Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/904FFA4A89E011F19D4A2A975611F970.roa
File:                     904FFA4A89E011F19D4A2A975611F970.roa (raw, json)
Hash identifier:          DFAio1T3pAvkyo5GJuUxGnxD4vcze6AJnYJ5qLjBlVM=
Subject key identifier:   09:D9:A9:D5:AB:67:2E:10:0E:10:D5:45:3E:0F:28:31:83:75:38:16
Certificate issuer:       /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial:       D7
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/904FFA4A89E011F19D4A2A975611F970.roa
Signing time:             Fri 21 Aug 2026 06:58:11 +0000
ROA not before:           Fri 21 Aug 2026 06:58:11 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     147314
IP address blocks:        2402:1960:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
                          rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 07:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
        Validity
            Not Before: Aug 21 06:58:11 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a87f703-8f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:5b:34:90:f3:e1:56:cd:47:82:5d:56:a3:
                    ba:e3:b5:bf:e0:2d:2b:2a:da:0c:c3:55:7a:d4:50:
                    38:7a:67:e7:c4:e9:ea:d3:ff:da:8d:f7:93:c9:da:
                    76:fb:98:3b:b1:d7:0d:4f:ff:05:ce:40:bb:06:88:
                    3e:2d:47:c4:61:9a:eb:1b:62:78:eb:24:85:3f:57:
                    37:3e:4f:ac:f3:b4:6e:33:c7:1f:7e:9e:54:2d:75:
                    44:b8:03:12:f7:48:1c:f4:b6:df:1b:1f:cd:40:99:
                    27:0b:e8:7e:cb:60:74:45:8f:0d:af:ea:e6:1d:0b:
                    44:0d:5b:94:33:d2:14:90:d3:92:bf:e9:e9:35:00:
                    30:fa:97:2c:93:b9:4f:97:29:55:9e:8d:24:92:77:
                    35:76:6a:00:59:c9:08:a1:ae:15:ca:3c:52:5d:85:
                    68:e9:f8:12:41:3e:88:d1:ef:20:8b:23:06:75:aa:
                    5e:bb:40:28:96:19:5f:95:5b:85:ff:a1:df:d1:2a:
                    ab:42:05:dd:86:bc:8a:72:97:a2:55:fd:d6:39:d1:
                    1b:ba:57:34:73:02:9c:bc:f6:6b:0e:08:8b:f6:3d:
                    50:a2:bb:1c:83:1b:09:0a:9e:09:9c:ea:06:07:26:
                    a1:e1:07:4b:7d:63:e0:ca:b8:66:3f:29:ec:6f:b9:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D9:A9:D5:AB:67:2E:10:0E:10:D5:45:3E:0F:28:31:83:75:38:16
            X509v3 Authority Key Identifier:
                keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/904FFA4A89E011F19D4A2A975611F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1960:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:ad:35:8e:78:07:9e:bb:44:55:7b:1b:e5:71:c5:9f:75:
         f6:35:c3:db:bb:0f:f1:18:b0:65:d2:19:c6:c2:96:05:c8:0a:
         65:35:b7:e6:d7:40:29:df:dc:e9:ee:02:a9:0b:e7:a2:21:f0:
         89:e5:b4:de:dc:51:76:78:85:42:c0:fb:e2:9c:30:9c:85:27:
         4d:b5:53:35:49:af:1a:c5:ed:d4:fb:f6:6c:33:61:8f:f4:17:
         7d:4f:0c:53:66:ee:e0:a6:0a:ec:86:f7:2a:7c:1c:38:51:d8:
         00:10:f0:44:3c:dd:ad:c8:ed:8b:55:3b:e9:80:66:9c:39:2b:
         ea:cb:11:86:3b:cb:d1:c3:4b:5e:eb:79:fb:94:af:6d:e8:5c:
         a4:65:5c:3a:0a:ac:02:62:bf:61:b9:c7:41:d9:04:1d:13:c9:
         40:dd:54:72:55:c5:c1:6c:5c:03:2b:d7:09:b7:5b:13:e0:5d:
         4e:2c:68:21:e1:68:f4:cc:7f:77:2b:2f:0d:76:fd:f7:ca:af:
         72:d1:01:96:14:e7:0c:37:d5:d0:19:2f:ee:fd:1f:e3:39:05:
         6f:df:87:1b:6d:fa:ab:c3:77:30:24:22:ae:ad:fd:b5:f3:eb:
         ef:0c:38:85:5d:44:9a:44:02:95:e0:7f:9a:79:d1:31:cb:77:
         ee:ad:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:25:04 2026 by rpki-client