Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/B6E9F4E89E0411F192F8ACA34A11F970.roa
File:                     B6E9F4E89E0411F192F8ACA34A11F970.roa (raw, json)
Hash identifier:          i+mz8RKuF8p3hv1YLSt70vMBBM5Cu/pBQuz04gTb5ec=
Subject key identifier:   82:59:99:B4:A7:FD:0C:01:25:84:DE:EE:8B:12:66:E6:66:39:9A:FC
Certificate issuer:       /CN=A9122796/serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB
Certificate serial:       02
Authority key identifier: 23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/B6E9F4E89E0411F192F8ACA34A11F970.roa
Signing time:             Sat 22 Aug 2026 08:37:31 +0000
ROA not before:           Sat 22 Aug 2026 08:37:31 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132367
IP address blocks:        2402:6ca0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl
                          rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122796, serialNumber=2397A9D5983683626BAD2C147FB7D33C49BDC6BB
        Validity
            Not Before: Aug 22 08:37:31 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a895fcb-81d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:99:77:d1:03:17:ff:7c:62:38:3a:7a:60:
                    62:88:05:21:2d:d3:ee:4b:63:94:60:ec:4d:82:14:
                    6e:5c:9b:35:1d:2e:9f:40:9d:a9:6e:be:2f:0d:76:
                    48:5d:a3:0b:08:27:6f:35:a0:0d:18:76:af:32:b0:
                    34:48:03:92:49:0b:23:5e:6b:8f:a9:2d:fd:01:c4:
                    cb:3e:7f:c1:7b:6d:90:b5:f1:88:63:ed:12:66:9f:
                    fc:d9:f3:c8:1d:42:22:87:0c:1f:97:3f:22:79:65:
                    cc:91:a3:27:9a:d5:cf:17:73:f7:01:4d:01:f2:3b:
                    dd:6e:5a:91:91:74:67:4e:18:2c:49:bf:da:d7:6e:
                    e6:a1:7b:69:34:0e:b0:8b:cf:42:29:51:ec:5e:1e:
                    33:75:f2:f0:d9:0f:41:4c:2d:17:44:4d:c0:7f:d6:
                    be:6f:6a:a8:dd:2b:0a:a6:8b:19:e7:54:c5:05:06:
                    08:af:42:f3:71:6d:49:4d:45:17:57:9c:64:0f:6d:
                    22:ec:aa:47:49:12:70:2f:cf:36:34:84:b3:0d:b7:
                    88:57:47:21:ba:9d:40:29:54:94:3e:7c:76:25:08:
                    7d:cf:1e:75:bd:3b:0b:b9:49:89:34:23:68:b2:ad:
                    d6:8e:93:2f:c7:f2:92:82:35:6c:b0:f8:32:c1:43:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:59:99:B4:A7:FD:0C:01:25:84:DE:EE:8B:12:66:E6:66:39:9A:FC
            X509v3 Authority Key Identifier:
                keyid:23:97:A9:D5:98:36:83:62:6B:AD:2C:14:7F:B7:D3:3C:49:BD:C6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I5ep1Zg2g2JrrSwUf7fTPEm9xrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122796/BDAB51129E0111F1A1C9CC584811F970/B6E9F4E89E0411F192F8ACA34A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:03:fc:a6:78:d0:c3:8c:53:d8:5c:2a:4d:03:d1:d9:48:72:
         9b:76:d6:7f:63:eb:49:8c:f2:36:ef:8a:d0:7d:66:8c:a9:97:
         60:13:ce:6a:05:c6:d5:bb:87:14:d7:82:c4:f5:f4:4f:a9:79:
         16:35:28:24:32:5b:d5:4c:3b:a4:48:ff:87:80:8c:18:75:46:
         62:bf:b1:22:b9:40:47:2c:d2:18:aa:18:66:b5:ee:ca:15:c9:
         bf:70:65:bf:63:b2:da:41:67:5f:1c:27:7f:7a:5e:62:8d:20:
         02:89:8e:05:28:00:5b:26:1b:32:dc:01:40:af:e1:85:f9:d6:
         9a:14:9b:b8:84:83:b6:5b:d0:99:15:43:4d:0f:cc:a1:1d:3f:
         16:e7:27:bf:1f:7b:e6:1a:ee:f0:72:20:11:2b:c5:26:59:b1:
         54:4e:25:3c:fa:3c:30:03:32:64:5c:96:04:a7:e3:39:53:5c:
         5e:6e:53:c3:8c:99:d0:d8:47:f4:f1:47:df:04:32:98:c6:b8:
         10:2c:93:5b:b2:96:35:9b:e6:25:48:cb:ac:f3:ea:fa:42:ce:
         96:fe:de:75:5c:aa:d3:8a:81:b0:df:9f:05:97:f6:25:ec:19:
         87:7d:2e:aa:6e:44:76:f8:0f:77:e6:04:a2:89:79:41:d8:60:
         a6:1d:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:20:23 2026 by rpki-client