Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa
File:                     8D6973CE77C311EE90D4BD46C4F9AE02.roa (raw, json)
Hash identifier:          tYLxo7jbuVluJdA3j6VUBn1vuF7ypNJl6KNhTxT5YiQ=
Subject key identifier:   8E:EB:33:85:56:2A:A8:86:2D:3C:AA:28:3E:C5:35:7C:D2:06:A6:8E
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       36A0
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:17:05 +0000
ROA not before:           Wed 30 Sep 2026 16:17:05 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     142502
IP address blocks:        2405:8a00:ffff::/48 maxlen: 48
                          2409:e:e1::/48 maxlen: 48
                          2409:e:e2::/48 maxlen: 48
                          2409:e:e3::/48 maxlen: 48
                          2409:e:e5::/48 maxlen: 48
                          2409:e:e7::/48 maxlen: 48
                          2409:e:e9::/48 maxlen: 48
                          2409:e:ef::/48 maxlen: 48
                          2409:f:f2::/48 maxlen: 48
                          2409:f:f4::/48 maxlen: 48
                          240a:eabc:abce::/48 maxlen: 48
                          240a:eabc:abcf::/48 maxlen: 48
                          240a:eabc:dabc::/48 maxlen: 48
                          240a:eabc:dabd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 15:17:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13984 (0x36a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Sep 30 16:17:05 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3601-75d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:15:8f:cf:8d:95:fd:ea:56:53:f0:93:af:
                    a3:06:46:f8:90:53:70:46:ff:f0:7f:00:f4:8f:91:
                    3e:ba:03:42:d3:b4:5b:d0:31:5c:d5:11:0f:a6:1f:
                    5b:be:46:92:7b:6b:e9:26:19:81:f9:30:fe:9e:19:
                    bc:70:57:02:51:00:3b:97:08:31:e6:5c:c5:5b:92:
                    e3:da:f6:e1:0e:9b:97:eb:68:bc:fa:80:2d:2f:d2:
                    0d:2f:84:df:c3:91:78:18:0d:ad:db:f8:30:53:37:
                    fe:88:21:4b:ae:e7:bd:59:c7:97:22:6c:50:7e:da:
                    cf:5e:8c:97:a1:af:2f:65:30:f1:c8:0c:8c:92:88:
                    e2:dc:4a:7d:b5:42:3f:66:20:90:a6:af:78:11:8e:
                    75:03:29:48:61:7a:67:a9:45:da:2a:ed:0a:8f:84:
                    45:3c:9d:89:ca:a8:95:86:d2:5a:70:79:37:75:f5:
                    46:c8:a3:08:ec:fd:31:8c:cf:ab:ba:c0:a5:d7:1d:
                    af:c2:27:15:2c:3f:60:bb:f2:77:87:c6:66:24:86:
                    8a:90:f9:50:98:b4:44:4b:4b:7e:d9:cd:63:81:9a:
                    ab:33:38:73:6d:21:1b:b6:06:76:42:4a:fc:30:7b:
                    ab:c8:c2:a4:0f:c8:28:c3:5c:df:41:20:62:5e:67:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EB:33:85:56:2A:A8:86:2D:3C:AA:28:3E:C5:35:7C:D2:06:A6:8E
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/8D6973CE77C311EE90D4BD46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8a00:ffff::/48
                  2409:e:e1::-2409:e:e3:ffff:ffff:ffff:ffff:ffff
                  2409:e:e5::/48
                  2409:e:e7::/48
                  2409:e:e9::/48
                  2409:e:ef::/48
                  2409:f:f2::/48
                  2409:f:f4::/48
                  240a:eabc:abce::/47
                  240a:eabc:dabc::/47

    Signature Algorithm: sha256WithRSAEncryption
         d7:98:05:cd:54:96:98:0f:eb:85:64:1f:ad:1d:e7:af:0f:48:
         aa:76:9b:bb:59:df:c0:6b:4f:1b:8c:00:2e:a8:42:ba:ef:10:
         52:57:e8:e0:e5:b0:bc:81:12:4d:f2:5b:0f:e6:be:bc:4a:d1:
         ff:e7:d7:a2:8f:a1:f4:52:3b:7c:25:01:5d:6f:24:09:f6:ee:
         38:58:d4:6c:0d:a4:3a:cc:81:74:83:b5:54:0e:ce:5a:35:b7:
         83:34:10:1f:bb:9b:58:e7:91:76:8c:5e:7a:69:aa:d0:a4:f3:
         a8:08:96:a7:16:76:37:2d:f9:5b:2b:41:11:6b:2d:8e:2b:6c:
         3e:24:a7:84:2d:16:ea:95:eb:fb:48:3c:7a:1a:91:f1:ad:68:
         fe:aa:9d:06:36:3a:b7:60:0e:61:07:22:2c:7f:f5:dd:74:61:
         80:0a:bd:ce:1f:2d:a7:4f:ae:c2:e8:c0:52:16:9e:db:c7:c6:
         2d:66:27:95:11:f5:e1:15:22:f2:1a:df:4e:b7:fa:37:00:cf:
         59:35:65:b5:be:ef:b5:fb:e9:de:e3:4c:38:6e:6a:70:84:ad:
         82:bc:97:43:36:08:f1:68:ae:c4:c5:89:ef:73:09:f6:1a:ae:
         29:51:91:6f:ef:ff:f2:cc:55:0d:18:c1:56:85:7a:53:53:d5:
         59:fc:5d:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:10 2026 by rpki-client