Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
File:                     9F08E8B2D28E11EB9F83683DC4F9AE02.roa (raw, json)
Hash identifier:          kQR2rJRw7cibG4+VWuepJmVVMALBPz98kkD/QBlTqb4=
Subject key identifier:   1E:91:53:97:EA:BC:A4:66:74:23:1E:30:F1:B3:47:C2:9B:66:D1:F6
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       10F6
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
Signing time:             Sun 31 May 2026 18:04:36 +0000
ROA not before:           Sun 31 May 2026 18:04:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142437
IP address blocks:        2405:3340:e011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4342 (0x10f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: May 31 18:04:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1c7834-20ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:78:2d:f8:c5:c5:97:8a:11:5e:f7:e0:7e:
                    19:01:a4:7d:5c:6e:4a:21:ce:27:99:e1:08:c3:96:
                    c5:b8:d3:5d:0a:21:68:71:22:d1:87:eb:38:e8:46:
                    99:a3:81:ca:59:b4:d9:98:8e:3b:0c:ff:70:38:83:
                    6f:bc:49:75:ab:0b:75:e2:db:8b:a1:bd:22:28:db:
                    9b:53:96:cd:67:fc:c4:be:2a:a7:2c:1f:88:18:85:
                    b4:f7:9f:fc:41:77:06:51:6a:57:e0:a7:f5:6c:24:
                    dc:12:ff:6f:c0:32:d4:ec:ed:01:39:36:a9:f8:e9:
                    84:d8:3f:26:74:43:7d:88:ac:16:09:32:52:64:10:
                    10:47:5d:a7:bb:fc:a8:dd:c7:7a:ae:c3:a6:ca:ea:
                    2c:47:1e:03:57:14:2c:ff:2d:15:db:df:6d:82:85:
                    33:7d:36:a1:5f:07:ee:7a:50:b1:28:02:03:24:2f:
                    5e:52:25:0c:03:17:53:0c:43:12:5d:3b:63:83:e3:
                    87:45:73:a2:8b:f7:0f:57:3e:61:9f:c2:96:51:23:
                    80:54:c2:85:85:f9:c7:88:7f:21:af:63:36:51:4b:
                    18:ca:39:10:07:fb:f9:ce:17:6a:5c:d3:30:47:f3:
                    60:cf:7c:03:42:b7:8a:e9:c8:35:ef:87:87:b0:d7:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:91:53:97:EA:BC:A4:66:74:23:1E:30:F1:B3:47:C2:9B:66:D1:F6
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3340:e011::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:31:0c:c5:e0:45:9d:2d:41:29:f4:7f:c4:7a:f3:25:40:
         6b:07:c9:4b:ae:c3:60:aa:5d:35:df:ef:aa:e5:77:7c:47:2d:
         78:23:30:80:5e:71:15:b8:fa:19:60:22:6b:3b:d2:d9:b7:28:
         9e:4c:57:c3:ad:27:a0:ca:c6:87:cb:41:4f:04:d5:b6:68:83:
         85:ab:50:96:b9:dc:af:00:d3:99:e0:a5:21:f7:ed:86:53:08:
         d5:e9:9c:97:69:b2:ba:ae:bb:7b:21:e6:76:20:59:d1:9b:33:
         ab:ba:98:08:1a:ff:4a:60:d7:02:e4:6c:8a:a2:c6:8f:76:31:
         a5:0b:a0:7e:40:7e:5e:1b:ae:67:ee:ed:28:55:2b:f6:6c:f6:
         d8:14:c4:31:a1:21:90:5c:68:c6:70:b1:6e:69:bb:8b:6b:09:
         92:6e:49:7c:8e:ae:46:cc:72:d9:34:0f:42:30:ea:73:48:ed:
         52:01:ea:e3:e9:52:bd:68:7b:52:9c:72:23:17:ef:ba:6f:9c:
         96:c2:7a:c3:6f:88:5c:58:9e:14:0a:df:f6:55:6e:a8:de:b9:
         b1:7b:2d:18:25:03:17:29:2b:17:68:09:dc:a3:0f:bb:45:f7:
         2d:e9:3d:21:22:6f:1d:6b:cf:23:1e:bf:6b:6e:63:9a:82:3d:
         95:79:f4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:32 2026 by rpki-client