Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/E855FB7A980111F1937686323211F970.roa
File:                     E855FB7A980111F1937686323211F970.roa (raw, json)
Hash identifier:          6NC9VsA0PjYcqqS7+rb/opvcfAVHW6RSMyp3OIjHA6M=
Subject key identifier:   D2:61:56:27:11:69:18:9F:00:CC:3F:E5:49:E3:A3:30:EF:29:48:25
Certificate issuer:       /CN=A9114747/serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7
Certificate serial:       0F
Authority key identifier: B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/E855FB7A980111F1937686323211F970.roa
Signing time:             Sat 22 Aug 2026 18:24:56 +0000
ROA not before:           Sat 22 Aug 2026 18:24:56 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154828
IP address blocks:        2402:6ee0::/32 maxlen: 32
                          2402:6ee0::/48 maxlen: 48
                          2402:6ee0:1::/48 maxlen: 48
                          2402:6ee0:2::/48 maxlen: 48
                          2402:6ee0:3::/48 maxlen: 48
                          2402:6ee0:4::/48 maxlen: 48
                          2402:6ee0:5::/48 maxlen: 48
                          2402:6ee0:6::/48 maxlen: 48
                          2402:6ee0:7::/48 maxlen: 48
                          2402:6ee0:8::/48 maxlen: 48
                          2402:6ee0:9::/48 maxlen: 48
                          2402:6ee0:a::/48 maxlen: 48
                          2402:6ee0:b::/48 maxlen: 48
                          2402:6ee0:c::/48 maxlen: 48
                          2402:6ee0:d::/48 maxlen: 48
                          2402:6ee0:e::/48 maxlen: 48
                          2402:6ee0:f::/48 maxlen: 48
                          2402:6ee0:10::/48 maxlen: 48
                          2402:6ee0:11::/48 maxlen: 48
                          2402:6ee0:12::/48 maxlen: 48
                          2402:6ee0:13::/48 maxlen: 48
                          2402:6ee0:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl
                          rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114747, serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7
        Validity
            Not Before: Aug 22 18:24:56 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a89e977-5a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:31:7d:89:d0:82:a6:29:02:f3:ee:ae:a2:
                    2a:df:ae:ac:ab:8c:d2:fa:3f:af:5b:ab:0c:70:28:
                    f4:29:56:e8:02:7a:76:d8:a3:01:fa:b0:bc:c1:5a:
                    f6:7a:0b:49:b5:72:fe:78:79:3c:be:f6:40:10:fe:
                    f4:94:b7:0f:4b:f9:e0:5c:99:79:ba:5e:4a:88:d5:
                    b5:23:db:a2:95:9a:fb:4d:91:5f:b9:e5:ee:82:32:
                    fc:32:d1:b3:e8:68:f9:15:99:fe:a2:9b:d3:36:2b:
                    ee:68:3d:0c:be:6d:bb:a5:4b:b0:4c:3c:ef:ca:2e:
                    15:c2:fa:7e:fa:03:2a:f9:46:63:d3:38:4c:09:0e:
                    3a:e8:60:48:6e:66:cd:bb:99:81:1a:b4:6c:13:63:
                    5c:48:f2:10:93:45:b8:50:3b:b8:b4:05:a3:6d:98:
                    3c:ca:e5:4e:f0:6d:a0:36:62:60:7d:4e:fb:53:10:
                    f5:5f:1c:ab:da:2e:5f:eb:86:4f:c8:e6:29:2e:99:
                    92:75:40:96:a7:9d:21:95:84:03:3a:5b:38:dd:b5:
                    0f:2a:a7:1e:ec:12:29:92:bc:08:36:8a:eb:16:da:
                    b2:2d:ff:dd:81:c4:c9:6b:77:ff:1f:fe:e4:ab:2e:
                    98:bf:f2:4a:8d:64:fc:9e:d4:de:86:25:a1:83:6f:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:61:56:27:11:69:18:9F:00:CC:3F:E5:49:E3:A3:30:EF:29:48:25
            X509v3 Authority Key Identifier:
                keyid:B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/E855FB7A980111F1937686323211F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:8b:a5:a0:f1:a6:a1:06:bb:01:1d:cc:08:22:3a:62:93:f9:
         99:9a:f3:56:60:b6:95:72:bd:97:73:d7:ab:4e:aa:16:97:f2:
         04:02:fe:91:3a:4a:76:dd:98:b0:d3:a0:72:a1:b1:16:b6:70:
         46:32:e0:a2:2e:5e:d5:22:44:12:81:e9:f6:72:d3:20:15:e8:
         c1:b1:33:fb:60:24:7f:7f:52:cb:b8:5b:21:b4:ff:62:3d:76:
         70:01:91:7c:d0:e0:be:d9:e5:17:d5:03:1c:0a:25:8b:43:85:
         ee:a1:ec:ae:f1:46:80:46:42:8d:87:d3:bf:45:cd:13:5e:6e:
         c3:d5:91:27:75:d4:e0:0a:b0:16:bc:18:d4:58:f2:7b:3b:9d:
         c5:05:2a:e6:82:62:8b:de:3f:76:4b:3f:68:f1:f3:03:8f:a3:
         a4:df:2f:0a:f9:6f:dd:ef:f4:2c:29:b4:0a:39:e9:ac:0a:c0:
         44:48:67:47:3e:b0:3c:48:94:cd:8d:7f:35:1e:ac:fc:9b:94:
         ea:ae:de:34:24:6e:a6:1f:af:0b:d7:6d:25:30:1a:f6:74:a3:
         3a:a1:e6:06:6a:80:48:17:d0:86:c4:f1:13:29:c1:be:84:3a:
         ad:c0:75:b8:21:32:9b:42:7d:de:df:4d:c0:7d:2d:71:1b:98:
         6b:8a:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:07:20 2026 by rpki-client