Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
File:                     BACC6D0A4F7411F0A8124536C4F9AE02.roa (raw, json)
Hash identifier:          VpLGpucUcqgFegrPJ8j6XurYhNQBjCABSxVsDN9Xp/A=
Subject key identifier:   EF:EB:17:C7:F0:4B:67:3D:9D:2B:E7:7C:99:B4:8D:09:DF:BB:10:FC
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       02FE
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
Signing time:             Thu 05 Nov 2026 03:49:28 +0000
ROA not before:           Thu 05 Nov 2026 03:49:28 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     26445
IP address blocks:        2402:be0:fff0::/46 maxlen: 48
                          2402:be0:fffc::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Nov  5 03:49:28 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aebfcc8-3b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:cf:6f:37:78:6d:bf:e6:b0:8f:01:94:61:
                    81:86:e7:6f:76:10:55:89:44:bc:27:61:78:24:ec:
                    08:c0:5d:0d:fa:69:25:ae:63:96:0a:ee:06:38:34:
                    56:2a:ad:e8:28:0e:54:a8:df:8e:3b:a3:a8:2f:78:
                    c4:d4:a4:e3:de:d5:a2:22:33:a6:0c:5b:2d:76:08:
                    77:d1:7b:bc:00:7b:c4:1f:69:a7:c8:12:36:05:8e:
                    73:23:e1:01:05:96:8b:91:31:42:ed:40:3e:85:c4:
                    b6:a6:d2:43:02:d2:60:64:40:63:7e:e9:f6:32:66:
                    47:ea:ad:b4:08:d4:f8:b2:36:cc:55:54:a5:90:6d:
                    5b:86:56:f0:31:b2:e3:fb:00:db:82:44:41:93:9d:
                    04:a2:10:d2:91:27:08:88:1d:3c:59:bd:2b:15:58:
                    02:5c:3c:a2:b2:dd:52:3e:8b:14:71:e4:3b:28:e7:
                    9e:f3:58:c8:1f:d1:90:ec:9b:8e:30:80:50:a3:7d:
                    d1:e1:9c:0a:e8:33:e2:a2:80:47:98:0f:80:e9:18:
                    24:6b:bc:74:07:04:2b:1e:77:3c:15:e5:5e:32:2e:
                    72:b2:18:04:a6:e9:37:3b:50:0c:86:9f:31:ac:79:
                    cf:fe:fa:b8:06:29:7b:a7:b3:4f:79:9d:bd:8a:1c:
                    07:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EB:17:C7:F0:4B:67:3D:9D:2B:E7:7C:99:B4:8D:09:DF:BB:10:FC
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:fff0::/46
                  2402:be0:fffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         6e:f7:86:60:37:8f:93:f3:00:d9:a2:29:d1:27:7e:38:d2:c8:
         29:55:7b:f4:68:18:82:c0:f9:e9:63:05:d7:f2:5d:d4:c4:0f:
         a0:79:95:12:9c:83:f8:34:3f:42:29:1d:de:e3:9a:50:5d:8c:
         f8:07:83:52:f8:2f:23:c4:11:07:4f:5b:11:fa:50:42:53:5b:
         94:44:74:02:15:2d:bf:ff:e9:8e:80:57:87:6f:38:0c:6c:1e:
         8b:5e:cd:b7:04:c8:84:e8:09:fb:67:22:48:69:ea:09:14:12:
         a0:02:e4:8d:81:4c:dc:2d:cf:10:ce:eb:d0:b3:bc:68:dc:be:
         a4:0c:fa:bb:e0:7c:15:30:19:52:3a:f6:16:9f:4d:d3:b9:46:
         2e:df:a4:6f:51:c1:37:a5:2f:47:d3:5d:7a:90:a1:20:b3:98:
         97:e0:a6:5e:90:a9:2f:a5:c7:0a:b2:5f:a2:52:7b:58:2e:37:
         14:90:4f:2a:51:73:5b:b4:34:4f:84:06:c9:bd:ab:a5:0d:4a:
         7f:0e:7e:29:05:2c:0a:b2:9a:87:bd:df:b6:50:31:26:10:52:
         1e:c0:ca:53:45:0f:af:bb:2f:c8:44:57:73:82:4c:a9:ca:60:
         d9:ea:35:f2:91:5d:0f:7c:56:f2:7b:e3:37:89:62:f9:a7:77:
         20:da:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:30:37 2026 by rpki-client