Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/96F7E1784E8F11F1BB8AFF5DB7833773.roa
File:                     96F7E1784E8F11F1BB8AFF5DB7833773.roa (raw, json)
Hash identifier:          a61Ie/aCG9CN03x2NjRNh6RVX/PaVqNU4tVN2I7ZfeY=
Subject key identifier:   2F:05:6F:75:F2:97:A0:AB:F4:D4:21:F6:BA:89:72:5B:58:AE:CF:1E
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1B77
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/96F7E1784E8F11F1BB8AFF5DB7833773.roa
Signing time:             Thu 06 Aug 2026 16:30:19 +0000
ROA not before:           Thu 06 Aug 2026 16:30:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        2401:1d80:3000::/40 maxlen: 48
                          2401:1d80:3100::/40 maxlen: 46
                          2401:1d80:3200::/40 maxlen: 48
                          2401:1d80:3300::/40 maxlen: 46
                          2401:1d80:4000::/40 maxlen: 46
                          2401:1d80:4100::/40 maxlen: 46
                          2401:1d80:4200::/40 maxlen: 46
                          2401:1d80:4300::/40 maxlen: 46
                          2401:1d80:5000::/40 maxlen: 46
                          2401:1d80:5100::/40 maxlen: 46
                          2401:1d80:5200::/40 maxlen: 46
                          2401:1d80:5300::/40 maxlen: 46
                          2401:1d80:5800::/40 maxlen: 46
                          2401:1d80:5900::/40 maxlen: 46
                          2401:1d80:5a00::/40 maxlen: 46
                          2401:1d80:5b00::/40 maxlen: 46
                          2401:1d80:6000::/40 maxlen: 46
                          2401:1d80:6100::/40 maxlen: 46
                          2401:1d80:6200::/40 maxlen: 46
                          2401:1d80:6300::/40 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7031 (0x1b77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Aug  6 16:30:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74b69a-6dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:f5:2f:4a:1b:59:25:c0:aa:72:8a:71:f8:
                    b3:94:77:8e:ca:52:6c:71:81:78:d0:23:36:10:08:
                    8e:73:ef:e3:19:24:f2:14:0b:12:0d:b9:bb:2f:c3:
                    46:8b:3b:83:2d:ca:90:e8:98:b6:83:b3:a4:c8:65:
                    bd:7e:00:a4:f6:2e:6e:7b:e4:09:9a:6d:41:34:a0:
                    e7:85:02:98:a7:3e:e6:c8:67:6d:a9:f9:88:f9:d4:
                    45:5b:78:41:24:9f:02:0a:b6:37:d7:8c:d2:7f:c8:
                    41:8f:d6:cc:17:99:5d:59:89:71:d5:99:0f:ec:c6:
                    32:02:8a:c0:25:bf:47:3c:10:7e:00:01:50:c8:ee:
                    0c:28:54:de:49:61:0c:30:f0:4b:06:f0:f1:da:20:
                    bf:25:26:be:5f:fc:c4:a7:db:54:82:44:42:ac:8f:
                    c4:65:aa:8c:bf:a7:cb:89:28:4c:29:0f:d7:c8:fd:
                    53:a0:80:0e:d8:34:65:de:15:25:27:8f:76:32:92:
                    c0:b2:0f:66:83:ae:99:91:77:ba:ae:bd:21:c0:bc:
                    05:c6:80:12:9c:91:57:92:da:31:8f:34:ba:d2:98:
                    f6:b1:ee:e9:21:76:85:bc:48:f5:08:7e:55:5e:cf:
                    c2:69:0d:46:6b:75:a3:0e:21:ef:a3:90:40:6f:7d:
                    77:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:05:6F:75:F2:97:A0:AB:F4:D4:21:F6:BA:89:72:5B:58:AE:CF:1E
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/96F7E1784E8F11F1BB8AFF5DB7833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1d80:3000::/38
                  2401:1d80:4000::/38
                  2401:1d80:5000::/38
                  2401:1d80:5800::/38
                  2401:1d80:6000::/38

    Signature Algorithm: sha256WithRSAEncryption
         b6:b5:6d:07:52:6f:76:8d:db:83:bf:c0:8e:9d:cd:47:01:7e:
         bd:e5:c0:0c:0e:7a:5e:12:35:05:b3:f8:97:31:39:72:07:f9:
         89:df:4e:e8:bb:f9:17:a5:10:e8:0c:56:10:21:8e:a3:f8:0c:
         0c:0c:8c:59:05:34:4d:50:4f:bb:24:fb:9a:d3:08:4b:42:23:
         61:07:10:24:31:36:fd:a9:9c:34:cd:01:d0:fc:a2:d4:94:d5:
         46:99:65:b0:7a:e1:e7:96:d5:ae:b5:21:4e:47:34:7c:d0:70:
         98:ca:b8:4d:dc:70:45:26:2e:9d:e0:30:1b:fd:a9:77:56:e9:
         b7:07:8f:76:bf:1a:b6:1a:89:40:1b:7e:e0:20:2e:a2:ec:d6:
         e4:a6:32:70:23:e5:a1:dd:02:fb:d1:cb:cb:31:25:23:cf:3f:
         f5:a9:e4:41:a2:f1:46:87:ae:67:6a:eb:5c:87:7c:c8:f0:0c:
         e9:72:6c:99:b9:39:de:49:b4:7d:97:94:b9:17:b9:b3:f9:eb:
         a7:36:69:9e:42:66:75:e8:73:fe:4f:89:38:5c:53:47:94:2e:
         53:9a:e7:f8:f3:42:c9:ef:15:40:bc:93:2e:75:49:bc:fa:5b:
         a0:1a:60:fd:c5:cb:9a:93:98:52:98:0d:9f:3b:d2:e1:00:8a:
         38:b4:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:05 2026 by rpki-client