Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/9DC49A2449A011EEB3DFDD0DC4F9AE02.roa
File:                     9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (raw, json)
Hash identifier:          LjbP/nLFrw9roK+062Qwn6m9oqXfGtb3IoQOgK+dP48=
Subject key identifier:   FC:50:91:2A:99:4B:63:F6:22:42:E6:E6:B2:EB:DA:64:95:30:BF:A7
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       03B6
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/9DC49A2449A011EEB3DFDD0DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:09:38 +0000
ROA not before:           Sat 09 Aug 2025 02:39:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     216401
IP address blocks:        2400:9ce0:2000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
                          rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Aug  9 02:39:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a51b92-d876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:73:19:44:60:4a:f6:5a:dd:2e:3c:cd:cc:cd:
                    b0:98:fc:13:cf:a3:e6:a3:12:00:9b:8f:d5:23:ab:
                    89:9a:3f:0a:6e:9d:a5:35:45:97:4a:b2:96:fc:a9:
                    f2:93:75:3b:36:95:93:72:17:bc:fe:78:d5:1a:df:
                    f1:0d:11:7e:2e:08:ce:9c:06:fb:0b:95:86:3a:32:
                    e5:e4:d7:25:7b:82:5d:f8:58:12:d3:d0:60:2e:bf:
                    a9:24:d3:4a:1b:e6:60:fb:c6:83:b4:80:aa:9b:ac:
                    38:8f:32:d6:98:87:e1:ce:f3:85:91:37:a4:73:c7:
                    fe:96:e0:1a:5c:07:e9:1c:5f:3b:19:4a:ea:25:f2:
                    ad:c0:af:92:21:ef:4b:01:f3:58:6c:55:89:e1:6f:
                    eb:da:02:e2:c6:d1:84:49:30:a2:93:a6:a7:65:2a:
                    81:41:06:23:f7:eb:78:66:e8:b2:80:79:d4:fc:e3:
                    e5:88:4b:7a:7f:04:46:16:59:55:23:16:32:fc:79:
                    35:0d:34:cc:cb:74:56:c0:26:c6:ae:14:0d:0d:f2:
                    e1:e0:67:4a:e7:ad:cb:f1:7b:eb:0d:72:b2:ec:7d:
                    29:d3:82:63:a0:4c:98:d3:27:7c:69:ee:ef:2c:4e:
                    a5:76:dc:32:ef:60:4c:00:6b:2c:b3:f9:e6:07:e6:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:50:91:2A:99:4B:63:F6:22:42:E6:E6:B2:EB:DA:64:95:30:BF:A7
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/9DC49A2449A011EEB3DFDD0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9ce0:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:c7:47:11:37:f5:0f:41:8e:4a:55:72:6f:51:87:8a:93:
         48:58:f1:22:c0:eb:4e:ca:3b:24:7e:32:35:c1:d5:28:16:46:
         55:da:82:57:7b:34:78:88:13:ef:ad:76:81:d3:60:74:d9:50:
         f0:76:f7:5d:9d:f0:6f:a4:a9:10:9c:1e:64:6f:79:90:b0:1a:
         9c:9d:12:3f:32:f1:6e:f6:3e:03:92:6a:64:b2:1b:52:57:18:
         1c:0e:60:fa:fc:2b:53:a7:be:c2:2e:f5:0e:a7:96:ef:39:a0:
         85:52:60:36:b2:55:15:12:e1:00:c1:5f:30:ec:21:2b:e1:35:
         6d:9a:1e:18:c4:30:ee:72:4e:13:15:bd:b5:7f:96:cc:c7:65:
         b8:00:51:ef:97:e4:17:71:cd:99:3a:87:84:d1:24:3a:b3:08:
         82:a3:e2:b3:70:91:0b:89:e3:9b:1c:3e:5f:44:fd:01:7a:03:
         81:6f:0b:54:e5:01:ef:90:7f:29:b7:ab:b7:99:e7:16:f5:62:
         b0:c9:85:de:ff:a0:30:18:2d:3c:62:f8:11:81:e7:70:e4:8a:
         80:44:12:6c:24:c6:67:d0:58:b2:1f:0f:97:ee:bf:8d:1e:9c:
         bc:ad:59:b0:1a:59:ee:f4:a8:f7:f5:58:f5:96:9d:4e:56:26:
         99:7a:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:18:47 2026 by rpki-client