Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
File:                     87FEDB446B9B11F1A0F959156D47A888.roa (raw, json)
Hash identifier:          puaYmraHKaDMLjz2a7HMedJgxaZ/2MzUtX95c64CBvw=
Subject key identifier:   32:14:34:ED:75:C9:F4:C4:F6:8F:1B:7A:65:D1:AD:91:23:B7:CB:2E
Certificate issuer:       /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial:       0163
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
Signing time:             Fri 19 Jun 2026 04:58:37 +0000
ROA not before:           Fri 19 Jun 2026 04:58:37 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136461
IP address blocks:        2401:b6a0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
        Validity
            Not Before: Jun 19 04:58:37 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a34cc7d-a937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:64:d8:e7:97:38:b4:13:bf:2c:ce:26:38:67:
                    90:b2:9b:51:79:8a:7b:61:e4:91:60:78:e2:8f:8d:
                    0d:7e:4f:e2:13:1c:38:7b:6c:f0:a6:6d:47:5a:2a:
                    e5:c2:d3:34:d8:5c:1a:66:68:ff:7d:62:57:8b:29:
                    cb:56:e7:7d:04:70:0a:9e:5e:2e:9b:0c:93:6c:44:
                    0c:3b:0b:4b:a1:38:d9:2e:0b:95:24:b1:6c:e9:d2:
                    be:c9:ca:e6:09:f1:3a:84:28:cb:cc:89:5b:09:71:
                    42:a0:25:de:be:b1:bd:29:ee:29:b1:2b:b9:47:42:
                    b0:3a:aa:51:b1:24:45:fe:4c:f5:0f:f1:15:9c:6d:
                    05:7d:a6:98:73:d5:81:67:ec:13:68:e3:80:da:5f:
                    3f:df:53:49:22:5d:1e:f4:c7:5a:68:15:f3:1e:69:
                    a2:d0:12:57:2d:69:6f:af:94:db:36:f4:ec:48:05:
                    91:91:aa:a6:af:1a:63:70:2c:8f:a1:09:50:a4:2c:
                    52:c0:df:f7:ca:3b:f3:85:e9:c9:78:38:4a:3f:0e:
                    df:b3:d5:6a:8a:3e:28:e6:dd:ca:1a:01:f6:b8:19:
                    f8:94:3b:73:45:87:c8:80:47:07:ae:90:26:45:43:
                    e4:a7:36:56:79:f0:2c:9a:dd:2c:11:00:1e:e6:fd:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:14:34:ED:75:C9:F4:C4:F6:8F:1B:7A:65:D1:AD:91:23:B7:CB:2E
            X509v3 Authority Key Identifier:
                keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:00:a9:b1:da:e7:e4:8b:b8:61:18:86:76:9c:55:c6:61:a1:
         e6:c9:d9:ae:46:27:47:a2:9f:59:fa:21:a7:8c:42:be:34:9c:
         e3:18:08:bf:ef:37:9b:04:94:f2:6e:2b:ed:63:42:8b:6f:cf:
         0f:5e:b1:a0:4e:52:82:99:e1:1a:4c:35:33:62:3f:8e:f4:04:
         7f:cc:3b:36:ed:ec:c6:79:8c:d3:e6:c7:f9:0a:75:5e:55:11:
         1c:bf:48:5c:4c:41:60:2f:af:94:4d:d1:fd:20:f1:a8:5d:8c:
         aa:73:87:1d:2c:fe:40:8e:57:c7:ff:b9:82:29:4e:66:69:2b:
         c3:0d:58:df:08:b9:92:f6:50:42:a6:85:99:f6:2d:4b:a1:8f:
         66:fa:9b:68:e5:25:72:aa:04:73:49:f9:dc:7f:69:08:ab:a2:
         b2:97:c7:83:46:fe:41:55:43:bb:a6:23:a3:0d:0e:25:85:1f:
         1f:0c:22:30:a8:64:1d:92:03:af:73:5d:92:c8:d8:84:c2:4c:
         da:d7:50:9d:d4:18:1f:3d:a1:7a:b1:78:a0:fa:04:b9:6d:34:
         82:ac:68:a8:56:67:41:85:5c:0b:68:bb:30:08:3b:8c:53:52:
         90:79:b2:54:7d:a0:4c:41:98:13:5b:73:b4:70:fa:01:be:7b:
         6d:39:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:58 2026 by rpki-client