Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/F8309360B31411F1836BA7DEA8EE528E.roa
File:                     F8309360B31411F1836BA7DEA8EE528E.roa (raw, json)
Hash identifier:          q2AuTnFNg9kXhKe7dFa23qHrCyJOuC7F1p8DiBKw7Gw=
Subject key identifier:   7B:1B:BA:17:47:59:1C:60:42:43:64:F1:AF:2D:3C:F6:1B:86:F9:1C
Certificate issuer:       /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial:       A9
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/F8309360B31411F1836BA7DEA8EE528E.roa
Signing time:             Fri 18 Sep 2026 03:56:47 +0000
ROA not before:           Fri 18 Sep 2026 03:56:47 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154261
IP address blocks:        43.240.54.0/24 maxlen: 24
                          2001:df6:2540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
                          rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
        Validity
            Not Before: Sep 18 03:56:47 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6aacb67f-1db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:39:b6:05:f4:38:fb:49:7f:69:cc:d2:ac:f0:
                    1c:01:cf:7d:ca:a6:03:97:f3:aa:68:da:e7:98:27:
                    c6:3b:a6:d4:52:ce:d6:9c:97:54:d3:87:84:a2:97:
                    0b:f0:3c:51:1c:cc:5c:8b:82:02:0e:a6:6f:a1:c2:
                    0f:09:c6:8d:31:e1:55:80:89:0d:c4:85:6d:a9:80:
                    f8:cc:f9:ef:93:d9:95:be:8e:2b:f4:37:ed:33:52:
                    09:2c:4c:c7:68:5c:7f:3c:5c:1b:7b:20:98:87:67:
                    5c:b1:3e:0e:c6:ee:dd:2c:5a:ba:29:03:32:fe:cd:
                    b4:47:4d:84:ec:df:3b:7b:8b:83:d5:e2:3a:2d:90:
                    b2:6b:67:3d:76:b5:85:4b:a0:b1:a8:23:5e:31:03:
                    bc:24:05:3e:6a:78:53:1b:80:bf:a1:e0:3f:a9:d2:
                    9a:98:af:a5:d9:fa:f6:05:b0:4c:e8:b6:ad:1c:84:
                    48:a3:46:dd:3f:ae:1c:dc:0c:6c:14:9e:bf:dd:52:
                    23:4c:ee:0a:19:5b:fd:c1:04:6b:4f:44:12:bd:78:
                    28:70:79:8a:e2:97:99:30:83:cf:f0:1b:bc:af:ca:
                    95:a4:cd:33:a5:ae:98:ce:84:53:be:b9:d1:e1:c2:
                    1c:21:1e:32:29:7d:b6:24:04:9d:82:be:70:48:96:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1B:BA:17:47:59:1C:60:42:43:64:F1:AF:2D:3C:F6:1B:86:F9:1C
            X509v3 Authority Key Identifier:
                keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/F8309360B31411F1836BA7DEA8EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.54.0/24
                IPv6:
                  2001:df6:2540::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:ff:f7:1d:b4:e7:b9:10:2e:ef:5e:17:e3:6c:c9:d3:70:76:
         71:f3:ff:13:3c:5b:66:13:92:9c:fb:b4:be:2d:02:9f:14:fd:
         81:ad:ad:65:ee:d2:b3:c4:20:69:a3:37:fd:33:fb:42:4e:ff:
         c1:a7:df:8e:6e:84:d8:f9:fd:d2:79:da:31:15:ed:63:fc:2d:
         42:48:da:42:eb:97:6c:55:08:6f:ec:ee:60:44:82:4d:c0:2b:
         c5:2d:89:ad:52:b3:e8:29:98:b0:33:74:b3:a9:ef:35:4d:85:
         00:21:d6:f2:e8:a1:7d:5d:85:d0:32:86:04:a6:c1:91:f3:75:
         0e:8a:0f:45:4a:70:e2:62:ff:c7:55:32:64:67:de:09:11:ee:
         8a:ef:b0:e4:d4:f2:cd:e3:88:a4:db:e6:c2:e9:31:9c:26:d5:
         f7:3f:8f:af:76:a0:a2:75:9c:d9:7c:93:19:91:5c:1b:fd:f3:
         b6:56:63:49:81:0f:07:d7:ea:67:03:36:bf:78:1a:8b:e5:8e:
         35:ab:35:cd:83:f8:30:b9:cb:b9:39:2d:dd:79:0a:e4:ca:c2:
         ca:a2:58:aa:bf:14:e1:7b:20:51:a9:a1:ab:9e:db:c4:f6:ad:
         01:a3:a6:37:95:a2:3c:41:4b:ad:3c:89:42:31:9d:38:6a:14:
         af:a5:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:42 2026 by rpki-client