Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F4717D0D89B11E9AB8A5F14C4F9AE02.roa
File:                     3F4717D0D89B11E9AB8A5F14C4F9AE02.roa (raw, json)
Hash identifier:          9i5x26jEgFfmXS6oco0ItVQQxwpu2qOBj0w2ecYR6yQ=
Subject key identifier:   D6:7E:4C:31:1B:C9:F0:5A:AD:D9:A9:EC:4D:59:00:7A:AD:04:81:14
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       3BA9
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F4717D0D89B11E9AB8A5F14C4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:24:23 +0000
ROA not before:           Thu 20 Aug 2026 16:24:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     46047
IP address blocks:        2405:1dc0::/32 maxlen: 32
                          2405:1dc0::/36 maxlen: 36
                          2405:1dc0:1000::/36 maxlen: 36
                          2405:1dc0:2000::/36 maxlen: 36
                          2405:1dc0:3000::/36 maxlen: 36
                          2405:1dc0:4000::/36 maxlen: 36
                          2405:1dc0:5000::/36 maxlen: 36
                          2405:1dc0:6000::/36 maxlen: 36
                          2405:1dc0:7000::/36 maxlen: 36
                          2405:1dc0:8000::/36 maxlen: 36
                          2405:1dc0:9000::/36 maxlen: 36
                          2405:1dc0:a000::/36 maxlen: 36
                          2405:1dc0:b000::/36 maxlen: 36
                          2405:1dc0:c000::/36 maxlen: 36
                          2405:1dc0:d000::/36 maxlen: 36
                          2405:1dc0:e000::/36 maxlen: 36
                          2405:1dc0:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15273 (0x3ba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug 20 16:24:23 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a872a37-0ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:71:86:d5:1d:13:86:eb:24:5b:b6:f4:c7:2b:
                    4b:49:e6:6d:40:02:91:16:fe:e1:f5:22:04:30:a8:
                    62:25:0a:69:2d:ad:69:65:47:75:24:4b:2d:36:95:
                    cd:a2:49:f1:54:3a:23:85:38:26:95:09:cc:17:72:
                    51:61:8e:61:d8:95:fb:c1:f7:74:78:52:be:dc:24:
                    6e:04:22:b9:73:c8:50:aa:1a:90:c0:20:50:4e:65:
                    7f:93:2f:f0:ce:8c:05:3d:cc:b6:5e:3c:0c:f6:1b:
                    b0:35:71:d2:73:0f:40:24:d8:ac:77:ad:f6:05:e9:
                    28:0a:c5:74:b0:e1:88:c8:67:79:a0:15:a6:02:98:
                    41:21:46:c3:01:91:c6:23:75:c4:cf:dd:26:83:47:
                    4b:78:55:b4:97:50:e3:fb:19:a6:74:b4:01:b3:32:
                    a6:a6:86:92:51:6d:5e:93:0b:75:cd:87:e0:ec:1c:
                    92:95:88:4f:09:31:ef:cf:27:99:38:fe:9c:06:56:
                    b8:dd:d7:67:9e:ee:16:fb:83:d0:b1:b5:3c:bb:41:
                    32:82:37:23:46:e3:18:19:0a:49:78:56:a9:cf:56:
                    31:4b:7c:38:8b:70:b7:95:c9:f0:69:8c:1f:d3:20:
                    b7:e6:21:0c:f7:d8:55:74:50:c2:0b:03:74:52:ca:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:4C:31:1B:C9:F0:5A:AD:D9:A9:EC:4D:59:00:7A:AD:04:81:14
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/3F4717D0D89B11E9AB8A5F14C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:1dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:63:cd:22:b6:26:43:4b:0f:fd:d8:ef:27:79:d4:90:9a:bf:
         0f:f9:10:9c:bf:10:10:38:9c:e2:ed:eb:79:b4:bd:0c:64:45:
         5d:e9:7f:c5:03:cc:11:77:85:38:5b:27:32:4d:b3:0f:55:9e:
         16:5b:3f:98:74:91:45:92:2d:35:20:11:d1:3f:3d:cb:77:d9:
         80:a1:0a:9f:fc:6b:96:22:61:1c:b8:6a:c1:81:a4:26:46:b7:
         fc:26:2a:92:56:65:50:57:fe:5e:b9:92:ca:6f:82:c7:02:a6:
         3a:f6:48:8d:4c:59:e6:80:e7:81:c3:88:51:89:26:04:ab:68:
         01:63:56:8b:67:96:f2:60:b0:f0:2d:06:ea:02:a6:86:51:22:
         91:2e:c6:be:ac:e5:3b:53:61:9c:07:ad:46:af:b9:ba:18:38:
         01:08:be:4d:83:4b:03:d4:b7:67:bc:8d:cf:be:96:b3:4a:b1:
         d1:a0:5c:1d:53:77:db:33:57:69:58:bc:23:81:59:6c:20:02:
         bd:e4:06:56:91:f7:a6:38:70:a0:10:fc:36:4d:c3:27:0a:ef:
         f7:90:e3:bc:6b:db:6f:35:93:93:e3:e9:78:23:06:0f:a9:f2:
         6c:c7:4b:6a:31:d7:6e:37:fc:21:ae:81:30:eb:6b:cf:9c:68:
         4b:db:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:29 2026 by rpki-client