Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/BECA6A78C82D11F19D8410C33411F970.roa
File:                     BECA6A78C82D11F19D8410C33411F970.roa (raw, json)
Hash identifier:          LOWiTvX9oJL9TOi93+Lgd/6paf0SxIsCNEKD1iTNQNE=
Subject key identifier:   E6:A5:B3:C1:26:B4:AE:41:65:E1:8C:2F:03:F0:33:3A:EA:72:CB:77
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3EC5
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/BECA6A78C82D11F19D8410C33411F970.roa
Signing time:             Thu 15 Oct 2026 00:17:03 +0000
ROA not before:           Thu 15 Oct 2026 00:17:03 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     9270
IP address blocks:        2407:c000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16069 (0x3ec5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Oct 15 00:17:03 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6ad01b7e-148d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4a:56:06:66:bd:b9:7d:9b:d7:0d:5f:b3:7f:
                    ff:fe:2d:78:63:7f:3c:7e:07:57:a4:71:22:55:0d:
                    0e:58:7b:f7:c7:9f:bf:d4:2e:8b:52:0f:a0:a5:62:
                    a1:a7:94:2e:47:6b:77:78:84:9f:b0:f3:72:6a:62:
                    65:9b:69:1e:bf:2f:0d:b8:9f:57:a2:09:1b:d1:c7:
                    96:cd:63:0c:d6:26:bc:3c:46:9c:cf:9b:5a:7e:a8:
                    ee:5d:1f:d6:09:90:3c:be:a0:19:a7:fd:4e:04:40:
                    a8:a5:57:e2:b9:b9:b2:b0:81:2b:96:bf:6d:d0:0d:
                    a1:33:f9:12:fe:58:fd:b6:de:2d:3b:33:60:e4:25:
                    1a:d5:a6:53:34:46:4b:bd:f7:e1:8e:8a:14:d3:59:
                    27:ac:a2:23:71:5d:a4:35:9f:a4:26:79:93:9e:3f:
                    31:c8:05:5a:58:37:40:2d:a3:18:ce:cf:cd:f3:54:
                    9c:42:c3:d0:18:7b:54:62:49:c5:81:3b:41:bb:76:
                    9d:95:ef:2c:53:87:28:85:e9:62:b2:c4:92:a8:ec:
                    e8:11:13:46:3f:52:b2:e9:08:e7:de:4c:25:c7:1d:
                    f1:62:3d:84:76:43:fb:b4:1b:62:3f:40:07:2c:87:
                    21:39:f9:2e:97:b1:e2:47:fe:44:5f:f7:09:39:e1:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:B3:C1:26:B4:AE:41:65:E1:8C:2F:03:F0:33:3A:EA:72:CB:77
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/BECA6A78C82D11F19D8410C33411F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:c000::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:67:0f:97:09:7d:39:8d:ae:a0:db:b2:17:77:3f:80:66:d6:
         ea:d3:b4:6e:33:43:d6:56:11:4a:74:ae:ba:11:58:39:30:2e:
         e3:af:26:51:47:d5:a7:4e:e1:48:62:55:68:af:f1:5b:ba:bf:
         2b:49:64:71:6d:fd:ab:6d:f2:ff:34:d8:9b:a4:88:4f:94:47:
         6a:76:da:ac:42:1f:c6:51:d4:3e:b3:b8:03:b0:ea:b0:97:f6:
         79:cb:41:cc:f3:2b:ed:12:cc:c3:d2:d0:bf:90:c4:ce:fc:26:
         72:45:99:f8:27:d4:0c:51:24:a2:9b:5b:ff:56:89:11:f4:ba:
         96:ff:31:91:63:ce:54:92:44:e0:de:e4:c2:c2:9d:3f:57:1c:
         95:34:4c:5f:ea:66:94:20:1e:a0:98:30:dd:ca:34:e8:2c:b2:
         91:a2:ec:42:9a:6b:f5:98:d7:4a:eb:03:dc:19:89:92:9c:e2:
         58:e7:13:78:4f:fb:f6:94:80:86:5b:bf:18:75:89:73:76:76:
         3d:13:71:57:3d:5e:ed:5c:a3:af:7e:1a:06:3a:7f:a8:73:cf:
         83:de:0b:c2:da:77:4d:e5:21:b1:83:dd:89:ed:8a:e5:93:73:
         7e:4e:06:89:c9:81:ea:b7:c5:2f:90:d6:ad:de:fd:fb:79:22:
         68:50:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:24 2026 by rpki-client