Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/8B522F68BBC211F1895EADC35E11F970.roa
File:                     8B522F68BBC211F1895EADC35E11F970.roa (raw, json)
Hash identifier:          AhB7WvHRV7ok/97SSEqFPujRtQjz5hVNns7djnKfKrE=
Subject key identifier:   33:EC:B3:65:AF:90:06:B6:F7:B1:EF:B8:6B:C4:E9:32:2F:A6:0B:2E
Certificate issuer:       /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
Certificate serial:       01AD
Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/8B522F68BBC211F1895EADC35E11F970.roa
Signing time:             Tue 29 Sep 2026 04:59:26 +0000
ROA not before:           Tue 29 Sep 2026 04:59:26 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152893
IP address blocks:        2402:5360::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5
        Validity
            Not Before: Sep 29 04:59:26 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6abb45ae-26d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:e6:e2:ef:aa:4a:04:0c:28:0e:e2:ac:b4:
                    47:b2:a4:7d:ec:07:15:9c:d2:69:6f:01:9a:67:ff:
                    5c:99:13:82:96:65:4c:a5:f8:eb:b2:8d:a4:81:0a:
                    89:17:cc:70:5c:f7:89:a1:92:54:d0:5c:fd:b9:87:
                    75:ff:e3:9f:c1:2a:15:7c:ee:57:98:8c:0c:e1:5f:
                    58:46:0e:b9:eb:89:7a:ef:1d:b1:10:a5:c6:ee:20:
                    d1:fd:43:a9:46:8a:0f:f5:7f:25:5d:d3:cc:d8:59:
                    37:a2:48:74:8e:e1:b1:ec:12:ee:c2:d8:72:1f:88:
                    03:03:bd:b3:e7:f5:7b:dc:51:f5:f1:30:e2:70:b2:
                    5d:b6:37:d2:5b:9b:d8:c5:c7:e6:a9:12:34:a8:b4:
                    19:10:85:7c:ef:56:98:d5:29:39:2c:aa:34:85:da:
                    29:e4:e5:bb:17:76:bd:92:09:d7:da:b5:f7:a7:e6:
                    10:31:35:6b:4d:65:9d:e2:44:ae:38:df:7d:4f:61:
                    0d:fb:b8:d5:1c:6a:51:7b:38:c3:5d:08:da:a2:4f:
                    ab:a3:a8:25:cf:19:0c:d2:0d:4e:0e:6e:f9:89:c2:
                    24:60:24:0b:eb:2a:33:c7:0a:a8:21:3a:b4:94:9e:
                    b7:b5:a6:c2:6e:67:58:57:01:a7:06:c2:db:8c:36:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EC:B3:65:AF:90:06:B6:F7:B1:EF:B8:6B:C4:E9:32:2F:A6:0B:2E
            X509v3 Authority Key Identifier:
                keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/8B522F68BBC211F1895EADC35E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5360::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:08:3d:f6:e8:20:8d:ea:78:cc:fb:c7:40:5f:a8:97:40:77:
         d1:93:af:11:b4:af:03:50:cc:b6:7f:05:82:19:65:e7:73:f8:
         c6:8e:80:cf:7c:d7:0c:ed:c6:29:ec:83:d3:cf:0b:c0:a6:d6:
         f4:fb:6c:9c:6f:ac:69:ac:2c:5a:9c:c5:43:12:a4:a0:0a:85:
         db:49:08:15:85:06:24:89:a5:c7:37:54:b3:f3:4a:b2:a0:d6:
         4f:08:97:18:67:da:06:f9:8e:c7:7f:8f:4c:a9:c9:fa:02:b2:
         8e:15:7b:7c:43:64:76:14:00:4c:b3:65:93:9f:45:ca:24:d1:
         c6:84:4c:cf:2d:b7:f0:fc:a4:86:43:f8:69:ca:8b:16:1c:73:
         97:ff:4a:1e:f2:ee:ab:b5:3d:12:cb:2c:2f:81:2a:77:3b:2c:
         ee:d9:86:76:3d:c7:b3:3f:0f:c7:4d:d1:e4:c6:82:8b:15:97:
         94:ca:c2:6d:86:cf:1d:80:38:bb:a2:9e:cd:15:65:4d:a6:88:
         b6:56:c6:02:a9:75:32:ac:17:22:23:ad:56:c5:0e:1a:2b:95:
         bb:a2:fe:e9:b0:c1:f0:22:68:d4:63:fd:45:fa:18:aa:df:68:
         5f:3a:24:46:90:ea:06:54:ac:54:cb:fd:86:91:82:8e:24:e7:
         a7:30:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:16:48 2026 by rpki-client