Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
File:                     EF1D0466455311E98FA31F68C4F9AE02.roa (raw, json)
Hash identifier:          MHuC/c0u9rLMw5yxdb8yo13RMMDAL1YViJT5Op2QWCw=
Subject key identifier:   51:89:AB:C6:E6:EA:8F:23:51:87:1D:7A:83:B0:ED:47:49:E5:CF:9F
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       36A7
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:17:20 +0000
ROA not before:           Wed 30 Sep 2026 16:17:19 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     55433
IP address blocks:        2405:8a00:6029::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13991 (0x36a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Sep 30 16:17:19 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd360f-c58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b4:53:ef:1c:fa:e2:71:45:a8:fa:b6:70:3d:
                    7b:c4:c2:87:f3:41:05:01:df:95:9f:49:e0:15:da:
                    a2:a8:1a:77:e6:9c:e7:45:6c:b2:ad:ab:8e:55:f6:
                    be:21:c2:ff:30:ad:7b:ac:a2:0e:5b:77:26:9b:ba:
                    74:5d:54:a4:4b:57:48:50:5f:eb:0d:2f:8b:32:cf:
                    f3:77:7d:88:b9:76:2d:db:3b:db:5c:be:40:c8:d2:
                    a3:15:9d:35:37:f5:85:26:ea:b5:eb:fe:12:32:85:
                    ac:b1:4a:b0:35:a4:e5:ef:f3:0f:3f:fc:b0:79:7a:
                    94:61:94:de:9e:92:ff:21:dc:b4:10:33:f4:5d:9f:
                    be:6d:12:ca:77:4e:e9:1e:3e:42:e1:48:30:cc:87:
                    02:eb:e3:61:af:71:e9:26:61:0b:f9:9b:bc:db:ea:
                    0f:d5:30:47:6c:02:eb:a3:38:7b:57:4f:92:b1:f2:
                    60:b0:0c:df:32:7b:3a:ba:07:e5:42:53:c8:31:86:
                    de:78:be:dc:6a:e0:5e:d9:6c:56:62:e6:9d:56:58:
                    a0:1e:df:05:a6:35:ad:2a:98:a6:65:cb:5a:1a:56:
                    15:e3:ed:c1:42:85:98:85:18:a6:71:6b:6a:b2:88:
                    a9:51:f0:ad:62:f5:80:5a:4b:5f:07:29:ed:80:ae:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:89:AB:C6:E6:EA:8F:23:51:87:1D:7A:83:B0:ED:47:49:E5:CF:9F
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8a00:6029::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:5c:a1:96:17:4e:ee:f0:e6:bd:29:6f:71:88:80:36:78:e7:
         cc:4f:13:54:0d:94:b3:91:25:67:fc:5d:b8:b7:87:5b:09:b5:
         35:a5:51:28:8e:17:33:23:53:a4:39:b9:7d:57:f3:66:a2:64:
         f4:1a:e2:82:b8:4f:d8:ff:af:86:bd:b6:00:2d:cf:9f:52:58:
         07:d7:ce:be:d2:b3:26:52:73:7b:b2:28:d9:fd:02:34:6d:25:
         74:b7:86:72:8f:d7:22:e6:6c:32:c3:e1:17:3e:da:13:6d:82:
         63:3d:6e:58:8f:0d:aa:59:b5:16:16:de:0a:c3:90:79:2f:dd:
         1b:28:0d:b7:c5:36:86:09:0a:65:66:c1:1c:23:54:fb:7c:32:
         1b:e9:1e:31:ca:d7:db:34:bc:a1:43:df:15:dc:1c:2b:b1:0e:
         39:4b:08:37:fe:58:cd:b4:c2:40:70:51:d8:49:f6:bd:bb:e8:
         46:d3:6f:bf:9f:78:8c:e3:98:d3:d9:3a:d4:76:46:60:b4:a0:
         15:11:07:dd:db:92:69:06:4a:52:ff:2e:bd:c4:be:d9:54:d8:
         a3:23:d0:85:e0:f6:07:1f:92:ed:2b:a2:72:5d:9a:a4:eb:38:
         c1:e9:c2:a2:07:03:aa:2e:cf:92:d3:82:9c:b2:28:e8:82:6f:
         52:96:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:27:34 2026 by rpki-client