Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/A71814CA984F11F0B7A01E76C4F9AE02.roa
File:                     A71814CA984F11F0B7A01E76C4F9AE02.roa (raw, json)
Hash identifier:          7xtLwjgWcxzueZ5Avt5VKeQZGWVAx925gCUhgTSEDZA=
Subject key identifier:   A2:8C:AA:12:A2:8D:91:D6:D8:6D:5B:8F:00:62:9A:3E:28:9D:57:29
Certificate issuer:       /CN=A91D9928/serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
Certificate serial:       CE
Authority key identifier: B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/A71814CA984F11F0B7A01E76C4F9AE02.roa
Signing time:             Fri 23 Oct 2026 07:55:00 +0000
ROA not before:           Fri 23 Oct 2026 07:55:00 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        2402:2ce0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 07:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9928, serialNumber=B5B35F924EB5C32FBB41867D3A166E4A96BBECA2
        Validity
            Not Before: Oct 23 07:55:00 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6adb12d4-4043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:45:7d:cc:b5:e1:b5:79:66:d0:93:64:6c:
                    3a:ec:e3:ab:51:d0:00:3c:7d:a2:1f:dc:d7:44:d3:
                    18:39:70:1b:7b:bb:ac:eb:1b:06:84:bc:5b:53:49:
                    6f:5e:82:5f:51:b7:a8:cd:99:56:3a:10:22:b7:9b:
                    83:30:22:74:a8:ea:5e:c0:ce:d0:1e:3a:ef:50:de:
                    ac:5a:92:af:13:bd:16:65:d5:63:15:67:0e:d0:f6:
                    4b:5d:3f:14:ab:4f:d5:d2:f3:9e:92:b1:86:10:37:
                    8d:9b:d3:7e:06:30:c4:51:47:43:f2:7e:c0:ff:73:
                    74:79:60:fc:7a:58:d0:f3:89:0a:5d:51:97:7f:3b:
                    a8:5f:b2:50:46:bd:d1:ba:ec:4e:36:38:b2:35:f3:
                    70:94:2a:84:87:c5:b4:aa:fa:65:a2:a7:71:54:61:
                    66:78:06:4f:90:ff:1c:5b:8f:0f:96:91:29:7b:d9:
                    03:4c:5c:04:22:fd:b7:66:bc:96:45:0a:0c:13:a4:
                    94:16:12:1e:86:ac:1c:48:de:19:ec:aa:48:df:d2:
                    99:40:4a:74:c3:8d:5c:4d:90:cc:d4:f8:08:15:07:
                    4d:7c:82:60:fc:d2:ef:8e:75:67:d9:37:08:41:46:
                    f3:b8:dc:a1:ec:e0:34:d0:8b:c2:d7:67:04:8d:c9:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8C:AA:12:A2:8D:91:D6:D8:6D:5B:8F:00:62:9A:3E:28:9D:57:29
            X509v3 Authority Key Identifier:
                keyid:B5:B3:5F:92:4E:B5:C3:2F:BB:41:86:7D:3A:16:6E:4A:96:BB:EC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/tbNfkk61wy-7QYZ9OhZuSpa77KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbNfkk61wy-7QYZ9OhZuSpa77KI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9928/57DFBEBC984F11F085402975C4F9AE02/A71814CA984F11F0B7A01E76C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:d5:4a:a9:ca:0e:5d:27:f4:7e:79:9d:78:9c:81:d8:c1:
         26:b3:5c:fa:eb:85:ee:57:78:4a:de:a2:ce:a4:83:a3:12:1a:
         75:50:73:a6:d2:e7:f7:5b:bd:0e:5c:c2:38:0c:a1:80:8c:5d:
         91:5b:68:32:68:50:8b:73:e6:76:52:97:66:bd:e0:b5:c9:14:
         19:4f:dc:d8:e4:55:ef:19:4b:ff:f2:44:37:d2:2d:3c:f2:24:
         d2:a8:80:68:e2:2f:3a:ce:53:a4:85:e3:bd:dd:e9:0b:1b:5c:
         c2:b8:a3:dc:9d:17:de:47:03:ef:c9:90:8a:41:15:39:6f:98:
         37:8f:a7:dd:d4:1f:f0:64:54:6e:1c:c6:46:7a:d9:cb:03:41:
         d4:df:60:7e:d9:e0:a3:50:df:91:11:e6:16:d6:8f:8e:f5:39:
         26:c2:91:e2:15:82:22:49:99:fa:04:e6:ba:61:b5:88:e9:f8:
         fb:ff:e2:c5:8f:7e:1e:61:06:9b:1d:f3:29:d1:d2:8c:53:37:
         52:dd:d1:76:f2:bb:65:e5:4f:34:6d:5a:1d:dd:f8:fc:67:a0:
         26:ed:2e:57:42:22:fa:d2:7a:b7:24:49:bf:20:75:77:48:04:
         7d:08:86:4a:e8:0f:0a:69:7a:0d:42:87:57:a2:34:74:0c:df:
         f3:f7:0c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:12:25 2026 by rpki-client