Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa
File:                     F6A8B3960A1511F0BB6C770DC4F9AE02.roa (raw, json)
Hash identifier:          emwrRh6MHxR/MKG/kZ4kbsedosRabW/yCqw67x249ko=
Subject key identifier:   4B:0C:A2:6E:6D:38:27:50:50:4B:6D:A3:01:39:FD:73:E6:33:7B:44
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       E5
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:14:18 +0000
ROA not before:           Fri 13 Feb 2026 06:25:43 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     150706
IP address blocks:        2404:de80::/32 maxlen: 32
                          2404:de80::/39 maxlen: 39
                          2404:de80:0:1::/64 maxlen: 64
                          2404:de80:200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Feb 13 06:25:43 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a481fa-e053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:66:5d:f4:25:c6:df:f3:58:a8:0f:83:c6:
                    d8:ac:44:58:88:f1:28:e0:a9:f4:95:48:ad:b3:6f:
                    38:05:b8:df:ce:d7:e1:69:ea:7a:07:4b:a7:0a:78:
                    f4:78:54:20:54:1a:6a:20:f1:53:34:56:fc:03:8f:
                    04:a0:0d:c4:2b:26:36:a7:7d:f3:8e:3c:0c:27:3e:
                    03:ea:0f:a9:53:75:82:df:02:2f:30:81:c9:06:98:
                    37:8f:74:7f:96:49:ab:bd:db:a8:98:1a:6c:a4:05:
                    70:f2:ab:96:5e:cf:ff:a4:b0:66:9c:d1:22:a0:6f:
                    83:39:92:27:d4:90:7d:4a:75:b3:4d:be:eb:9a:2b:
                    c2:a2:f9:0f:20:84:5d:aa:42:8d:e1:ae:6c:d5:9e:
                    42:97:6b:b8:6f:f7:82:6a:cd:e3:44:77:59:01:ff:
                    ad:a1:31:52:7c:b9:44:61:d1:b6:47:63:63:b8:84:
                    df:8a:2d:8e:80:e8:7f:1b:69:c2:b7:52:f6:19:b1:
                    28:0a:46:5c:df:99:21:d5:0c:a3:e8:ed:58:3b:a8:
                    0a:4f:96:99:4c:4c:78:26:1d:6c:ce:e1:7f:06:32:
                    9d:5c:d7:d8:d6:db:9d:a7:68:3e:82:5a:95:f0:c5:
                    71:5a:95:03:d3:45:1a:ea:0d:73:e5:76:28:fe:e0:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0C:A2:6E:6D:38:27:50:50:4B:6D:A3:01:39:FD:73:E6:33:7B:44
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/F6A8B3960A1511F0BB6C770DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:de80::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:16:f6:d5:e9:88:61:88:e8:bb:c1:9d:8b:a1:f4:98:36:55:
         30:9c:e2:f5:15:6f:c6:db:73:01:1f:a7:38:06:96:ba:c9:60:
         cc:ce:7d:03:13:0f:13:0f:83:23:c5:f7:ac:00:51:98:96:59:
         56:0a:c7:86:5a:ee:08:4f:63:1f:2a:12:60:ce:5c:8d:16:c2:
         8e:0c:c0:8b:29:a5:27:55:b2:f7:83:6b:76:93:81:fa:64:eb:
         0a:fb:8f:55:35:13:a3:d7:dd:2b:d3:aa:82:5e:92:17:47:48:
         11:50:fc:4c:00:60:cd:ef:85:9c:e9:ef:04:cb:61:7f:72:18:
         3f:bc:c7:a5:4b:d7:af:ba:ac:04:da:29:8d:be:76:2b:1d:ad:
         43:09:85:b8:75:1b:dc:3d:86:3e:35:6d:1e:a0:41:6f:a5:cc:
         76:bd:b4:77:82:9d:b4:9a:3b:12:24:84:71:8a:55:ef:5e:94:
         5e:f5:05:c8:f2:b3:fd:33:8e:7a:a6:6a:5e:54:eb:7d:3b:0f:
         fe:04:ee:55:c3:a5:be:fb:94:a0:81:3d:ac:38:3a:c8:8a:43:
         61:34:fb:6f:e1:be:6e:c3:6d:a7:1c:f2:fa:a2:91:c9:b4:65:
         cc:c3:46:a6:4c:cc:b6:b8:db:26:21:8b:90:a0:99:b2:0e:50:
         a2:f5:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:49 2026 by rpki-client