Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/8197428E8A2F11F1979432C96D11F970.roa
File:                     8197428E8A2F11F1979432C96D11F970.roa (raw, json)
Hash identifier:          3agLE6eYwjBLKD73jdTnpcDMyC6z3gyTK8QJXd1hgRY=
Subject key identifier:   98:76:7F:2A:9F:27:DA:42:D6:A5:6E:FA:A4:0F:EA:21:A7:B6:CE:C0
Certificate issuer:       /CN=A91D2432/serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D
Certificate serial:       12
Authority key identifier: F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/8197428E8A2F11F1979432C96D11F970.roa
Signing time:             Tue 28 Jul 2026 02:53:27 +0000
ROA not before:           Tue 28 Jul 2026 02:53:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150670
IP address blocks:        2402:6760::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl
                          rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 02:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2432, serialNumber=F5ECC9362C1D3B73824F5D4299ADBFAB4AF84D8D
        Validity
            Not Before: Jul 28 02:53:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6819a7-f510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:6d:eb:cc:cf:db:84:96:84:f4:b6:1d:a2:
                    be:c6:fd:d5:5c:b3:27:f7:8b:bc:07:56:9f:d1:fc:
                    e2:58:e2:2d:0d:2e:85:a8:2c:7e:bf:a6:5d:b1:23:
                    6a:3e:78:e3:e4:c5:15:9f:0e:07:e3:4b:f6:07:ca:
                    37:7a:9f:c0:95:74:5a:cc:dd:68:5f:fd:d7:a9:31:
                    cc:68:07:d7:da:4b:ee:15:93:e9:25:39:aa:16:c1:
                    8a:9b:b2:0a:c9:04:c1:c8:dd:3c:15:4f:6e:9d:5c:
                    1f:cb:61:cb:a3:b1:3e:97:9f:98:fe:34:5f:fa:ea:
                    76:5d:c1:ec:01:25:d4:f4:c4:48:cc:09:09:d6:90:
                    25:6d:c9:65:08:cf:f6:55:35:38:bb:eb:b1:bf:98:
                    50:69:22:76:98:53:a6:a9:67:e1:f2:27:17:e4:6f:
                    2c:47:13:1c:b9:2f:80:1a:2c:e3:6d:28:24:dc:04:
                    29:ed:c1:fb:c6:4a:7b:76:47:89:cc:c5:56:70:ed:
                    90:5c:98:d1:fa:71:6d:f6:8c:57:0c:a5:d6:16:24:
                    10:c8:64:4a:98:3d:f5:36:d7:1f:48:59:30:cc:26:
                    1c:d1:5e:f6:df:4c:e7:ed:84:0e:ce:31:b2:1c:fc:
                    bf:92:3c:a5:a5:a7:6c:8e:3f:50:8e:f5:74:f5:00:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:76:7F:2A:9F:27:DA:42:D6:A5:6E:FA:A4:0F:EA:21:A7:B6:CE:C0
            X509v3 Authority Key Identifier:
                keyid:F5:EC:C9:36:2C:1D:3B:73:82:4F:5D:42:99:AD:BF:AB:4A:F8:4D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/9ezJNiwdO3OCT11Cma2_q0r4TY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ezJNiwdO3OCT11Cma2_q0r4TY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/A70764F682CB11F1B54AB87D77A30FBC/8197428E8A2F11F1979432C96D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6760::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:1e:f9:93:56:23:db:7e:f2:85:11:8e:dc:19:43:15:71:
         87:01:46:ed:15:e5:58:e2:bd:d6:99:de:7a:76:b7:25:0d:39:
         a3:f1:22:d2:ea:a8:ee:bc:bd:46:cf:b5:a8:e8:98:27:a3:2a:
         d4:3c:e1:b5:77:86:57:49:6e:6e:fc:07:8c:61:9a:a2:43:ba:
         f6:cf:88:16:cf:00:8f:54:b5:c1:27:35:ef:cc:2d:3c:aa:7b:
         1b:57:a1:21:97:6f:6e:bc:66:91:c6:f2:5b:97:4e:3c:4f:cd:
         2e:52:9e:75:07:36:d5:30:6b:da:7b:b8:8a:6a:3b:e9:65:5a:
         f8:d9:88:8a:ec:91:06:07:76:61:87:b5:a3:44:01:cb:74:cd:
         fd:5f:64:29:c8:9e:8a:a5:93:9c:d3:9e:dd:30:8d:99:81:63:
         d8:00:69:b5:8c:d8:2d:6d:ee:6a:13:f1:e8:7c:37:51:4e:39:
         c7:6e:64:16:b3:95:60:2c:97:f2:ee:b5:1a:8a:cf:b9:2f:26:
         0b:cb:d9:cd:67:81:db:6a:dc:a8:ed:b9:82:15:cb:53:d3:20:
         53:d6:f5:03:7b:28:a3:0a:8c:8a:4b:e3:19:d3:0d:5a:b0:3c:
         80:fc:1e:67:52:b5:a1:df:6e:18:31:13:2a:c3:e6:23:c8:c9:
         8f:15:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:06 2026 by rpki-client