Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/AC262AE896E011F1AACCC6D55B11F970.roa
File:                     AC262AE896E011F1AACCC6D55B11F970.roa (raw, json)
Hash identifier:          VFreQWvwqoUHhufjMC+/zSTILelzYSaJo4dghHUSpM4=
Subject key identifier:   A0:B5:B9:11:FA:B4:A1:EA:08:38:C3:02:44:EB:7A:9A:E7:BE:D8:39
Certificate issuer:       /CN=A9167F0C/serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
Certificate serial:       0AF9
Authority key identifier: 4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/AC262AE896E011F1AACCC6D55B11F970.roa
Signing time:             Thu 13 Aug 2026 06:34:05 +0000
ROA not before:           Thu 13 Aug 2026 06:34:05 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134995
IP address blocks:        2402:6640::/32 maxlen: 32
                          2402:6640:5::/48 maxlen: 48
                          2402:6640:10::/48 maxlen: 48
                          2402:6640:11::/48 maxlen: 48
                          2402:6640:17::/48 maxlen: 48
                          2402:6640:18::/48 maxlen: 48
                          2402:6640:19::/48 maxlen: 48
                          2402:6640:20::/48 maxlen: 48
                          2402:6640:21::/48 maxlen: 48
                          2402:6640:22::/48 maxlen: 48
                          2402:6640:23::/48 maxlen: 48
                          2402:6640:24::/48 maxlen: 48
                          2402:6640:25::/48 maxlen: 48
                          2402:6640:26::/48 maxlen: 48
                          2402:6640:30::/48 maxlen: 48
                          2402:6640:200::/48 maxlen: 48
                          2402:6640:fce::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl
                          rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2809 (0xaf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F0C, serialNumber=4E6142BD61B3EB5897CE01E8D45711DA50DCF565
        Validity
            Not Before: Aug 13 06:34:05 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a7d655d-3343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:a9:45:99:8c:4d:39:aa:66:eb:ae:c6:c6:
                    fc:72:2e:25:f3:c6:e4:97:71:2d:e3:80:3c:37:ac:
                    62:ff:40:fc:f4:cb:db:a5:33:51:24:eb:cf:27:6c:
                    88:f3:f5:64:5a:30:16:46:11:ff:2d:a8:98:eb:4c:
                    66:e1:6a:c1:37:cc:b7:81:39:56:95:52:42:eb:41:
                    f6:92:62:7c:18:ca:f1:c7:8e:ff:76:3d:c6:98:19:
                    4a:b7:7e:c2:d5:57:89:42:08:49:6f:2b:15:2d:bb:
                    20:32:7e:20:f3:0f:a6:89:93:83:b5:83:e9:6e:21:
                    41:a2:7e:0c:ca:40:23:81:f7:30:06:96:a0:f4:0b:
                    31:7d:e8:07:f9:fc:29:b1:05:54:85:00:1c:45:53:
                    91:76:53:3e:56:8c:19:1a:e8:47:1e:bc:a3:52:fa:
                    8f:7c:22:d4:3d:31:cf:2b:2f:5a:08:bd:04:03:e2:
                    aa:eb:f3:9a:07:e7:0b:0e:66:f4:3f:38:76:11:05:
                    fc:00:49:36:1d:07:c3:3d:3c:37:a7:bf:3f:7e:3e:
                    c3:15:8f:74:7a:04:f9:a1:dc:c3:ec:b3:21:53:8a:
                    e1:43:3d:95:55:9f:0c:9d:9f:51:4b:8f:b2:39:b7:
                    61:7d:9e:c8:ee:aa:d7:c6:a5:44:1b:db:30:4c:59:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B5:B9:11:FA:B4:A1:EA:08:38:C3:02:44:EB:7A:9A:E7:BE:D8:39
            X509v3 Authority Key Identifier:
                keyid:4E:61:42:BD:61:B3:EB:58:97:CE:01:E8:D4:57:11:DA:50:DC:F5:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/TmFCvWGz61iXzgHo1FcR2lDc9WU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmFCvWGz61iXzgHo1FcR2lDc9WU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F0C/0A58A19A70AB11E98317A57BC4F9AE02/AC262AE896E011F1AACCC6D55B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6640::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:54:4d:f9:7f:f2:48:db:f5:a2:28:cd:6d:06:0c:3d:69:b4:
         49:57:e4:aa:52:32:75:02:37:c8:9b:6f:e8:04:5a:b6:63:63:
         6d:88:54:fc:6d:43:70:74:3c:e5:fb:62:fa:59:a5:88:98:d3:
         26:78:c3:bd:27:3c:bd:87:c0:d6:d9:0d:69:1a:42:16:4e:b0:
         49:df:92:d1:b4:30:a2:ec:20:1d:b1:46:c8:28:e9:3a:d4:2c:
         f5:dc:36:46:63:6b:97:da:59:ab:83:c6:ef:a9:1f:2b:cf:7a:
         ef:5f:8d:71:83:ec:5f:be:a6:b8:11:4c:54:0d:6c:09:21:ca:
         01:05:d6:45:96:11:55:a4:9c:06:9c:04:95:78:c1:15:fc:b0:
         f6:1c:fa:ff:78:8f:5b:00:73:84:5e:27:f9:96:f2:2f:c2:97:
         b4:40:f5:9f:aa:b7:a1:f9:a7:2b:cd:49:15:f1:d6:1a:0f:de:
         59:38:fe:1e:93:ed:8d:4a:c5:07:85:56:3f:9a:74:a0:52:b9:
         d6:61:ac:8d:82:70:06:1d:b0:c8:a8:bc:3c:c8:a2:cd:33:39:
         be:fa:21:3f:44:85:35:3d:98:eb:f3:a5:a4:27:cd:73:7c:fd:
         c7:92:21:e7:d1:f5:17:d6:d1:b6:1c:ac:f5:d0:49:d5:28:17:
         56:bb:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:05 2026 by rpki-client