Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B2F3EE3C12C911F1AFB167917BEE528E.roa
File:                     B2F3EE3C12C911F1AFB167917BEE528E.roa (raw, json)
Hash identifier:          rUVLvoA7SCWobHv8rQIiOZULoL/+BvRsb/mC77XzI5E=
Subject key identifier:   0F:86:C5:3A:DD:60:DF:F3:2D:0B:10:FF:EA:D0:0B:F1:A5:44:27:6E
Certificate issuer:       /CN=A912963D/serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
Certificate serial:       66
Authority key identifier: 9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B2F3EE3C12C911F1AFB167917BEE528E.roa
Signing time:             Mon 24 Aug 2026 17:34:15 +0000
ROA not before:           Mon 24 Aug 2026 17:34:15 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153038
IP address blocks:        2403:21c0::/32 maxlen: 32
                          2403:21c0::/36 maxlen: 36
                          2403:21c0:1000::/36 maxlen: 36
                          2403:21c0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl
                          rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 15:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912963D, serialNumber=9F1B31FA7700B7458FC1889B862541CE9D4824CA
        Validity
            Not Before: Aug 24 17:34:15 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8c8097-c279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:22:b4:38:bd:b1:65:40:61:ff:4c:05:25:c6:
                    f6:5a:77:cc:c1:e5:e6:f6:02:00:6f:f3:5a:b9:d5:
                    de:8b:61:d7:58:82:a1:53:e5:14:d1:a0:c6:5d:ab:
                    1e:db:c7:79:e4:70:c4:ed:0f:52:11:25:a2:41:d3:
                    f3:63:da:53:97:a3:5b:b1:5b:61:fc:4c:d2:bd:83:
                    df:52:39:7b:17:28:cd:5f:14:13:8f:94:75:d2:61:
                    a9:9c:37:be:54:be:15:e8:9f:23:ff:69:d3:53:7b:
                    df:ee:f9:b6:9f:f4:88:01:95:ef:dc:b6:a9:42:61:
                    af:5f:24:03:0d:ab:99:62:56:16:f3:f2:3f:55:b0:
                    f8:6b:d7:f0:c9:38:51:1b:f8:d6:44:06:50:98:87:
                    13:01:83:82:0a:fb:57:ed:6a:76:8b:b2:e8:95:24:
                    b3:be:cd:93:fc:07:e0:f2:25:79:5f:60:1d:48:ed:
                    76:27:97:5e:7b:ae:ba:a2:67:68:19:c8:1f:b0:f0:
                    75:ec:0e:ca:0d:65:40:ba:6e:1b:89:41:88:9d:9c:
                    83:87:42:a0:3c:cc:d5:05:2d:f4:48:87:43:07:d9:
                    c9:9f:2a:80:7b:3f:14:09:dd:61:51:22:03:87:d4:
                    b3:9c:cf:91:9f:1b:9d:97:ba:6b:e5:e6:4a:70:cd:
                    21:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:C5:3A:DD:60:DF:F3:2D:0B:10:FF:EA:D0:0B:F1:A5:44:27:6E
            X509v3 Authority Key Identifier:
                keyid:9F:1B:31:FA:77:00:B7:45:8F:C1:88:9B:86:25:41:CE:9D:48:24:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/nxsx-ncAt0WPwYibhiVBzp1IJMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nxsx-ncAt0WPwYibhiVBzp1IJMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/B2F3EE3C12C911F1AFB167917BEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:21c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:aa:3d:4f:c2:6b:1e:d4:de:85:e9:29:f3:60:e1:55:ea:
         76:aa:5d:d6:d1:94:82:74:86:ca:8a:ff:b8:f7:91:64:52:5e:
         50:b0:63:53:6f:98:68:a9:be:d9:29:83:40:52:e3:79:9e:26:
         9a:e5:eb:38:c3:8f:e4:56:5e:79:b5:59:45:92:cc:3c:1a:81:
         a1:53:e3:4b:5a:ce:1a:dc:9c:83:e2:fa:14:db:ab:d0:14:7e:
         de:0a:37:7d:1a:c7:62:62:b2:57:73:9b:c7:66:cc:23:ed:ef:
         3d:e3:5d:7b:0a:2b:a9:2e:f9:52:24:41:77:9b:e9:ab:6b:77:
         d1:ae:48:43:d4:e7:d1:f6:1f:20:af:00:72:8a:1c:3d:19:8f:
         17:53:f7:bf:1a:c2:a3:bd:75:b0:2c:e6:44:a1:b4:cb:59:51:
         08:96:8d:d2:4a:dd:5a:98:e8:3d:bd:84:5b:73:70:50:9e:76:
         b8:94:97:53:cf:ae:ba:99:1b:21:30:ae:c3:37:10:18:c8:75:
         a2:5c:21:88:0d:fb:2f:ba:d0:9e:79:52:4e:2c:ad:96:ce:c6:
         f0:8b:f9:42:40:90:88:4c:39:dc:0e:64:91:0a:8b:66:cd:31:
         49:04:7a:25:bd:fd:47:eb:a2:d4:5e:bb:70:fe:fc:41:c7:30:
         41:37:9e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:13:41 2026 by rpki-client