Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa
File:                     F0A5F90452C311EAA49BC03BC4F9AE02.roa (raw, json)
Hash identifier:          bn/4qY6eMhl0iIYQN/2aY2AfX/iSyyGWvhlnOviixdM=
Subject key identifier:   5B:3A:A2:07:D7:A6:05:9C:0C:FA:6C:B5:50:BE:23:F8:D6:7C:3B:4A
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C02
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:56 +0000
ROA not before:           Mon 06 Jul 2026 15:11:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     19047
IP address blocks:        2001:fb0:109f:10::/64 maxlen: 64
                          2001:fb0:109f:8006::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15362 (0x3c02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5bb-754d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:76:ab:4f:d0:fd:c6:46:c8:5b:1c:d7:af:58:
                    36:bc:68:d7:8b:37:f5:7d:c9:71:e3:c4:18:70:1b:
                    f6:f5:03:2f:a8:ca:7b:9d:a6:74:77:40:32:ef:25:
                    59:97:0e:5a:f6:90:1f:26:bc:9e:8c:53:6f:a7:c4:
                    5b:6d:4e:e5:e5:8c:a2:6c:3d:2a:38:e4:2c:16:ec:
                    1a:84:45:d9:ea:b6:43:b6:6c:da:89:6a:21:34:4b:
                    01:05:20:8a:f6:86:e7:95:43:40:5d:9f:97:c0:52:
                    5f:af:0b:da:a9:12:4f:04:a2:fb:cc:b7:02:4e:2d:
                    2d:1b:fe:73:76:c9:0d:e3:2b:e5:65:10:77:0f:d1:
                    89:cb:a1:8c:62:e7:75:70:b5:e6:b1:99:d9:69:e2:
                    01:3d:b0:e8:b9:c4:83:ca:58:2a:66:0b:c6:ec:2f:
                    88:c2:d4:22:a6:2d:1d:5a:c1:81:b7:35:3f:33:f2:
                    75:3c:ab:30:5b:04:56:11:ea:2e:2d:c0:c8:03:1c:
                    c6:05:c0:16:a2:f7:5c:7d:d2:39:aa:17:88:1c:c3:
                    fe:86:49:4d:17:19:57:94:57:66:50:73:53:95:12:
                    a3:3c:26:05:45:44:05:bc:2e:a6:c6:86:30:48:e1:
                    1f:2b:30:92:6f:9f:80:c4:be:62:b7:32:7c:c3:b6:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3A:A2:07:D7:A6:05:9C:0C:FA:6C:B5:50:BE:23:F8:D6:7C:3B:4A
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/F0A5F90452C311EAA49BC03BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fb0:109f:10::/64
                  2001:fb0:109f:8006::/64

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:21:40:52:70:3f:ed:54:de:93:b7:53:79:6b:05:7b:be:
         e1:ce:a2:3b:21:18:32:8f:80:e0:d4:63:62:e2:db:9b:1c:5c:
         fd:b2:55:99:7a:f6:28:42:d7:9a:a1:f7:49:99:9f:50:e6:ce:
         99:46:03:74:93:06:cd:2c:92:fa:d3:80:da:cf:63:fe:02:86:
         84:5b:4c:72:04:a1:f5:89:47:ad:c6:ca:46:c7:f7:dc:f4:cb:
         77:a9:19:02:57:0f:7d:33:5c:e2:db:db:72:48:7d:55:ee:7b:
         0d:1e:f3:51:7b:24:fe:83:2b:7a:7f:e8:c3:a2:77:a0:3e:7e:
         5b:92:4f:1c:8c:04:cb:35:be:b3:1a:dc:6f:a1:b0:5f:f1:98:
         3d:68:b2:b9:19:de:29:df:13:08:b1:d7:1e:db:d9:cd:a2:aa:
         cb:47:a2:3d:9e:43:d2:6c:6e:8e:2e:42:09:9d:56:32:1b:4d:
         e1:67:a6:d5:f5:23:71:57:12:95:ba:39:ae:92:db:1e:94:bf:
         4f:47:82:cb:6c:ec:85:d0:e0:46:d1:fe:9c:a2:96:06:43:67:
         2f:f4:43:de:cb:34:3b:d4:9d:cd:67:89:80:42:58:f3:9a:2f:
         28:d2:ee:0e:4a:d8:69:1a:ac:40:22:fa:80:bf:a0:06:d0:11:
         f6:02:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:39 2026 by rpki-client