Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa
File:                     955C204027D911F183CCD80FA7833773.roa (raw, json)
Hash identifier:          c6JUDw7tq3Ict9tWMfIj9zis/6zIdlmfIPXyLf2HU9E=
Subject key identifier:   13:97:57:B8:F7:6D:8C:D5:CA:A1:1B:35:3F:9E:55:6B:B5:2E:3B:4A
Certificate issuer:       /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial:       23
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa
Signing time:             Tue 19 May 2026 09:42:04 +0000
ROA not before:           Tue 19 May 2026 09:42:04 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     38809
IP address blocks:        2400:b300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 09:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Validity
            Not Before: May 19 09:42:04 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a0c306b-3ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:ba:4c:7c:89:7a:07:48:ce:fa:a6:5f:8a:
                    7b:b7:0b:cb:09:9e:00:d4:31:8d:49:26:6d:fa:24:
                    da:1d:a2:c2:76:92:f0:66:5e:3b:47:9a:27:01:a3:
                    2b:07:81:71:07:37:2a:51:15:b5:d0:b9:bf:53:71:
                    14:df:7c:27:8b:95:dc:0b:a5:36:ac:1e:16:2e:af:
                    4a:95:6f:04:1c:9e:a3:33:0f:25:b4:1c:c1:32:b5:
                    4b:78:d3:c3:b2:56:66:b6:a6:be:50:12:4b:36:ff:
                    a6:b7:a3:ee:1f:82:f7:ba:73:bc:d5:a2:c0:88:80:
                    80:85:3a:ab:86:4f:8a:48:03:5c:37:11:29:17:13:
                    44:17:a5:5e:77:48:4d:6e:11:37:d6:7f:58:0b:8c:
                    0c:7e:0f:4a:24:29:4d:ab:fb:c8:bd:da:59:1d:84:
                    12:8a:76:35:79:2c:bf:e4:d8:ff:bd:6e:08:c7:6f:
                    a1:a4:73:87:c4:d1:5c:34:aa:9e:b0:18:00:cd:59:
                    f8:f5:d1:f9:b1:e6:35:36:8e:9c:a2:eb:c7:71:b4:
                    0d:c4:99:b1:8e:0e:a3:4e:96:be:bc:59:66:09:c1:
                    b8:0e:4a:91:d4:80:7e:70:b2:d1:d9:4f:8d:20:9f:
                    40:df:d6:04:08:fa:13:94:32:a2:ba:2e:aa:3b:e3:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:97:57:B8:F7:6D:8C:D5:CA:A1:1B:35:3F:9E:55:6B:B5:2E:3B:4A
            X509v3 Authority Key Identifier:
                keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:d7:a7:96:8b:1c:db:df:cf:64:40:1d:a4:c5:f7:e3:f6:
         5d:38:a4:08:87:f8:e9:03:4a:e1:38:0f:5e:5a:8e:4f:a4:a7:
         71:7d:fd:9f:8f:8c:1a:ca:40:73:d5:2f:78:34:87:39:8f:56:
         f4:9e:bc:b9:39:98:37:3b:f6:d1:48:1b:ac:7b:d4:ca:d7:8e:
         ff:9f:4b:2a:62:bc:2f:8c:2f:e5:6d:8c:29:c7:35:a4:01:62:
         de:07:95:18:c4:4a:56:26:1c:2d:4b:b0:e0:d0:32:c1:42:d7:
         e0:7e:b6:97:f2:fc:10:47:27:f5:21:5d:f2:b6:31:ac:f1:5d:
         3c:7f:b0:4f:19:00:9c:f1:ed:43:52:8b:3a:14:86:d6:bf:be:
         a7:c2:5f:93:47:dd:79:c5:bc:b7:65:a8:b1:c1:53:88:ba:dd:
         96:98:39:6d:fd:da:f4:ed:35:99:f0:7b:f3:6a:6b:b4:cd:fe:
         5e:8f:42:01:52:28:68:6d:01:4a:59:53:e8:a9:21:07:22:fb:
         61:95:1a:e4:bc:0d:c9:7d:ec:7e:97:a5:ab:be:fd:a1:39:05:
         3b:e0:dc:ee:9b:59:fe:10:df:23:cd:bf:93:19:87:5f:44:3d:
         5d:1c:4d:95:3f:ce:b1:ad:85:80:8e:9c:3d:15:73:36:36:0d:
         38:6e:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:55 2026 by rpki-client