Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
File:                     CE24A9DE739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          4ahWqxQvl8elCs1UptFAhORYOkZcTrsAbGkMLik0CTE=
Subject key identifier:   17:68:D9:F1:2C:63:3A:EC:30:64:78:5A:3F:13:5F:E6:9F:B1:91:F5
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       0228
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
Signing time:             Mon 31 Aug 2026 03:51:50 +0000
ROA not before:           Mon 31 Aug 2026 03:51:50 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     7718
IP address blocks:        2401:3900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 03:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Aug 31 03:51:50 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a94fa55-6971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:ec:9a:54:35:11:08:88:65:39:4a:9e:f9:
                    48:1e:9f:b2:d3:c3:7b:00:98:3e:63:1a:32:65:b2:
                    20:00:c3:e3:aa:c8:39:8d:b4:f2:74:16:78:e9:f6:
                    32:b2:e5:c6:4b:4a:34:a7:7b:2e:6f:fb:e8:65:12:
                    e1:71:c1:24:20:38:f9:9c:02:e3:cf:39:ee:79:8b:
                    d3:2e:40:77:ca:0a:71:a9:1e:de:44:44:d9:8f:2a:
                    12:62:f8:ee:c6:ab:61:70:72:c5:ce:24:b6:ca:f8:
                    f7:df:ee:d2:2f:22:f3:eb:ed:69:b0:a3:07:96:24:
                    24:64:9d:c2:30:22:1c:d1:fd:6e:0d:01:9b:45:5c:
                    c1:6f:1b:a5:3c:6e:4e:3c:4a:4b:4a:10:02:7b:bf:
                    64:8e:12:3a:f4:ba:cf:26:c2:44:27:58:87:f0:93:
                    ed:e4:7a:20:82:57:29:0c:c7:7a:e6:dc:5c:72:19:
                    9f:34:fe:c7:0a:b7:fb:fc:97:1b:36:b5:c7:d5:3d:
                    38:e4:e4:81:a2:9c:00:0d:d9:38:2a:b3:b1:21:5f:
                    91:21:c6:b5:c9:13:3c:9f:84:a3:6e:28:f7:d1:ea:
                    7f:79:b2:da:78:ee:45:0b:17:7d:f4:57:9a:35:4f:
                    33:a1:46:79:5b:c2:d7:a1:0b:41:43:c4:f4:ec:34:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:68:D9:F1:2C:63:3A:EC:30:64:78:5A:3F:13:5F:E6:9F:B1:91:F5
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:38:33:6e:08:8c:71:24:d7:f6:d2:72:7e:c4:31:67:0c:
         cf:c1:ab:31:b6:5d:fd:f4:d5:80:a2:02:86:11:61:8f:01:a0:
         e7:02:9e:e8:f2:45:e2:53:ea:b0:21:4d:5b:05:0d:f7:fb:af:
         4d:b2:15:1d:bd:88:47:15:f1:b6:76:2e:a5:f0:2e:95:09:a9:
         7d:bc:28:19:b7:0b:3b:c5:1e:c1:77:2d:c3:1d:49:a7:7b:1f:
         c2:6b:5f:8f:f5:21:2d:96:2f:33:b2:52:0d:68:1b:40:27:12:
         7e:94:62:0c:b6:b2:cc:d2:ea:40:da:52:2b:08:96:f3:61:3b:
         e8:8f:90:4d:ad:33:b2:97:6c:75:2b:42:67:6a:11:0e:cc:67:
         58:19:3e:cb:77:ba:4e:23:2b:e5:fe:0b:b6:13:8c:6f:7c:85:
         8a:b9:f0:bb:e7:57:84:54:42:9b:64:97:06:ac:29:aa:03:8c:
         ed:5a:5e:48:8b:6e:78:43:bc:de:5a:ee:43:ca:c4:f6:10:ce:
         ed:c1:f1:cc:57:db:17:36:80:f3:e5:a4:3b:db:7e:27:47:85:
         e3:c5:1b:1f:8f:17:b0:e5:e2:1f:86:8c:92:9d:b7:47:b5:70:
         27:09:7a:f1:1f:a0:99:08:06:d8:4d:45:0f:f8:80:95:e4:af:
         3a:a5:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:36:43 2026 by rpki-client