Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa
File:                     5A15EA040D7A11EB9D346C48C4F9AE02.roa (raw, json)
Hash identifier:          uQV+JEyI0U4YzpzPvgTAYEzJB6nK/1VjMkPKECLqNnU=
Subject key identifier:   56:16:B3:03:5B:B1:5B:CE:7B:CB:AA:BF:E5:4E:9F:14:04:AA:F8:FE
Certificate issuer:       /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial:       0B79
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 19:39:03 +0000
ROA not before:           Sun 02 Aug 2026 19:39:03 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139190
IP address blocks:        2404:f340:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 19:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2937 (0xb79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
        Validity
            Not Before: Aug  2 19:39:03 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6f9cd7-290a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:1b:a8:5d:ed:2f:7b:4e:f3:30:34:6f:bd:
                    99:7d:f8:19:b9:21:ea:25:f1:f2:fb:e1:d1:97:38:
                    8b:12:01:f8:96:c3:f5:79:de:02:27:86:75:55:de:
                    9d:f2:35:e2:c8:ae:19:ca:08:3a:02:e3:35:ba:d3:
                    23:db:e9:6f:59:58:6a:4a:5a:0f:0c:53:24:cd:00:
                    24:ba:fc:9b:2f:99:6d:63:5a:f7:a3:e2:26:ce:7a:
                    45:0f:87:8a:1f:a9:70:23:2b:f4:0d:57:64:8d:c4:
                    13:7d:9e:7e:a7:14:a7:be:1d:0c:af:a3:b1:b9:b6:
                    75:87:bd:ef:9f:e5:e9:14:5a:80:06:17:8b:b7:63:
                    35:a4:91:82:fb:16:fe:30:0c:f4:86:a8:e7:48:64:
                    2c:02:55:03:92:7d:99:d8:f7:ba:01:da:34:2e:7f:
                    49:39:b3:71:49:88:d7:83:f4:f2:c7:86:3b:3b:40:
                    49:a3:fc:6a:3b:bc:68:b9:48:cf:0b:96:e3:cd:3f:
                    32:10:c6:2c:84:ef:75:91:ef:3f:c5:ec:2e:68:13:
                    f6:36:0a:f8:e6:5a:14:2b:66:13:5f:a6:db:16:f7:
                    3a:99:49:06:03:1b:8e:d1:98:c8:af:97:63:68:64:
                    d5:22:39:8f:8c:62:16:bd:72:40:2c:00:2c:cc:a0:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:B3:03:5B:B1:5B:CE:7B:CB:AA:BF:E5:4E:9F:14:04:AA:F8:FE
            X509v3 Authority Key Identifier:
                keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f340:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:53:b6:6f:37:57:4e:e0:11:da:a2:87:25:02:b8:40:d5:
         5f:53:91:27:ee:be:e1:89:d4:35:26:90:f7:3f:5a:4d:50:85:
         f8:8d:0d:9a:f9:58:80:f6:a9:43:3a:4c:69:02:23:36:b2:e6:
         6c:3b:af:b6:46:e4:50:b8:b0:85:42:be:e7:92:7a:fc:fc:57:
         8c:07:34:b2:d2:13:a7:a4:5b:e0:11:24:9c:de:23:f2:e5:47:
         25:c3:58:ea:62:94:ad:29:20:3f:94:c8:21:7d:c5:e3:5b:ef:
         00:e6:49:40:ff:15:f1:20:0a:f9:b8:35:0e:82:c3:74:19:1c:
         b5:38:86:01:2a:94:08:77:00:e1:57:bc:e9:bd:43:77:83:0e:
         47:15:54:20:47:9a:64:de:16:8f:75:a9:d7:92:d5:12:ff:38:
         82:28:09:50:8d:54:63:f5:5b:e2:5c:95:9c:e7:64:de:5c:4e:
         28:ad:1a:d0:9c:7a:ee:d8:62:a0:81:f6:79:c5:89:3a:25:63:
         fc:36:23:03:13:dd:0f:7e:d5:f8:67:f0:d0:28:29:48:98:54:
         7e:3a:bc:16:6a:72:e2:95:4c:9f:e2:be:3b:46:84:91:9a:44:
         eb:f2:8d:69:cf:9e:51:a2:cb:8f:ec:42:2f:36:e8:76:7d:31:
         62:a7:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:55:00 2026 by rpki-client