Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/7072DE7601C911EC9286E827C4F9AE02.roa
File:                     7072DE7601C911EC9286E827C4F9AE02.roa (raw, json)
Hash identifier:          VF5Ihkgss3eEF0eF0RXv99yvFaNnXbi4F1C1EW0C81k=
Subject key identifier:   76:F5:F7:BD:2F:2C:C9:12:32:42:D4:8C:50:97:B5:E9:EB:47:AB:E4
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0F9A
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/7072DE7601C911EC9286E827C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 18:35:45 +0000
ROA not before:           Wed 02 Sep 2026 18:35:45 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     210872
IP address blocks:        2405:84c0:fdfc::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3994 (0xf9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Sep  2 18:35:45 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a986c81-1956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:1f:5c:4f:49:2d:4e:c8:47:fd:29:93:54:
                    b5:d5:33:1b:8b:a7:a9:1a:e1:b6:16:9f:e2:0c:8f:
                    db:b1:85:bb:eb:36:6d:b5:5f:87:2c:99:76:57:23:
                    ef:a2:0c:4b:12:6a:fc:82:8a:19:d7:33:a7:7b:c6:
                    4b:93:92:26:0a:af:79:17:7b:8a:c4:74:91:f4:d1:
                    1f:69:36:4a:3e:00:ee:be:09:88:8e:79:1a:da:13:
                    20:9f:ef:b6:9d:64:6c:d3:1b:87:43:0f:74:31:6f:
                    05:4a:f3:f4:3a:41:d6:93:b9:00:64:90:36:0d:5e:
                    c7:8f:a7:30:14:73:0e:e9:dd:96:46:38:ef:9d:53:
                    54:e6:a4:7e:6d:8d:35:05:f1:81:93:cb:05:7d:46:
                    0b:32:61:da:9b:e2:43:ef:ba:38:97:5b:a8:fa:0f:
                    b6:c5:d8:46:62:4e:e9:ad:54:d0:e6:c1:55:4c:b9:
                    75:a4:c1:d0:cc:85:97:7b:1d:cd:84:5d:3b:93:ce:
                    15:50:61:79:e5:79:4f:5e:fd:dc:1b:82:39:ca:63:
                    64:0f:d4:8b:da:fa:1c:1a:31:7a:6d:3e:52:d2:de:
                    c5:f0:2c:7f:80:22:4d:ef:a5:25:e8:77:d3:20:01:
                    31:b4:34:0b:6b:09:4c:f8:d2:9f:24:8d:63:7b:ca:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F5:F7:BD:2F:2C:C9:12:32:42:D4:8C:50:97:B5:E9:EB:47:AB:E4
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/7072DE7601C911EC9286E827C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:84c0:fdfc::/46

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:69:5f:97:a4:00:f1:a8:ef:30:71:7e:0e:fe:20:01:a8:
         a6:61:9b:6a:91:c2:d8:57:d7:18:bf:2b:8a:50:0c:8d:98:dc:
         42:95:80:23:ad:6f:c6:7f:fa:8e:02:c7:8c:95:a6:83:1c:28:
         5a:d7:68:63:72:74:32:e5:c1:f7:a8:6d:a5:75:47:83:24:2c:
         2f:d6:d6:cb:f0:aa:4d:d0:1f:37:ed:1d:72:70:de:83:4c:b0:
         68:df:c7:57:fd:31:eb:a8:f9:5c:47:c4:74:14:46:62:b4:a3:
         ca:ce:77:cb:99:45:81:6a:b3:59:d3:ac:07:41:11:48:33:ba:
         37:e8:78:d7:b4:09:5e:d3:63:c8:6b:b2:47:e1:f5:23:66:7a:
         f9:c1:d1:9b:6f:63:16:e6:04:0f:12:1b:ae:4a:cb:1c:ad:13:
         2a:dc:ec:df:9f:ba:28:f0:1c:23:bf:6b:05:05:d6:98:90:20:
         a4:0a:6e:ee:42:45:7a:71:da:bc:c3:a7:30:4c:db:33:fb:83:
         bf:9e:80:09:9a:08:69:e1:bb:65:e9:d2:34:c7:4f:57:5a:3d:
         45:41:d3:a9:b0:66:55:b4:e4:84:a9:b1:6b:62:4b:31:f7:c6:
         16:b1:8b:be:53:ed:c0:cc:a6:9f:20:34:d4:3d:4f:ce:1d:ab:
         27:67:2f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:22:45 2026 by rpki-client