Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa
File:                     9D03023EA86E11EDABA1FA2AC4F9AE02.roa (raw, json)
Hash identifier:          7Y4TL4USxn/GFFX1wZbIuzSEbnQasIZPWs9yWSTrx/k=
Subject key identifier:   73:37:E9:CA:56:9B:C7:D6:05:42:C6:D1:8C:25:46:A9:1D:81:33:66
Certificate issuer:       /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial:       35C9
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa
Signing time:             Wed 24 Jun 2026 15:13:44 +0000
ROA not before:           Wed 24 Jun 2026 15:13:44 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     56264
IP address blocks:        2401:9440::/33 maxlen: 33
                          2401:9440:8000::/33 maxlen: 33
                          2406:9b00::/33 maxlen: 36
                          2406:9b00::/48 maxlen: 48
                          2406:9b00:1::/48 maxlen: 48
                          2406:9b00:2::/48 maxlen: 48
                          2406:9b00:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
                          rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13769 (0x35c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
        Validity
            Not Before: Jun 24 15:13:44 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3bf428-7e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:2d:0a:30:26:df:69:38:b1:c2:85:1c:d1:
                    3e:fa:43:94:dc:34:a8:ee:a1:15:8d:b4:af:52:d9:
                    9c:c3:0e:59:ef:97:c7:93:ac:3e:f0:1c:e0:94:0d:
                    85:65:b1:63:c4:9d:7b:c4:15:64:dc:d8:75:f5:98:
                    ea:b6:c0:27:cd:65:46:44:e6:44:a6:74:d1:58:51:
                    1b:75:5b:37:4b:92:ad:65:f6:6c:ff:69:90:b4:0d:
                    47:d1:7e:5c:07:80:47:0e:a9:85:6d:b2:59:01:b6:
                    68:e9:43:58:d1:c9:bc:7a:fe:d3:00:91:0b:bd:ab:
                    15:95:2a:07:c5:c7:c0:4f:d9:9b:9a:aa:a8:ea:57:
                    47:b0:82:c1:0c:a4:bc:be:79:9b:f1:e9:e6:e5:93:
                    59:f9:71:1e:43:f4:5e:61:1b:4e:8a:ea:6f:c2:e3:
                    ca:da:2f:37:a4:72:41:61:4a:a8:31:39:62:c6:8c:
                    5f:be:0c:f8:f8:54:f2:d5:2f:58:16:36:fe:20:8d:
                    3d:1b:15:f7:26:e8:a7:1e:0c:ad:b4:14:77:45:1b:
                    fb:c1:57:58:06:19:c2:82:38:f6:d0:95:6e:51:6b:
                    6b:00:a1:79:39:5e:a3:01:42:6e:ae:cc:b6:d9:82:
                    de:61:57:8f:51:27:c7:90:9f:98:13:6b:5e:ab:28:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:37:E9:CA:56:9B:C7:D6:05:42:C6:D1:8C:25:46:A9:1D:81:33:66
            X509v3 Authority Key Identifier:
                keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/9D03023EA86E11EDABA1FA2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9440::/32
                  2406:9b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:44:8a:7a:31:b0:8a:d7:09:82:a5:15:1a:8b:14:10:ef:fb:
         1f:2c:d0:c7:93:94:7e:2a:a0:46:94:9b:28:2a:cc:a7:ff:2f:
         25:6c:b1:35:ab:61:c4:84:88:da:13:7f:54:ea:a9:39:85:04:
         f4:74:75:f4:41:6e:6e:67:bc:20:28:33:d0:66:ff:e9:45:b8:
         b7:78:ba:60:d7:d1:38:bc:55:41:df:c4:a5:f2:1c:62:56:45:
         6b:60:2d:65:a7:c6:94:2e:59:ee:fc:8e:0b:87:75:76:62:fe:
         9f:d1:f6:bb:25:4c:cc:ad:70:41:6c:41:8c:d3:6e:49:51:6c:
         f8:bc:55:22:63:f5:63:ea:01:d9:e8:d7:52:32:14:48:e9:ae:
         99:ba:6d:b9:02:82:f0:fe:de:8a:64:df:a2:99:11:ab:79:6d:
         89:1e:d4:72:86:c0:5a:56:0b:43:d8:71:ff:45:8d:41:4a:82:
         c7:ba:71:c0:e8:84:fa:b8:bb:4a:87:89:1c:15:ee:d2:c1:61:
         e5:b9:c7:78:2e:24:a2:a7:22:f4:4e:3d:8e:60:09:ea:20:89:
         53:5b:29:a2:22:79:4a:41:0f:09:a7:8b:56:08:40:ae:f2:e2:
         0d:ae:f0:a3:9b:25:62:c7:77:af:59:c5:bc:a2:65:bd:bc:db:
         9f:0f:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 03:13:28 2026 by rpki-client