Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/3BFC4B0A931411F1884574F03411F970.roa
File:                     3BFC4B0A931411F1884574F03411F970.roa (raw, json)
Hash identifier:          SutKtjn58jiBSM8zZynClgTcqKXUAOmuAipUUGM+HAA=
Subject key identifier:   8D:E4:6F:C3:96:7E:5E:0D:CC:09:F4:A2:F5:1C:A3:EE:42:BF:B4:6A
Certificate issuer:       /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial:       01A9
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/3BFC4B0A931411F1884574F03411F970.roa
Signing time:             Sat 08 Aug 2026 10:30:54 +0000
ROA not before:           Sat 08 Aug 2026 10:30:54 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142108
IP address blocks:        2401:a860::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
        Validity
            Not Before: Aug  8 10:30:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a77055e-c2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:76:26:04:8d:20:99:e4:a1:fa:97:79:59:
                    15:31:ce:52:7f:58:45:b3:36:c8:df:b3:78:da:1c:
                    cf:a8:48:e8:77:0e:45:1f:0d:b4:90:9f:9f:5e:a4:
                    5d:9a:4b:a4:5d:57:3c:f8:e2:54:df:f6:1f:2c:0b:
                    ce:45:b7:23:99:c3:02:a6:e1:3b:48:dd:6f:b8:c2:
                    d2:95:8a:a4:20:84:81:9e:1b:ed:2d:2c:81:2c:da:
                    cb:33:ea:79:e5:75:51:b4:58:3b:dc:79:93:62:53:
                    7d:81:53:c4:fc:31:97:43:02:8a:22:f6:c9:5b:76:
                    4d:c6:9e:b4:22:d2:74:20:94:41:a9:43:9c:e0:9d:
                    1f:bf:f1:bd:25:20:28:95:73:6b:1e:45:a0:02:cb:
                    0d:68:83:a9:2f:02:d2:ba:71:55:4e:d9:e8:98:86:
                    e9:69:1a:bd:27:28:a7:ed:e7:1f:dd:ac:ad:62:8b:
                    e6:c1:e2:ae:68:77:c8:0b:67:3b:7e:3d:76:c1:3d:
                    4e:b1:80:72:7a:7e:d7:48:d5:e2:ca:e6:a0:a6:6b:
                    f4:13:e6:57:22:15:07:b5:3c:85:d2:76:4a:7b:8a:
                    1a:0e:16:f6:86:5e:c5:0f:b9:f3:76:d9:43:a3:a7:
                    51:5f:05:c8:ac:4e:3d:ee:0a:92:70:8d:7a:bb:aa:
                    e6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E4:6F:C3:96:7E:5E:0D:CC:09:F4:A2:F5:1C:A3:EE:42:BF:B4:6A
            X509v3 Authority Key Identifier:
                keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/3BFC4B0A931411F1884574F03411F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:a860::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:dc:be:9c:00:81:71:06:78:82:fe:a6:84:de:91:b0:51:9d:
         9e:fe:20:8b:68:2f:93:f6:c7:8a:4f:4c:48:16:0e:fd:a4:94:
         d7:2f:63:df:00:06:fc:fe:11:f3:9f:70:2b:e4:cf:e5:fa:da:
         40:eb:01:14:76:77:30:53:18:19:95:93:8a:59:13:4d:bd:00:
         2f:66:f5:e4:09:33:ec:70:00:cd:bb:7a:da:4d:d9:3a:6f:a1:
         fd:84:87:43:6e:59:24:ab:9f:1f:82:59:19:c9:71:22:39:5a:
         c3:ee:5e:b8:08:9a:f5:bc:ef:be:93:0e:6a:81:03:37:66:93:
         b4:26:df:3f:a5:1c:21:46:89:d4:08:8b:c0:93:2b:4f:9b:ed:
         d5:50:5e:f7:92:14:21:fe:73:ee:98:39:47:21:1e:c0:3f:3c:
         ff:c7:02:8b:52:05:3e:d5:16:bd:86:6f:8c:f4:c1:23:2a:f0:
         39:bb:b9:33:c2:77:78:be:a7:7a:dc:dc:29:a8:da:21:9a:15:
         93:ad:3c:a9:d4:2c:9e:43:7c:16:1f:1e:c5:03:e8:27:4e:62:
         2b:56:5a:9c:fd:6b:33:9b:ef:4e:7a:2a:d0:61:a8:22:08:56:
         cb:5b:b1:c8:57:ac:c3:c2:fb:56:77:fc:09:e9:63:5a:63:e1:
         f3:33:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:25 2026 by rpki-client