Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9698AB7CAA9C11F19A39B1ED3211F970.roa
File:                     9698AB7CAA9C11F19A39B1ED3211F970.roa (raw, json)
Hash identifier:          WuYWAHVoEupHr/y5ku+YxsY0lQUYn6MZ6Ja+rnZVYz4=
Subject key identifier:   42:63:B2:52:8A:E1:16:CF:0C:72:45:E9:8B:B4:0D:07:44:76:AF:B7
Certificate issuer:       /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial:       0221
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9698AB7CAA9C11F19A39B1ED3211F970.roa
Signing time:             Mon 28 Sep 2026 08:16:46 +0000
ROA not before:           Mon 28 Sep 2026 08:16:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152586
IP address blocks:        2401:8360:2::/48 maxlen: 48
                          2401:8360:6::/48 maxlen: 48
                          2401:8360:b::/48 maxlen: 48
                          2401:8360:c::/48 maxlen: 48
                          2401:8360:d::/48 maxlen: 48
                          2401:8360:e::/48 maxlen: 48
                          2401:8360:a1::/48 maxlen: 48
                          2401:8360:a2::/48 maxlen: 48
                          2401:8360:a4::/48 maxlen: 48
                          2401:8360:a5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
                          rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
        Validity
            Not Before: Sep 28 08:16:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6aba226e-c8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d8:6a:6c:07:5a:13:8d:27:b6:37:4a:be:88:
                    41:5c:f4:56:6e:4e:6f:e2:d4:9c:dc:c7:c1:a9:db:
                    c9:02:b3:26:18:29:6c:03:bb:21:47:54:a3:a2:9f:
                    f4:72:98:97:cc:8e:47:04:70:35:01:20:13:55:7b:
                    5e:b9:55:f8:96:54:f1:35:f1:2b:dc:7b:3a:bc:68:
                    5d:c9:ff:1b:9d:45:4d:ca:99:9c:71:6c:b8:6c:ed:
                    3c:f9:df:c1:1c:22:37:ad:24:de:d2:bb:26:db:6f:
                    4a:b2:83:53:b8:80:82:52:fa:8f:b2:b5:91:cf:24:
                    84:e8:42:0f:79:c7:de:5f:81:58:f0:13:9f:46:8b:
                    bb:17:93:b9:13:59:27:46:41:3d:39:3c:ca:4a:87:
                    e2:81:13:8d:8f:c5:4e:c4:a7:15:4b:9f:f0:21:44:
                    9e:47:6e:ba:52:cd:9b:5e:7c:06:ef:04:27:f1:cd:
                    3c:c6:b8:a2:af:32:b8:19:50:c7:de:fd:b4:f1:b0:
                    18:8a:4e:a3:79:b3:af:36:00:8a:a0:20:69:f3:4d:
                    ee:a0:0e:cf:52:b6:3b:1d:0e:bc:7b:7f:06:86:03:
                    b7:2b:db:53:82:8d:f7:5c:b8:1d:43:61:26:8e:ba:
                    13:ee:04:48:60:8c:b4:8f:c1:ba:8f:3b:fc:44:1e:
                    a2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:63:B2:52:8A:E1:16:CF:0C:72:45:E9:8B:B4:0D:07:44:76:AF:B7
            X509v3 Authority Key Identifier:
                keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/9698AB7CAA9C11F19A39B1ED3211F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8360:2::/48
                  2401:8360:6::/48
                  2401:8360:b::-2401:8360:e:ffff:ffff:ffff:ffff:ffff
                  2401:8360:a1::-2401:8360:a2:ffff:ffff:ffff:ffff:ffff
                  2401:8360:a4::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:f4:f3:9e:64:4d:7f:f5:e0:36:fc:d9:39:69:b5:06:e9:
         6d:07:60:19:e0:d4:8a:db:89:9f:8e:83:01:3a:a1:fd:ca:9f:
         c2:13:34:2e:05:4b:d4:3c:ca:36:1f:93:90:08:2b:2e:0c:2d:
         43:51:44:35:8d:54:fb:93:a7:6d:a9:b8:f7:d0:dc:3c:14:da:
         1e:27:79:d8:86:d3:f8:15:fa:48:34:24:a4:68:88:f8:2b:30:
         62:8a:20:3e:63:53:b2:ee:5c:f4:2e:a0:28:5c:54:1e:d3:03:
         3b:fd:47:ae:fa:7b:4a:eb:7f:5a:b2:51:86:3e:70:57:3f:62:
         56:eb:17:a3:d9:9d:68:56:fc:e1:fd:2b:bd:1d:75:7a:ed:b0:
         99:49:fb:af:95:0f:c9:f7:ce:2e:28:1b:15:22:e9:db:23:5b:
         3b:53:4d:30:82:ce:24:30:bc:2f:44:34:f9:36:08:77:70:ee:
         8c:12:f0:c6:3b:61:dc:c8:4e:7c:5e:54:c2:52:e2:53:99:ad:
         18:b0:59:80:56:1d:46:7d:f6:9a:47:81:c9:b8:b8:e0:b3:c3:
         5c:d5:01:39:78:d1:2f:82:6a:34:7b:0d:5d:bf:c1:19:56:9a:
         1d:7e:33:03:b6:29:d7:d8:93:80:47:f8:0c:48:31:1b:c0:61:
         57:a3:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:27:47 2026 by rpki-client