Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
File:                     6307B34A7CAD11EE9E7B9434C4F9AE02.roa (raw, json)
Hash identifier:          6WkzCxquW5lDfA6lzmSq2tT3dgU9Pqrs3T41zMdhl0M=
Subject key identifier:   7C:90:3A:43:4D:B6:8C:B8:19:08:55:38:18:C2:E9:1D:D1:11:09:E3
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       01C1
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:01:13 +0000
ROA not before:           Tue 02 Dec 2025 11:16:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        2400:9460::/32 maxlen: 32
                          2400:9461::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 449 (0x1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Dec  2 11:16:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a41c78-1443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:a0:6c:03:db:35:9c:8f:23:0a:e3:b7:6b:
                    08:7c:dd:5b:d7:4a:6b:92:7e:cf:69:a1:fa:66:3d:
                    76:eb:f3:cd:54:b1:17:f9:cc:21:64:b2:02:c3:4f:
                    b8:5e:eb:75:2a:64:0e:e4:b6:a4:8a:fe:59:dd:86:
                    55:89:99:ca:87:85:4b:d2:3b:78:73:15:26:a3:05:
                    18:55:22:72:c1:5d:60:2d:c5:e0:e5:f6:c4:b5:83:
                    8c:dc:ca:5a:6f:b7:1d:3c:49:1e:95:7f:c4:27:c1:
                    62:28:59:70:3f:91:72:87:da:a4:02:32:f5:32:93:
                    ea:89:37:81:dc:42:c6:3a:a5:50:ee:5c:98:18:64:
                    6d:44:91:8a:2b:5d:2d:35:c9:29:8a:94:61:90:05:
                    5f:a4:b0:19:b3:59:c9:61:9f:26:68:39:40:41:41:
                    45:20:23:23:81:ae:f7:08:cf:6f:b7:19:c4:7a:b8:
                    ef:b5:37:34:38:2e:4e:23:e9:b4:34:ca:7d:c7:6d:
                    3d:2a:89:51:f6:a6:61:96:1d:c9:32:d2:89:ae:ad:
                    90:4c:45:ff:6e:ab:45:69:df:18:bb:e3:54:fc:21:
                    cd:4e:e4:cd:44:82:5c:92:28:5e:11:a0:19:c3:78:
                    0b:52:bb:32:3d:51:45:34:57:42:25:67:6a:d9:f4:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:90:3A:43:4D:B6:8C:B8:19:08:55:38:18:C2:E9:1D:D1:11:09:E3
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9460::/31

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:23:ba:6c:a7:b1:ec:13:41:66:14:a6:70:23:ce:92:98:
         80:24:56:ad:73:dd:e9:e5:be:df:a0:f2:2c:e3:15:df:5c:f1:
         19:d2:76:ea:ac:75:0c:0c:d8:fa:35:53:82:7b:63:30:16:09:
         5c:1d:e1:61:ae:94:e1:14:38:35:1a:c2:20:aa:7b:b1:9f:64:
         1a:63:b8:6a:78:9e:8f:f8:9d:88:a5:d1:6e:6b:df:bf:6b:2f:
         bd:9c:8e:9e:4c:9b:74:ae:a0:45:5a:75:ab:52:b0:95:90:ad:
         48:f8:c7:f9:eb:fa:42:ea:22:86:d6:a6:19:0b:f7:aa:77:41:
         5c:21:61:ee:2b:40:c7:cf:2a:95:f6:47:2b:a3:0e:89:91:7f:
         b4:f2:0a:99:59:e7:82:89:95:93:05:78:27:16:96:6f:3e:5e:
         b2:16:6a:76:3a:c4:7c:f4:2f:0e:7a:a3:d0:1d:61:33:91:e7:
         25:7e:17:89:ce:6d:1b:ab:be:c2:1a:28:43:d2:c2:a8:ff:b1:
         19:89:cf:a9:d8:df:7a:c8:52:c8:83:2b:2c:1f:48:fc:36:96:
         e4:89:09:eb:9d:3b:e6:cd:69:e4:22:df:7c:1a:2f:57:6d:3d:
         dd:8c:01:3b:a2:50:d4:dd:23:b2:84:7c:2f:f3:4d:6c:ed:7d:
         f3:0d:d0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 15:20:30 2026 by rpki-client