Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa
File:                     9A6A637EF48C11EBBDF92914C4F9AE02.roa (raw, json)
Hash identifier:          mSVpVUOQfRZm6TmVaqDohBl9Tl1VgRUdg75LNq3gwI4=
Subject key identifier:   8D:1F:28:BB:82:BA:CD:B7:A6:5A:13:DD:89:3B:CD:A4:99:51:04:ED
Certificate issuer:       /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial:       0B7B
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa
Signing time:             Sun 02 Aug 2026 19:39:07 +0000
ROA not before:           Sun 02 Aug 2026 19:39:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        2404:f340::/44 maxlen: 44
                          2404:f340:4000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 19:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2939 (0xb7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
        Validity
            Not Before: Aug  2 19:39:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6f9cdb-af89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:c1:83:30:fd:e3:fb:59:50:19:21:7c:e3:
                    8d:a0:a5:f3:6d:c1:e4:67:2b:18:52:2f:df:89:6b:
                    e5:db:35:71:d2:d0:31:40:30:4a:d7:9f:f7:cc:0c:
                    fe:28:45:d7:2b:45:6a:a4:e4:b3:8d:89:50:44:c4:
                    5d:ed:8f:0b:81:13:ff:00:c6:7f:e8:ef:78:a3:8b:
                    ab:aa:0c:06:ce:6c:80:dc:26:4d:4b:c3:41:36:09:
                    e2:50:f0:d2:33:91:51:01:f8:3b:1c:43:0f:5c:7f:
                    dc:a4:ff:6a:67:8f:d2:69:65:3d:dd:31:70:8d:f7:
                    c6:a9:0a:11:d6:25:ec:99:65:bf:5f:33:42:cd:da:
                    16:ae:3b:f7:02:ef:c2:ba:b1:10:8a:80:e9:97:4f:
                    9c:36:0c:bb:4c:24:21:b0:5c:de:64:3e:90:5c:f7:
                    ff:4c:ec:1a:44:32:40:f9:d7:f0:20:be:a3:88:26:
                    aa:d2:6b:c9:bf:f8:e9:e7:ff:00:18:68:db:a6:c8:
                    5f:d8:be:a1:16:a8:94:c4:6c:71:20:99:66:4b:bd:
                    62:2c:85:98:13:c8:f2:35:1f:42:86:93:31:21:76:
                    e4:76:df:c6:cc:c6:94:b3:62:38:27:d3:0e:f6:ae:
                    bf:9e:98:3a:45:a3:11:60:39:5b:8f:6c:5f:b4:72:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1F:28:BB:82:BA:CD:B7:A6:5A:13:DD:89:3B:CD:A4:99:51:04:ED
            X509v3 Authority Key Identifier:
                keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/9A6A637EF48C11EBBDF92914C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f340::/44
                  2404:f340:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:0c:b8:d5:96:72:a6:ec:e5:8e:d5:d1:de:79:de:b7:41:
         ff:9e:31:ae:0d:dd:c5:ab:ab:fd:47:e6:3d:d3:e7:cc:26:dd:
         f7:62:8a:1f:0c:83:53:e4:1c:f8:11:6e:80:24:70:0d:9e:73:
         eb:3b:5c:06:52:9d:d1:c2:f0:c4:8c:ba:0b:9b:5f:5f:fb:83:
         cf:4c:92:45:03:a9:e2:f3:84:fb:6e:e7:55:1a:ab:e5:ca:2b:
         2d:3c:e4:61:be:52:9e:4a:d3:a9:f4:85:d4:1c:89:5e:f7:99:
         c5:4d:26:75:7b:e6:7e:cb:ef:12:31:5d:a4:3f:ad:71:9b:c5:
         6a:cb:cb:21:ce:81:72:78:20:20:53:74:31:67:a3:dc:e5:fc:
         ae:ea:98:28:5f:4d:8e:47:57:72:63:78:64:cb:5c:fb:51:f7:
         90:f1:24:d1:39:6a:6b:97:31:2f:87:17:89:c0:da:ee:0c:99:
         34:d1:97:fc:49:44:65:f8:7b:7e:df:5d:59:43:08:3a:18:2f:
         e2:7c:cf:d6:4e:93:af:51:ee:c3:56:51:3c:fd:d7:d4:d8:9c:
         f0:4f:2a:4b:e7:e3:c9:ca:74:2c:2f:87:72:99:5b:df:4b:87:
         f4:7d:a0:47:90:d5:80:b7:be:5f:38:97:09:80:af:0e:07:19:
         d9:7c:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:01:40 2026 by rpki-client