Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CC647BDECAC711EF80553A61C4F9AE02.roa
File:                     CC647BDECAC711EF80553A61C4F9AE02.roa (raw, json)
Hash identifier:          6py7+bxGSuMtBsOOS74wMtrFxOuNUNxvgY9dbOF/Dhk=
Subject key identifier:   E8:6F:4E:E6:FE:96:62:59:6F:57:88:6D:52:F6:18:66:86:FF:34:FD
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       03B2
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CC647BDECAC711EF80553A61C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:09:35 +0000
ROA not before:           Sat 09 Aug 2025 02:39:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133442
IP address blocks:        2400:9ce0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
                          rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Aug  9 02:39:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a51b8e-9e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:68:51:f1:a4:ce:62:95:ff:38:94:dc:96:
                    7e:98:67:ce:7d:d4:76:10:12:5b:c3:b9:16:3e:da:
                    e3:8c:84:ae:2b:fc:69:d3:a5:15:64:63:d7:2f:14:
                    3e:70:f4:6a:d7:bc:57:01:96:26:31:5c:12:51:5f:
                    30:34:2c:6c:22:21:34:21:e7:5a:ba:84:fc:eb:04:
                    21:83:b0:42:a6:2b:36:28:98:c3:40:ef:52:a3:28:
                    85:08:67:f4:14:e6:03:39:53:af:e5:83:3f:5e:9e:
                    4a:08:f3:29:4f:0d:29:24:cf:d4:65:bc:c1:34:a2:
                    ee:31:5a:68:f8:c8:8c:1a:f6:f9:43:bf:cd:0d:cd:
                    e2:60:2a:27:7a:10:67:91:9d:30:f0:3b:97:65:6a:
                    1e:3b:aa:70:18:1e:1d:f8:63:4f:80:04:47:c1:6a:
                    18:8a:86:bd:2b:c3:b0:1f:c3:8d:64:7a:bc:2c:aa:
                    5a:f0:27:2b:ef:8f:de:95:62:6f:6f:e6:65:6d:47:
                    27:8b:7d:22:01:46:75:87:47:58:9b:86:00:76:ed:
                    6c:3e:de:2a:0e:ec:b4:41:17:51:b2:e8:8f:a2:fb:
                    4e:f6:3c:79:4f:42:d2:ce:69:7d:b9:99:e7:ee:41:
                    57:da:25:a8:53:da:c4:8b:bc:7e:4c:80:e5:9c:a8:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:4E:E6:FE:96:62:59:6F:57:88:6D:52:F6:18:66:86:FF:34:FD
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/CC647BDECAC711EF80553A61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9ce0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:e1:26:e0:24:10:99:73:7c:e1:6d:d8:53:b0:0f:10:97:b2:
         ab:8c:58:e7:9b:84:a5:2c:a7:68:d2:8b:15:09:57:fc:51:ec:
         28:18:6c:09:73:fb:66:ce:22:8c:41:56:a0:ad:c4:2c:6a:54:
         08:27:fd:e2:94:99:4c:80:9d:cf:b0:38:b3:6f:8e:75:df:b7:
         a9:bc:c0:8e:b7:3e:a4:9b:b9:1e:e4:e4:00:f3:9a:cf:5a:5d:
         7b:27:b7:15:78:28:0d:ef:38:db:a0:f6:3e:04:46:b0:87:a2:
         f6:bc:3e:d5:2a:f7:43:cf:c9:a3:d7:f7:ad:58:df:3e:66:8e:
         b7:47:4d:09:b4:09:7f:bb:e6:a4:90:6f:b9:08:f8:79:14:20:
         f2:5e:e7:3b:aa:eb:db:d3:92:5a:bf:31:2c:37:3d:73:12:05:
         9e:0b:e9:58:49:16:82:43:25:21:6c:a7:30:76:43:17:25:b3:
         82:ea:53:d0:ac:9b:f6:cb:3e:0c:0f:b5:87:41:18:d5:d8:46:
         8d:72:63:02:36:0e:fd:62:68:bc:35:08:8f:98:d9:44:1a:5d:
         ba:84:fd:90:48:a4:1b:e7:41:19:76:bd:9b:80:08:c5:f3:34:
         9c:ff:96:7a:b4:ee:9a:58:49:8e:40:80:3b:0d:e6:7c:98:37:
         1f:98:f2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 18:18:57 2026 by rpki-client