Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/F811FEFEC7C911F18084475D5411F970.roa
File:                     F811FEFEC7C911F18084475D5411F970.roa (raw, json)
Hash identifier:          R3LYkyXVvlNDCKmaFgtNzg9jgvtmul93fSa/7ypDe+Q=
Subject key identifier:   96:13:D6:CE:06:E3:C1:F8:73:AD:D0:61:00:A0:28:11:53:CC:48:62
Certificate issuer:       /CN=A918BD38/serialNumber=F19121F8FB01D8DE26F3694AB6FA0FABCBB9704E
Certificate serial:       03
Authority key identifier: F1:91:21:F8:FB:01:D8:DE:26:F3:69:4A:B6:FA:0F:AB:CB:B9:70:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZEh-PsB2N4m82lKtvoPq8u5cE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/F811FEFEC7C911F18084475D5411F970.roa
Signing time:             Wed 14 Oct 2026 12:22:49 +0000
ROA not before:           Wed 14 Oct 2026 12:22:49 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     150706
IP address blocks:        2406:9640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.crl
                          rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZEh-PsB2N4m82lKtvoPq8u5cE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 10:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BD38, serialNumber=F19121F8FB01D8DE26F3694AB6FA0FABCBB9704E
        Validity
            Not Before: Oct 14 12:22:49 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acf7419-4724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:16:a4:8e:6a:9c:0c:1c:a0:60:b4:0d:b2:2f:
                    17:2d:ba:97:a7:0c:23:e1:38:a6:2f:01:9f:90:05:
                    14:43:88:67:dd:98:4e:ba:a0:b3:dd:9f:1e:12:5f:
                    14:18:54:5f:4e:b3:19:9f:8d:51:70:2a:b4:44:57:
                    66:ba:59:85:f7:fc:1d:87:9c:e4:0e:eb:78:a0:3e:
                    17:9f:ce:56:c5:ee:7f:f1:7d:3e:3e:f6:ca:6d:3e:
                    f2:56:d5:f4:74:c7:dd:d9:2e:f2:75:46:d0:ce:b1:
                    6b:3d:ae:66:33:37:45:d4:f0:aa:9a:c7:12:55:39:
                    23:f7:f7:e0:ba:9b:f3:3d:8e:8f:22:50:28:28:e0:
                    1a:0d:aa:47:01:a2:9e:8c:ab:79:af:c5:c1:a3:60:
                    9a:09:c6:94:6f:c3:8f:99:bb:6c:c8:12:96:20:e4:
                    6d:44:f4:9c:cb:91:00:34:83:2c:c9:ca:4c:c1:f5:
                    af:9c:7b:26:1e:82:4b:fe:39:73:c6:74:f0:6d:8f:
                    21:8b:f8:03:dc:f1:35:3a:3c:ad:40:7b:2d:00:ce:
                    cc:cf:7e:b4:3e:ae:a9:2a:f4:be:69:53:13:46:e9:
                    79:18:ed:8c:16:5e:18:e1:5d:bd:39:a1:78:fe:7a:
                    16:69:cd:6b:4c:58:84:78:ec:f3:42:30:5a:91:cc:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:13:D6:CE:06:E3:C1:F8:73:AD:D0:61:00:A0:28:11:53:CC:48:62
            X509v3 Authority Key Identifier:
                keyid:F1:91:21:F8:FB:01:D8:DE:26:F3:69:4A:B6:FA:0F:AB:CB:B9:70:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/8ZEh-PsB2N4m82lKtvoPq8u5cE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZEh-PsB2N4m82lKtvoPq8u5cE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD38/91B97E16C7C911F1835AEBAD5311F970/F811FEFEC7C911F18084475D5411F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9640::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:ce:b8:72:96:c3:45:c3:2e:21:4d:2b:ed:4e:c7:d8:dc:68:
         7f:08:1d:ca:b2:5b:83:0c:a4:2e:e0:0e:ed:db:ed:50:a6:f9:
         bc:46:14:c5:ff:7b:28:53:ce:40:2f:28:b5:03:03:bd:97:c6:
         c4:9d:9e:8f:d6:b5:1b:c4:96:b2:77:ed:24:28:3b:92:bd:56:
         2b:19:5c:56:a6:42:1a:91:17:a6:94:7b:d2:77:25:f8:7c:e7:
         45:18:31:ea:1b:66:00:e7:93:ea:2f:12:99:91:fb:73:51:d0:
         69:44:22:d2:fc:6b:70:72:dd:38:a9:06:56:b8:fc:8b:2a:d2:
         6d:0f:25:c7:2e:34:1a:f3:cd:43:1b:53:87:8e:cd:d8:6e:3e:
         10:b3:a0:93:fc:81:d6:35:68:3a:c1:9d:b3:15:3d:58:44:a4:
         94:81:3c:73:5b:47:51:4f:69:64:dc:87:d3:bb:16:8c:5b:10:
         23:ea:08:03:43:99:4d:d0:2e:da:4a:91:e2:2d:51:b8:be:69:
         b0:21:3c:d1:c0:29:60:39:e6:c9:bf:64:4b:b5:ce:a5:49:9f:
         4f:98:6c:8f:96:81:a2:6b:86:86:53:9d:5a:dd:89:cd:cc:8b:
         0a:22:c0:b4:cd:45:88:94:a3:87:0f:da:46:d2:10:af:de:c2:
         e0:80:a6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:48 2026 by rpki-client