Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa
File:                     936A4548AC3A11F0A9C43F44C4F9AE02.roa (raw, json)
Hash identifier:          Gs+o75R0CrmcD+NQIkcYwtnmpB0ywQTdRm5wnPFVnIM=
Subject key identifier:   81:23:A6:F9:D1:DE:C9:AD:63:7C:2E:25:45:77:B9:AD:1C:F7:44:8E
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       023C
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa
Signing time:             Fri 07 Aug 2026 03:52:48 +0000
ROA not before:           Fri 07 Aug 2026 03:52:48 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     206675
IP address blocks:        2403:27c0:c02::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 03:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Aug  7 03:52:48 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a755690-5d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9d:c3:ca:8a:0e:d3:70:56:5c:42:9f:b3:ac:
                    98:2b:be:64:64:92:91:c2:23:50:4d:01:ab:3a:3a:
                    5f:43:18:8a:a3:d8:96:62:95:f1:81:05:2c:c0:24:
                    1d:44:20:06:19:25:fa:1f:30:4d:58:7a:dc:a0:df:
                    ee:9c:e9:88:b6:61:98:b3:8f:79:a4:71:15:52:8b:
                    11:28:68:fd:6e:5b:b7:27:0c:0f:3b:67:56:3f:4b:
                    6d:3c:4c:43:a9:bc:c5:4a:72:ba:25:2d:cd:1e:8c:
                    29:10:af:32:06:af:77:6a:50:10:60:fb:23:96:cb:
                    0b:39:3c:26:d9:43:99:02:11:3b:fe:17:2d:f8:eb:
                    87:f3:64:18:58:76:3b:11:b4:a3:ba:0a:27:11:1a:
                    4c:61:5c:33:d4:0d:65:dd:3e:9e:9b:af:78:87:35:
                    58:eb:c5:d7:a4:fb:80:eb:b4:22:25:86:e3:4b:36:
                    10:69:26:c7:5e:2a:da:17:7b:37:28:a1:53:13:88:
                    24:38:2d:c1:fd:a8:76:5b:6b:98:cf:f8:aa:8c:7d:
                    55:10:af:25:ee:6a:43:4d:16:1f:3b:2c:5e:6c:dd:
                    49:11:b2:84:ff:66:c5:09:d3:db:c4:e4:e1:c6:e1:
                    b2:cf:9b:6e:7b:85:0d:e6:25:fa:cb:bc:b8:d3:17:
                    6e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:23:A6:F9:D1:DE:C9:AD:63:7C:2E:25:45:77:B9:AD:1C:F7:44:8E
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/936A4548AC3A11F0A9C43F44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:27c0:c02::/47

    Signature Algorithm: sha256WithRSAEncryption
         cf:87:a0:c1:a6:c1:5f:80:b9:29:07:86:c9:72:6d:7b:ef:e4:
         5d:77:37:4e:10:a1:8b:14:7a:03:b7:77:4d:6e:03:bf:a7:a9:
         97:71:9a:34:29:9c:e2:5b:8d:40:e9:aa:bf:54:3a:a4:81:44:
         be:48:b9:90:87:1e:cf:75:f2:72:4a:40:0a:bc:c5:49:66:13:
         12:d0:68:aa:66:36:20:0a:ec:a2:9f:54:78:fd:cd:47:2e:1a:
         49:1b:29:7b:eb:fb:b4:7d:5a:a3:93:71:eb:8a:ed:cb:f3:a7:
         9d:5a:43:8d:3d:59:ef:1c:ad:80:50:9a:34:68:54:2d:30:7e:
         d5:68:3a:59:68:34:ef:b1:86:2d:3d:2d:cb:61:21:8b:7d:c3:
         d3:32:2a:69:0c:57:18:05:ca:13:27:0f:11:ca:b7:ee:51:47:
         eb:ac:6f:0a:88:b5:30:5e:54:9e:07:e0:85:7a:25:c8:d5:4c:
         1b:17:7c:d9:a9:27:55:0a:95:48:b3:30:79:b2:9f:40:19:c8:
         ad:a0:c9:81:67:14:d1:15:2b:f6:d1:8a:3d:8f:d0:94:9c:43:
         35:36:0a:fa:c4:5f:33:0b:3d:8b:c9:8c:47:43:b7:c4:60:0a:
         cf:f6:05:5b:3e:ae:68:ea:9a:0f:d7:61:82:98:0c:24:87:bc:
         29:cc:44:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:10:28 2026 by rpki-client