Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/08000CF0C6D211F1B9E8FB304411F970.roa
File:                     08000CF0C6D211F1B9E8FB304411F970.roa (raw, json)
Hash identifier:          17t7XOHu5HbQ5oMSuKTmg8VfZuvG2VKKXnLwcUyLieM=
Subject key identifier:   5C:1C:92:BC:1E:67:B3:BD:BE:0A:20:94:96:2A:1B:13:6A:4E:43:09
Certificate issuer:       /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
Certificate serial:       0887
Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/08000CF0C6D211F1B9E8FB304411F970.roa
Signing time:             Tue 13 Oct 2026 06:48:01 +0000
ROA not before:           Tue 13 Oct 2026 06:48:01 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149059
IP address blocks:        2406:c140:888::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl
                          rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 20:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
        Validity
            Not Before: Oct 13 06:48:01 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6acdd420-cd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:cd:cf:75:89:f7:e3:68:5e:07:b6:d2:7f:
                    84:cf:a3:a3:d4:2e:2b:46:1c:e1:b4:3b:0f:37:3e:
                    85:de:73:c9:8f:e4:9c:72:d9:62:ad:37:f7:11:c9:
                    17:ce:b3:32:19:05:c5:6c:fe:b8:28:5a:04:aa:d3:
                    58:92:2e:53:3b:3c:e6:a6:e5:4e:60:08:4e:26:5f:
                    18:05:c6:00:45:bc:c8:5e:d1:18:da:50:88:57:11:
                    aa:06:7a:db:7a:b7:e5:5e:2c:eb:82:c6:d5:4d:06:
                    80:8c:a9:5a:34:6e:3f:04:a5:69:c5:41:f3:dc:22:
                    3f:ce:7c:a1:78:b7:8b:43:36:b2:fa:86:29:e5:9c:
                    fe:9f:fc:ed:37:7d:d0:a5:9d:2f:d9:1a:5a:2f:51:
                    5a:87:76:76:d6:55:60:1a:37:01:b0:f5:c8:84:c8:
                    4a:99:07:a3:f3:e5:8b:19:62:36:f8:20:01:fc:64:
                    8c:4a:9e:0b:61:0a:9e:b7:9f:d4:4e:a0:6b:6a:1d:
                    04:9c:4f:d4:91:75:5f:6e:89:fd:5c:3a:d2:a8:df:
                    a9:2d:54:53:a5:b2:3b:61:1f:4a:24:af:e5:9a:9e:
                    e4:b8:7d:69:1a:aa:b2:0d:7b:1b:33:27:d4:93:dc:
                    6a:20:bb:98:b1:e5:74:33:ef:e8:6c:86:3c:83:0f:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:92:BC:1E:67:B3:BD:BE:0A:20:94:96:2A:1B:13:6A:4E:43:09
            X509v3 Authority Key Identifier:
                keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/08000CF0C6D211F1B9E8FB304411F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:c140:888::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:af:ac:c3:f3:d9:9c:f9:2c:68:ff:7e:1f:b2:9a:fd:9e:
         18:25:9b:f4:ff:26:d9:14:7d:2f:0b:8e:92:2d:8c:01:eb:9e:
         a5:18:00:85:e8:26:ff:ae:25:66:84:ca:8d:2b:66:f5:5a:81:
         cd:fb:d1:14:67:3d:a5:19:3c:2d:ef:ba:b6:4d:08:6a:2d:97:
         b5:69:ca:85:02:f6:ff:9f:83:60:43:43:c6:36:be:26:24:c5:
         8b:5d:43:85:55:90:e6:4f:02:44:80:b0:b5:bc:5e:95:2a:d5:
         fc:49:38:fd:39:c7:ef:76:91:e5:43:4e:16:b5:f3:30:56:63:
         cd:ca:e8:57:25:b1:e0:9f:cb:29:76:36:72:d5:97:72:1e:ec:
         ec:45:61:63:11:4b:17:f9:7d:77:65:ef:45:bd:36:1c:56:cd:
         44:f0:54:87:f7:2f:7a:3d:ea:ab:4a:cc:5f:ab:4b:f8:3b:bf:
         dd:55:2d:8e:c4:2c:a0:6a:fe:5e:03:cd:5f:c5:8e:4b:e8:22:
         23:9d:9c:cd:15:a9:50:81:3d:1e:0c:0b:13:a7:51:aa:5a:e8:
         52:c2:12:cf:3d:05:e8:3e:9f:41:32:08:dc:d1:55:37:c2:18:
         17:6c:f9:2d:74:5d:70:39:98:c6:75:e7:16:ec:32:fc:07:2b:
         82:9a:f3:8e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy
OTJDODg4OTcwHhcNMjYxMDEzMDY0ODAxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNkZDQyMC1jZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk7DNz3WJ9+NoXge20n+Ez6Oj1C4rRhzhtDsPNz6F3nPJj+ScctlirTf3EckX
zrMyGQXFbP64KFoEqtNYki5TOzzmpuVOYAhOJl8YBcYARbzIXtEY2lCIVxGqBnrb
erflXizrgsbVTQaAjKlaNG4/BKVpxUHz3CI/znyheLeLQzay+oYp5Zz+n/ztN33Q
pZ0v2RpaL1Fah3Z21lVgGjcBsPXIhMhKmQej8+WLGWI2+CAB/GSMSp4LYQqet5/U
TqBrah0EnE/UkXVfbon9XDrSqN+pLVRTpbI7YR9KJK/lmp7kuH1pGqqyDXsbMyfU
k9xqILuYseV0M+/obIY8gw+d6wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFwckrwe
Z7O9vgoglJYqGxNqTkMJMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3
MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp
SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTU5NjQvRUZDMkNDQkMyNzBGMTFFQkFERTZDMDE5QzRGOUFFMDIvMDgwMDBDRjBD
NkQyMTFGMUI5RThGQjMwNDQxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbBQAiIMA0GCSqGSIb3DQEBCwUAA4IBAQBYqq+sw/PZnPksaP9+
H7Ka/Z4YJZv0/ybZFH0vC46SLYwB656lGACF6Cb/riVmhMqNK2b1WoHN+9EUZz2l
GTwt77q2TQhqLZe1acqFAvb/n4NgQ0PGNr4mJMWLXUOFVZDmTwJEgLC1vF6VKtX8
STj9OcfvdpHlQ04WtfMwVmPNyuhXJbHgn8spdjZy1ZdyHuzsRWFjEUsX+X13Ze9F
vTYcVs1E8FSH9y96PeqrSsxfq0v4O7/dVS2OxCygav5eA81fxY5L6CIjnZzNFalQ
gT0eDAsTp1GqWuhSwhLPPQXoPp9BMgjc0VU3whgXbPktdF1wOZjGdecW7DL8ByuC
mvOO
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:25:38 2026 by rpki-client