Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/8483134EB3D211F0A8A4D05CC4F9AE02.roa
File:                     8483134EB3D211F0A8A4D05CC4F9AE02.roa (raw, json)
Hash identifier:          0eH0W4SkTelSVbfjGvc2zgwhBNiYUIJ22+usU5q6VvQ=
Subject key identifier:   BB:19:96:E4:06:7A:2A:DD:B4:95:CC:9D:02:98:65:D9:B1:84:51:47
Certificate issuer:       /CN=A9150F54/serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F
Certificate serial:       A0
Authority key identifier: 39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/8483134EB3D211F0A8A4D05CC4F9AE02.roa
Signing time:             Tue 25 Aug 2026 07:57:05 +0000
ROA not before:           Tue 25 Aug 2026 07:57:05 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154009
IP address blocks:        2001:df5:cf40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F54, serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F
        Validity
            Not Before: Aug 25 07:57:05 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8d4ad0-0673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:11:18:5f:ae:c9:10:11:74:96:ee:01:33:
                    f2:6e:b6:c4:d8:d4:56:87:90:b0:be:80:44:c5:4b:
                    15:57:29:f6:a0:39:9e:ac:70:e2:2f:f7:2e:64:90:
                    e1:9d:86:1b:02:fe:8d:0a:49:26:68:0d:56:62:55:
                    41:1f:88:6e:af:86:24:8a:d0:7d:45:5e:90:0c:ff:
                    62:8c:04:6b:a7:20:f6:37:04:79:f7:29:73:3a:7b:
                    dd:c7:c5:49:80:2a:27:77:14:27:10:24:68:f2:fb:
                    54:e7:52:ef:6b:37:03:f3:ca:f5:74:91:bd:f3:81:
                    12:e4:c5:46:ce:24:2c:76:61:69:a9:06:94:69:20:
                    fb:42:49:6c:74:94:61:e4:cb:47:d3:2a:2d:74:4c:
                    8d:06:5e:78:92:0a:d5:a0:63:ff:f5:c8:08:f2:97:
                    8a:90:fb:5a:e5:de:3f:61:a8:d4:ae:ae:c3:94:6b:
                    b4:83:dd:05:bb:50:85:63:c0:ed:d6:2a:00:f3:72:
                    47:62:2f:cf:98:2b:1d:1b:bf:cc:69:7c:bf:94:a1:
                    b5:33:31:8c:c2:44:b1:4b:9d:47:d7:a7:a9:57:17:
                    38:ac:b2:4d:31:32:63:0f:d4:2e:d5:7c:a8:e5:6e:
                    e4:65:8e:45:73:2e:41:02:5e:79:f2:ff:49:98:d4:
                    35:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:19:96:E4:06:7A:2A:DD:B4:95:CC:9D:02:98:65:D9:B1:84:51:47
            X509v3 Authority Key Identifier:
                keyid:39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/8483134EB3D211F0A8A4D05CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:cf40::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:a0:9b:99:9c:c7:e1:b2:51:b8:35:61:72:b2:63:75:9d:
         eb:be:87:3a:b2:b3:26:bd:e3:aa:c6:1b:c0:a5:2a:b3:4c:46:
         6b:1f:69:f6:34:13:35:92:35:7c:8a:bf:25:76:92:90:28:db:
         70:8a:41:77:82:26:1f:be:ea:bc:09:b2:06:04:c7:3f:11:58:
         a6:4c:87:19:20:46:bc:46:ae:24:6b:c6:c1:b9:54:7d:06:4d:
         11:a6:6e:38:ad:3f:65:65:63:12:3c:7a:30:f9:35:00:c4:2c:
         d6:b4:b3:d3:7f:3e:e3:49:43:0c:e6:b0:c6:ba:45:7b:cd:79:
         24:71:69:97:14:73:20:49:50:7b:e6:77:0f:da:af:79:b5:f9:
         d3:9d:90:75:91:5f:81:93:0b:18:3b:47:5c:98:bb:ad:29:fc:
         f2:bf:89:63:3c:74:10:a5:84:b7:f0:60:54:58:f3:fc:9d:2f:
         06:79:74:cf:65:b7:65:8f:e8:c6:69:c9:e7:16:30:ae:f1:fb:
         9d:7a:61:44:cd:a7:9f:01:d5:9d:e7:27:4f:28:e6:a2:02:f2:
         d2:95:67:e8:6f:62:9f:4d:55:af:8d:56:30:4e:92:36:62:2d:
         90:14:5f:cb:c2:8b:d1:50:fd:22:c8:f7:21:15:0c:4f:39:b7:
         9f:d3:8e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:53:31 2026 by rpki-client