91:74:62:47:
         e2:03:c8:fe:b7:0d:53:82:e7:8e:b1:59:0b:97:5b:8c:d2:0f:
         99:4f:f3:2a:ab:a1:85:cd:16:50:b3:91:97:f1:49:8b:0a:b1:
         ef:e4:05:2f:f8:9b:18:87:b7:b5:97:04:3e:da:dc:df:0b:60:
         7e:ec:b4:bf:3a:71:07:0c:84:39:97:d4:77:24:e8:a4:ea:8d:
         06:e7:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:03 2026 by rpki-client