Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/13D1BA588A5D11F1831FA6813B11F970.roa
File:                     13D1BA588A5D11F1831FA6813B11F970.roa (raw, json)
Hash identifier:          Xf5SP5AS1EFI02JBBXyujYvXMblTTJZrdC5Wu0eO50w=
Subject key identifier:   D7:00:57:64:92:BD:06:CA:F7:70:3C:AE:4A:C7:5A:62:D3:EC:66:67
Certificate issuer:       /CN=A919A43E/serialNumber=1735B85E3E5E5403A49539C26C667C8B8092BDA0
Certificate serial:       03
Authority key identifier: 17:35:B8:5E:3E:5E:54:03:A4:95:39:C2:6C:66:7C:8B:80:92:BD:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/13D1BA588A5D11F1831FA6813B11F970.roa
Signing time:             Tue 28 Jul 2026 08:19:39 +0000
ROA not before:           Tue 28 Jul 2026 08:19:39 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154767
IP address blocks:        2001:df7:4740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.crl
                          rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 08:19:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A43E, serialNumber=1735B85E3E5E5403A49539C26C667C8B8092BDA0
        Validity
            Not Before: Jul 28 08:19:39 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a68661b-ab48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:87:45:61:6e:d3:84:27:d2:2d:21:f0:6e:
                    15:6b:b0:35:a6:c6:ab:b2:cc:e4:08:15:49:75:53:
                    63:c0:e1:38:8c:ff:89:4c:f3:62:60:a3:d2:97:1b:
                    50:35:e0:53:20:d4:f6:d2:2d:2b:29:89:45:95:05:
                    7d:b2:10:50:1b:95:7a:f1:78:e5:40:60:b4:fb:fe:
                    b5:f6:2b:1e:8a:74:79:12:f6:28:68:ad:5f:1b:0a:
                    31:37:23:1c:c1:a7:04:bd:d1:83:81:bd:19:12:4c:
                    d9:90:ba:9c:b6:5c:d2:f3:05:50:00:2e:9e:e8:17:
                    5c:61:73:80:fd:6a:6e:4e:02:df:57:8c:cc:0c:95:
                    7d:b7:3c:a4:e5:d6:2e:85:ed:61:88:03:20:41:9c:
                    4e:c7:10:70:d3:87:0c:2d:e0:f7:83:e3:34:84:ca:
                    c9:41:be:95:15:40:21:bf:a7:c7:92:b7:92:7b:57:
                    67:5b:0c:d1:a7:f7:4d:84:6a:8c:78:3c:df:47:ae:
                    8f:40:c8:8c:20:05:ad:7b:21:88:70:57:c6:67:b3:
                    b1:fb:bd:01:9b:53:07:e5:2b:be:bf:3d:da:b2:88:
                    22:45:a5:72:90:72:c5:7f:38:22:7f:18:dd:1b:ef:
                    f3:8f:93:5b:90:ba:c6:49:92:49:ef:7f:1b:8d:9c:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:00:57:64:92:BD:06:CA:F7:70:3C:AE:4A:C7:5A:62:D3:EC:66:67
            X509v3 Authority Key Identifier:
                keyid:17:35:B8:5E:3E:5E:54:03:A4:95:39:C2:6C:66:7C:8B:80:92:BD:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzW4Xj5eVAOklTnCbGZ8i4CSvaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A43E/F805851C8A5B11F197DB3E693A11F970/13D1BA588A5D11F1831FA6813B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:4740::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:97:e8:34:69:09:27:5d:9b:cf:e4:5b:56:6a:64:9b:38:61:
         e8:40:91:8a:3a:e7:f1:66:c3:62:30:ff:ec:2c:5b:e3:88:a7:
         91:4e:56:96:0b:00:0b:11:8c:09:ad:4c:f8:ec:43:5d:90:9b:
         16:a9:52:19:97:26:43:c2:9d:32:28:67:67:05:af:0d:47:5d:
         e0:80:75:6d:f4:07:4a:62:d0:1d:a8:f2:ce:6b:c7:0a:d8:2a:
         5c:dd:b5:13:d9:ab:7d:1d:ed:90:86:4e:17:ac:0a:f2:cb:4b:
         dc:94:3d:ac:fd:a6:3e:3d:07:68:f8:f4:bf:d0:a2:d7:d9:cf:
         7b:6e:be:8e:7d:52:78:99:d1:85:f3:7e:53:f8:ba:98:11:6d:
         56:6a:76:f2:c7:59:1b:89:f7:b2:7d:5d:ff:77:bf:c5:ca:e5:
         97:a1:c0:e6:69:f9:8e:fe:c1:c6:6f:44:ef:6d:3e:17:f2:f9:
         bf:1a:b5:fc:21:17:33:2e:98:f7:37:12:c2:8b:26:e0:27:04:
         7b:f3:8e:f6:be:a0:be:60:74:3b:9d:16:28:ca:3a:4c:c1:6e:
         94:4d:16:c4:79:e6:87:14:3e:7b:6b:05:e9:bc:51:4a:e4:41:
         44:6f:6b:a6:f9:4d:f0:a8:fa:c9:18:a4:5f:b6:fe:d1:9a:72:
         91:3f:63:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:14 2026 by rpki-client