Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/AF14F7EC516411F08E03714FC4F9AE02.roa
File:                     AF14F7EC516411F08E03714FC4F9AE02.roa (raw, json)
Hash identifier:          UUQORQsio3lk0Dz1v81wgIFzrkRhOLX9ckc1BZbuYO8=
Subject key identifier:   48:E4:C3:79:1B:EE:D2:E4:53:7A:C9:42:C0:CC:56:13:0F:4F:E2:9B
Certificate issuer:       /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial:       148C
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/AF14F7EC516411F08E03714FC4F9AE02.roa
Signing time:             Tue 06 Oct 2026 17:32:36 +0000
ROA not before:           Tue 06 Oct 2026 17:32:36 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     139074
IP address blocks:        2403:b4c0:ae00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 16:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5260 (0x148c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
        Validity
            Not Before: Oct  6 17:32:36 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac530b4-8da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:fc:e4:0c:df:28:f9:0c:1f:07:bb:f4:87:
                    86:ac:9f:e1:cd:a8:90:3f:77:f5:41:7e:fb:7b:31:
                    be:56:18:e4:06:2f:84:53:ea:3e:c7:b5:30:ae:bd:
                    19:bc:08:dd:34:5c:2f:26:60:d7:a6:99:95:17:24:
                    e2:d9:9d:b7:00:c2:eb:f8:b4:c9:64:23:1a:a3:fd:
                    9d:36:46:32:d9:8d:db:2a:39:20:88:d0:d6:69:a3:
                    c3:c0:f4:29:d0:91:b6:8a:4b:d6:64:56:4b:69:6f:
                    ab:b6:c9:be:66:1d:6c:b1:42:46:70:ad:8d:e4:52:
                    4c:eb:59:42:6c:3d:be:17:34:81:a5:b5:ea:86:62:
                    49:02:d3:e3:54:72:9e:85:67:52:fb:96:a7:31:8c:
                    64:e4:45:df:b9:56:3f:7f:50:44:05:7c:c6:c0:66:
                    7d:3a:e3:be:73:e3:b5:c1:c2:4c:48:2d:39:81:ed:
                    dc:e0:fa:9b:b0:25:f5:44:00:22:51:0e:81:7e:cf:
                    6e:86:40:df:70:9e:7c:bc:61:dd:e9:ce:de:3a:2b:
                    cd:4c:2d:30:a5:ff:af:7d:78:74:bd:e4:36:1a:54:
                    1f:f4:00:83:1d:dc:ba:24:57:15:56:ad:12:aa:39:
                    cf:f0:a7:b2:21:48:82:98:d2:64:a7:b2:03:2f:a3:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:C3:79:1B:EE:D2:E4:53:7A:C9:42:C0:CC:56:13:0F:4F:E2:9B
            X509v3 Authority Key Identifier:
                keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/AF14F7EC516411F08E03714FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b4c0:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:7b:27:e0:15:27:a1:9f:93:4b:9b:1f:f1:31:c9:4e:d8:6f:
         cf:f5:b7:c7:cd:29:13:09:4b:1d:4b:dc:62:85:d0:16:aa:8d:
         37:90:7a:e9:a7:62:04:fe:8c:5d:38:e1:08:d3:22:39:ec:8c:
         b6:96:e4:ca:14:35:1f:e8:74:de:c1:1c:e7:9f:ad:ed:f2:46:
         1f:de:66:ac:37:40:3d:98:00:a5:f2:e4:79:9a:ed:2a:72:ea:
         15:86:fd:5a:d3:29:25:22:14:be:fa:52:cf:81:18:e0:e6:8a:
         c8:d0:6f:97:07:02:51:e2:27:58:9c:9b:8a:e5:d2:1e:97:02:
         04:6d:51:88:2d:c7:96:20:df:af:81:92:a2:c1:66:eb:0d:05:
         df:58:49:f7:83:e3:cf:f2:4b:3c:fe:24:01:4f:9e:65:71:ca:
         89:bb:50:5d:43:65:6e:a1:74:85:81:a5:40:ec:db:ec:4f:b5:
         64:21:98:7b:75:3a:7b:40:71:6a:09:71:55:7d:23:c4:0f:cd:
         6b:2a:31:35:1b:64:0c:85:a3:d0:bb:81:ab:8d:35:5d:ee:ac:
         fd:bd:bd:06:cb:84:42:d8:75:f5:a9:6a:ae:4e:78:06:cf:e8:
         7b:51:94:cc:ec:68:ed:73:76:3b:9c:c1:99:7d:2c:cd:fc:e7:
         dc:23:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:34 2026 by rpki-client