Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa
File:                     2EC0243A89E011F1B81BDF965611F970.roa (raw, json)
Hash identifier:          HlbEiXYQGYnUzE77dTv3Dl0fdaZ53XIDvfT5r88Cggw=
Subject key identifier:   F9:15:B5:84:73:72:C5:00:C9:AD:B6:D0:05:E0:17:66:45:D5:E4:28
Certificate issuer:       /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial:       C4
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa
Signing time:             Mon 27 Jul 2026 17:25:38 +0000
ROA not before:           Mon 27 Jul 2026 17:25:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135045
IP address blocks:        2402:1960::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
                          rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 17:28:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
        Validity
            Not Before: Jul 27 17:25:38 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a679491-f57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:13:45:42:c0:64:40:a5:34:93:4b:74:15:
                    48:cf:56:34:0c:62:00:2e:b4:47:04:12:0d:83:e4:
                    5c:25:77:3a:4c:56:00:03:bf:62:4b:cc:4f:ad:4b:
                    51:a1:f3:fe:a8:80:64:ac:e9:72:36:e4:0e:e7:63:
                    a8:3c:eb:df:56:b0:3b:49:ec:15:29:f1:3b:dc:e1:
                    3d:55:87:9c:d7:c2:4c:0f:3b:b9:24:f4:97:ca:d0:
                    9e:2d:7a:6e:af:78:f4:4d:20:e0:c7:3d:d9:b2:55:
                    5b:82:da:89:39:57:6f:aa:f7:b6:0e:59:90:03:1c:
                    bd:3f:fb:21:46:ed:e3:ef:a1:b7:40:51:fa:64:1f:
                    98:0c:6d:a3:4f:e0:9b:88:f6:7b:36:3c:d5:e6:aa:
                    64:ab:16:71:c9:4e:c6:73:ef:bf:cf:0c:d0:ee:13:
                    f0:60:5e:4b:5c:69:60:4e:2f:4f:36:4e:0c:ed:4e:
                    d0:44:9e:26:16:c8:0e:11:06:75:91:70:19:bf:26:
                    ab:e7:42:71:ef:47:59:48:cd:87:a4:fe:ac:e8:61:
                    61:66:f2:40:d7:8b:ee:ef:e6:42:36:7c:5e:f2:be:
                    f3:af:a1:be:68:6a:8a:6a:59:b8:51:c8:37:92:41:
                    40:97:07:19:85:fb:95:db:92:32:0d:fd:29:60:30:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:15:B5:84:73:72:C5:00:C9:AD:B6:D0:05:E0:17:66:45:D5:E4:28
            X509v3 Authority Key Identifier:
                keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/2EC0243A89E011F1B81BDF965611F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1960::/35

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:86:36:33:84:b5:aa:5e:9b:0c:eb:bf:a9:08:57:f0:20:
         2b:57:b0:ba:40:ee:c3:ec:b5:2c:0c:04:97:b2:68:c5:1a:57:
         e7:ef:3a:7f:69:07:60:ed:a9:5e:d1:b9:69:41:72:4d:95:bd:
         1d:aa:6b:a5:c0:22:49:5d:4c:d0:ab:ed:cc:1a:23:d1:42:15:
         db:51:91:52:00:87:4e:a4:b4:b4:fd:72:41:18:e4:26:81:d1:
         7b:93:fb:16:1e:02:dd:2c:88:07:88:de:bd:99:93:65:20:38:
         4f:5a:c1:81:69:55:52:29:ba:2a:88:df:83:0c:a3:f8:68:79:
         20:fd:b1:b5:98:1b:f1:c8:81:e0:23:1a:27:92:39:ec:05:41:
         bf:97:2c:23:42:f0:24:a6:69:58:2c:6c:80:62:b0:65:93:f9:
         f2:23:da:74:7c:bf:0c:2c:c2:e7:a6:e7:07:a2:52:b5:1e:54:
         e2:bd:ff:c4:1d:18:56:26:c7:17:8b:57:42:94:a0:75:c4:fe:
         57:6a:f9:7c:49:87:33:79:91:bf:a9:01:c4:6b:5b:56:4c:40:
         23:83:4d:5c:bf:a0:70:09:6f:7d:1e:a2:9d:66:ec:65:f6:c3:
         e4:4b:10:bc:09:eb:3c:7c:27:ad:5e:f6:1f:b0:9d:65:27:67:
         11:31:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:25:12 2026 by rpki-client