Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/62B780C46EF811F1A12CAB807BA30FBC.roa
File:                     62B780C46EF811F1A12CAB807BA30FBC.roa (raw, json)
Hash identifier:          WqvK9G7du0ZUPhPlzOYqfUxNooGlr51htpi5s+9yDqc=
Subject key identifier:   1B:E8:30:44:C2:58:71:07:35:63:D2:76:12:ED:F7:44:33:87:00:D9
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       041E
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/62B780C46EF811F1A12CAB807BA30FBC.roa
Signing time:             Mon 17 Aug 2026 01:49:36 +0000
ROA not before:           Mon 17 Aug 2026 01:49:36 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150006
IP address blocks:        2400:9ce0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
                          rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Aug 17 01:49:36 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8268b0-69c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:23:58:ce:2c:84:ee:31:0d:a1:8a:8b:27:
                    c2:67:ee:82:d6:44:3c:79:9f:28:b6:8d:69:44:8f:
                    56:77:06:ef:24:32:69:e0:61:3a:27:d0:f7:42:4f:
                    b8:77:99:9b:6d:8a:4b:8e:77:90:50:5e:f2:1b:10:
                    a1:d4:bd:73:39:e3:b2:e5:3d:32:33:6f:bc:4c:ea:
                    ef:c9:62:bf:00:6c:6d:85:b7:e9:a4:d9:ae:76:cd:
                    dc:0e:79:be:5d:73:71:a8:b8:82:7c:30:47:65:75:
                    9a:ff:f5:0e:75:65:c6:3f:7c:8c:8e:ac:a0:83:f7:
                    69:48:d5:9e:24:e8:d7:c5:28:91:5a:04:2a:1b:42:
                    09:97:3f:90:93:ae:d3:f8:01:b9:e0:0c:ec:02:86:
                    0d:03:86:73:9a:a8:73:01:8c:30:27:41:c1:89:de:
                    5e:92:a0:9d:40:44:fe:f0:1b:c9:6a:92:55:37:06:
                    9b:42:15:e2:d3:78:6c:26:54:69:06:9a:f5:81:70:
                    1d:1d:e0:27:24:00:00:a2:d6:82:8d:7a:63:70:10:
                    aa:02:73:70:5a:77:c3:fd:3f:ea:20:2e:da:c2:86:
                    a5:f2:76:dc:bf:43:d2:e8:29:00:3e:6c:6c:35:a7:
                    1d:c3:2a:ae:99:f3:6a:b4:8e:9c:0f:c1:f0:bb:e1:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E8:30:44:C2:58:71:07:35:63:D2:76:12:ED:F7:44:33:87:00:D9
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/62B780C46EF811F1A12CAB807BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:82:87:a1:4d:83:be:04:f1:48:4f:fb:73:64:a3:41:e2:ab:
         27:7f:1a:40:16:f1:e3:72:c7:02:61:ad:1f:f6:5d:b3:cc:ca:
         5d:0e:92:9b:b3:af:12:89:3f:8f:b8:da:d4:ab:2d:64:18:d3:
         e3:d4:63:12:27:ec:a0:cc:18:5c:17:93:f0:48:60:f2:57:34:
         d7:bc:e7:64:ea:1e:d1:da:5f:6b:c3:43:0e:88:0b:54:32:c3:
         de:a7:0e:07:8d:1f:14:3e:66:ad:b3:63:62:c1:49:54:56:31:
         7d:8d:c8:84:bb:98:83:76:4c:9f:0a:54:be:d8:b5:78:f8:44:
         e3:8a:0a:ac:31:a9:f8:69:68:4e:c3:25:b0:fb:90:03:01:60:
         57:e7:7b:11:67:8e:3c:a5:cb:f6:6b:7b:47:dd:5e:23:4c:7a:
         13:5a:60:91:d7:9b:07:20:03:42:64:8a:6e:5a:38:a9:c0:eb:
         58:08:7d:92:db:7d:17:ce:a2:3a:7f:4d:77:39:7c:d2:4a:1b:
         7f:ea:92:3a:bc:54:ad:51:0a:5f:66:ea:dd:09:b5:ec:49:b9:
         8d:f3:4e:85:7d:95:87:94:9e:81:be:f6:66:08:8b:8b:f0:ce:
         cc:9a:2c:25:6c:df:74:97:bf:83:07:38:8c:32:90:b7:8f:08:
         90:ea:7e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:54 2026 by rpki-client