Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/F3CE961064A311F1A97DC0998B47A888.roa
File:                     F3CE961064A311F1A97DC0998B47A888.roa (raw, json)
Hash identifier:          pejeTtYSguLZu0BW6m0RkH55kNdbMRCqIXu4V/iuKnc=
Subject key identifier:   F7:B9:B0:B7:89:F0:A0:8F:58:E8:C7:66:7C:74:5B:27:F0:60:9E:85
Certificate issuer:       /CN=A91C8A07/serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
Certificate serial:       0A
Authority key identifier: DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/F3CE961064A311F1A97DC0998B47A888.roa
Signing time:             Wed 10 Jun 2026 08:11:16 +0000
ROA not before:           Wed 10 Jun 2026 08:11:16 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4846
IP address blocks:        2402:49e0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8A07, serialNumber=DA7EED89F853A050AA78F86681908C99C3510670
        Validity
            Not Before: Jun 10 08:11:16 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a291c24-ad93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:0c:ed:80:3a:ac:9f:9e:69:ae:d0:81:b3:
                    72:f5:b4:6e:64:67:ac:19:ca:b3:5c:6f:9b:d0:35:
                    47:fa:8d:a3:e4:1a:3b:cf:a2:e2:10:8f:b4:2c:42:
                    63:ad:d8:c1:03:46:9f:9b:84:1d:08:4a:2f:62:40:
                    0b:19:04:f8:e4:24:7d:97:32:65:cb:56:70:74:fa:
                    0f:49:22:ef:98:4b:72:84:a1:03:df:8a:02:fe:99:
                    e5:3c:c4:10:e9:e5:cd:13:e9:3e:cd:4a:d6:48:51:
                    b3:00:c7:00:e3:f1:9e:29:f3:01:a2:01:03:39:7c:
                    69:89:66:3a:16:b4:5c:11:24:6b:ec:47:84:3b:fd:
                    b9:70:7b:dc:e2:43:05:cb:63:ce:d9:8a:c0:9f:6f:
                    7d:57:40:bc:8c:bb:a6:0c:fa:c6:49:0d:85:40:24:
                    30:78:ce:8e:3e:7f:8e:6e:b0:fe:39:21:46:51:ce:
                    c7:0f:54:e0:bf:f1:3b:d3:b8:fc:c4:6e:bb:0f:fc:
                    5e:5e:8a:ce:0e:3e:3d:83:36:1a:c4:1f:ac:49:2a:
                    f4:2c:3b:2a:2c:ff:c6:0c:5c:65:b1:98:24:12:77:
                    46:7b:8c:b9:6c:ac:17:f6:8e:1f:89:96:fc:59:16:
                    d2:e4:32:b2:48:92:08:2b:17:6d:eb:10:18:71:3a:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:B0:B7:89:F0:A0:8F:58:E8:C7:66:7C:74:5B:27:F0:60:9E:85
            X509v3 Authority Key Identifier:
                keyid:DA:7E:ED:89:F8:53:A0:50:AA:78:F8:66:81:90:8C:99:C3:51:06:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/2n7tifhToFCqePhmgZCMmcNRBnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2n7tifhToFCqePhmgZCMmcNRBnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/09CCC1C8621811F18BFC7B426D47A888/F3CE961064A311F1A97DC0998B47A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:49e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:3a:ed:c2:b8:94:09:97:05:a9:b3:f8:4b:1a:c3:1b:3b:
         73:c7:95:0b:0d:c2:45:89:be:14:29:86:d0:c7:17:69:2a:ce:
         80:3b:b2:ed:12:6e:5e:20:89:1a:27:bb:aa:1b:8c:2c:8c:3f:
         db:68:72:fa:f0:a4:d1:f7:94:81:51:61:20:66:f9:80:28:b0:
         cf:88:cb:86:5f:e1:d8:8f:e5:bf:07:82:f5:03:7c:de:17:58:
         47:9c:70:8b:82:08:a0:5b:6d:14:2a:05:b3:21:6c:e3:df:2f:
         14:40:f7:9b:8b:63:44:7a:66:08:c2:3e:ad:43:9e:3d:e5:72:
         8e:c1:13:fe:68:b2:a8:4d:4d:fd:27:f4:b6:52:58:93:85:2b:
         1b:6d:3b:4f:dc:c6:92:42:5b:ef:ec:8d:4a:1c:cf:41:f9:18:
         9a:37:92:58:25:bb:2e:47:75:d4:30:26:2e:9f:9c:b4:57:b0:
         9b:67:32:da:2a:e8:e7:51:6d:cc:ff:2a:b1:55:e6:98:75:b6:
         4b:05:99:b7:b3:f6:7a:7c:30:24:06:3d:0a:fb:81:cd:c2:83:
         06:05:e2:36:13:8b:2a:78:28:e5:62:75:dd:da:eb:04:b7:c2:
         e2:9b:3c:2d:ef:52:27:15:77:a1:0c:a0:ec:3f:a2:b5:c4:4e:
         74:07:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:55 2026 by rpki-client