Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
File:                     92F8F6D042DA11ED93029A6AC4F9AE02.roa (raw, json)
Hash identifier:          742WnLRxRAdtV7KzoHDoGL/kuH4GkN1lYPhgQ1RkcrQ=
Subject key identifier:   F9:B6:00:56:BD:A8:B3:F9:5B:33:C6:FF:FE:6A:E5:9D:6C:C1:99:16
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0D45
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:35:12 +0000
ROA not before:           Fri 12 Sep 2025 18:28:16 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141731
IP address blocks:        2406:ff80::/32 maxlen: 32
                          2406:ff80:1::/48 maxlen: 48
                          2406:ff80:2::/48 maxlen: 48
                          2406:ff80:3::/48 maxlen: 48
                          2406:ff80:4::/48 maxlen: 48
                          2406:ff80:5::/48 maxlen: 48
                          2406:ff80:6::/48 maxlen: 48
                          2406:ff80:7::/48 maxlen: 48
                          2406:ff80:8::/48 maxlen: 48
                          2406:ff80:9::/48 maxlen: 48
                          2406:ff80:a::/48 maxlen: 48
                          2406:ff80:b::/48 maxlen: 48
                          2406:ff80:c::/48 maxlen: 48
                          2406:ff80:d::/48 maxlen: 48
                          2406:ff80:e::/48 maxlen: 48
                          2406:ff80:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3397 (0xd45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Sep 12 18:28:16 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a45caf-3422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:9f:4f:cf:8d:13:dd:53:33:35:d4:28:25:
                    7c:e2:b4:b3:0c:a1:d4:1a:e5:ef:8a:5b:ef:93:33:
                    90:85:65:c2:a3:34:16:9c:4f:14:17:32:83:ac:07:
                    28:aa:15:3f:97:a6:db:86:82:9f:a2:d7:b5:ae:3b:
                    6d:f1:ad:9a:eb:cc:f9:ff:2d:bb:c8:18:29:6b:95:
                    c0:48:16:26:1e:d7:86:be:f4:58:9e:e9:e9:08:fb:
                    a4:9a:07:53:70:29:33:d1:7f:58:38:5a:71:8d:85:
                    48:08:28:65:84:69:cb:5e:b3:47:32:e5:a3:39:13:
                    fb:e0:7a:2f:d2:7c:b5:4f:d7:ca:3a:f8:e8:85:b8:
                    b2:f7:8c:f6:ac:6e:b1:ae:e6:c6:8a:2b:b3:b2:a6:
                    61:f9:24:11:55:ca:c4:30:6a:9c:91:3e:ba:0d:2a:
                    a4:10:97:8c:cd:69:05:92:31:4b:60:b4:0f:ce:95:
                    44:7e:0b:8d:91:9a:ce:87:5d:9b:10:a9:30:37:da:
                    c5:ab:03:75:91:6f:74:3d:e0:06:ac:f3:f8:0e:c6:
                    2e:f3:d1:c4:fe:73:fc:c0:ad:d1:a4:5a:27:8a:f2:
                    60:2c:ba:93:c0:6d:66:27:16:29:18:3c:9f:d3:7f:
                    d7:7f:51:29:b2:45:c4:f1:0c:ca:87:47:68:45:03:
                    7b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B6:00:56:BD:A8:B3:F9:5B:33:C6:FF:FE:6A:E5:9D:6C:C1:99:16
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:ff80::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:6e:f1:f9:f7:df:2e:3b:24:69:f9:14:69:3d:e3:d2:cd:76:
         42:11:a6:0e:1c:7c:02:95:24:03:7d:b7:2f:c8:a0:b4:51:88:
         73:7b:46:63:e7:37:5f:6a:6d:82:73:30:08:ed:f0:57:dd:f8:
         a7:2c:1e:16:34:d1:44:e3:9b:ca:45:f8:b2:cd:ef:9d:97:10:
         fc:37:b3:68:82:6c:28:b8:3b:91:12:d3:09:95:d7:43:6d:3b:
         c2:03:eb:65:c7:a7:ce:6c:4a:d2:fa:ed:26:ff:cd:43:54:2a:
         38:a9:7e:74:e1:61:4f:ab:f3:eb:fb:0c:2d:d4:f0:7e:f1:2c:
         d2:18:21:63:62:2e:d9:60:00:80:a8:19:25:33:65:bc:3f:45:
         0b:89:a0:06:54:01:f4:4f:16:56:2a:a9:35:df:65:04:86:ae:
         2b:9f:86:27:46:af:3b:72:8d:45:46:fc:6f:47:d1:cd:fe:6f:
         c4:91:4a:fb:37:7d:34:25:96:89:2c:3c:db:1c:5f:e5:64:89:
         a2:83:13:62:f4:af:d8:06:5a:10:a8:48:71:7d:79:c8:15:ea:
         83:29:77:fb:5c:96:81:d8:8b:35:7d:d0:1b:d0:37:8c:33:5b:
         74:ef:3d:d3:0c:77:18:81:0a:a5:80:9d:3d:2a:48:7c:cc:76:
         0e:10:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:56:44 2026 by rpki-client