Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/D8D132C452E111F18BE0BBBEAE833773.roa
File:                     D8D132C452E111F18BE0BBBEAE833773.roa (raw, json)
Hash identifier:          SOC3GpUKSzAAkyJ5IYbCisAxPDi0msNuelaQ5PwEXrg=
Subject key identifier:   9A:20:BE:2F:65:65:09:52:EE:1B:6C:26:0C:D8:48:4E:95:05:61:CA
Certificate issuer:       /CN=A9165C34/serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
Certificate serial:       06
Authority key identifier: 9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/D8D132C452E111F18BE0BBBEAE833773.roa
Signing time:             Mon 18 May 2026 17:48:59 +0000
ROA not before:           Mon 18 May 2026 17:48:59 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     136308
IP address blocks:        2402:5ee0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl
                          rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165C34, serialNumber=9AF6370C3A9A82E2ECA88273A8B8E79E028254F9
        Validity
            Not Before: May 18 17:48:59 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a0b510a-3f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:ae:80:70:38:cf:1c:02:0c:36:6c:aa:c9:
                    25:fd:6a:75:a1:86:88:d0:74:dd:96:8a:d5:b1:a9:
                    96:b0:8f:4f:cb:97:90:7a:5f:60:d7:c7:d6:29:27:
                    46:87:11:ef:a6:74:c8:d9:1b:26:71:9a:6a:03:83:
                    80:99:c7:6e:0d:92:9f:1b:15:85:48:70:c1:9c:12:
                    17:da:2b:36:11:2a:2a:08:b9:79:c9:6c:a4:04:a5:
                    1b:70:25:8f:fe:62:66:c6:51:54:5b:52:8d:6f:87:
                    8c:89:77:b5:8a:70:32:b8:1a:f0:e7:95:9c:01:7f:
                    bc:2a:6b:97:b8:f6:98:14:24:77:48:fb:1b:7d:96:
                    6e:f3:d6:c0:5a:3e:a2:77:cc:c6:31:32:eb:49:d0:
                    7b:3d:48:cc:69:40:b0:5f:a8:30:c3:d7:37:2f:96:
                    45:d1:79:6b:fc:86:ea:8f:7d:b4:c6:2f:7f:1f:b7:
                    a5:fa:7a:27:92:7d:b1:67:f4:22:fb:41:ed:e8:5c:
                    2e:f9:bf:70:0e:b1:a2:c9:25:82:1e:c5:df:eb:b8:
                    cb:08:5e:89:7e:3c:a7:dd:37:44:ca:54:c1:e4:35:
                    c2:f5:25:6f:73:3a:de:30:f6:61:7e:61:9a:fe:8f:
                    1f:18:7d:30:f1:a2:43:85:02:76:41:f1:ea:74:ce:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:20:BE:2F:65:65:09:52:EE:1B:6C:26:0C:D8:48:4E:95:05:61:CA
            X509v3 Authority Key Identifier:
                keyid:9A:F6:37:0C:3A:9A:82:E2:EC:A8:82:73:A8:B8:E7:9E:02:82:54:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/mvY3DDqaguLsqIJzqLjnngKCVPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvY3DDqaguLsqIJzqLjnngKCVPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C34/2B01725E4FAC11F1916432979E833773/D8D132C452E111F18BE0BBBEAE833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:ad:ee:2f:5f:7b:5b:c9:3f:f7:a4:c7:a9:65:9b:37:2c:
         1e:b7:46:42:66:05:da:93:a2:e1:2e:1b:d5:bc:63:da:cd:5f:
         17:c3:6d:42:9a:41:df:47:6d:b1:2f:ff:cf:c9:8b:bf:58:95:
         52:8a:f6:e1:d1:a9:bd:fa:8a:76:04:a0:b1:29:12:ae:38:49:
         cd:37:c2:66:fa:53:c0:59:66:1e:64:f3:5d:61:05:73:11:19:
         c3:6a:d4:2b:f3:5c:82:b2:e0:cf:88:26:75:2f:b2:fe:a7:be:
         b7:07:81:6b:1f:b7:2d:05:c4:46:32:e4:26:95:68:64:ef:0e:
         b7:c6:9d:88:49:06:c0:dc:d5:61:ad:3a:50:05:94:bc:8f:64:
         75:22:98:e9:ae:e6:bb:be:83:8b:d0:03:c4:81:4e:9f:c4:6a:
         72:47:c7:f8:4a:37:08:80:22:a7:80:0f:b2:94:08:29:0c:09:
         84:6b:6b:a6:04:55:fd:07:77:f0:15:fb:3f:44:55:1d:2f:d7:
         ba:ca:81:b7:a7:92:26:27:d6:ff:32:5a:59:e7:b8:36:da:63:
         93:f9:b6:d4:9e:d4:5b:16:b3:9e:f2:9d:68:c6:57:c1:71:4e:
         2b:6b:58:ee:0b:68:92:ff:3a:c3:1b:c4:92:35:7b:3a:47:51:
         3a:a6:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:59:56 2026 by rpki-client