Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa
File:                     0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (raw, json)
Hash identifier:          WLTPc3nTZLsY0TJ0P2ml2s4l522A2jynEA00QV6JYYc=
Subject key identifier:   68:0C:A9:B5:F1:78:79:02:43:67:3B:33:E6:6F:0F:8A:8E:CF:12:AA
Certificate issuer:       /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial:       013D
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa
Signing time:             Mon 07 Sep 2026 05:56:16 +0000
ROA not before:           Mon 07 Sep 2026 05:56:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     206804
IP address blocks:        2401:eaa0:1::/48 maxlen: 48
                          2401:eaa0:2::/48 maxlen: 48
                          2401:eaa0:3::/48 maxlen: 48
                          2401:eaa0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
                          rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
        Validity
            Not Before: Sep  7 05:56:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9e51ff-d596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9d:56:c1:d1:ec:a6:2c:88:33:61:64:97:ff:
                    03:41:aa:b1:db:ab:31:5f:7c:4f:c0:15:d1:9d:dc:
                    1e:6f:11:bc:68:90:47:42:4b:fb:2b:69:99:85:91:
                    e5:35:1f:77:bb:16:42:44:2e:e5:88:b1:3b:59:e3:
                    72:f8:cf:40:2f:3d:86:32:12:31:5a:20:47:77:cb:
                    0f:35:2b:97:18:9c:93:56:3b:fa:ae:12:b6:2d:a0:
                    f1:14:06:6e:3a:a3:24:8b:97:86:74:8e:d7:7b:03:
                    a6:a7:72:eb:2d:1f:b5:33:e1:03:8b:87:42:e8:45:
                    72:69:fa:db:82:f8:ac:69:7c:40:d2:f4:13:69:bf:
                    bc:33:47:5f:11:52:10:72:4c:4f:42:d8:64:47:bd:
                    86:e9:95:65:36:23:97:01:76:ac:9d:5e:00:da:fc:
                    96:37:ac:69:ed:bc:b7:a4:80:9a:4b:25:04:8c:ec:
                    ae:af:f3:bc:93:a2:f9:13:4e:96:a8:34:5a:47:87:
                    08:84:27:9f:e1:52:76:ef:47:90:b0:43:36:e4:e2:
                    31:3b:e1:14:71:8b:06:cd:5c:51:1c:7f:f5:83:90:
                    85:e7:ff:f7:2a:cb:7d:67:fb:47:d6:62:24:31:ef:
                    c8:9a:a1:e4:72:e3:d1:4e:5c:d6:04:4a:53:08:d3:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0C:A9:B5:F1:78:79:02:43:67:3B:33:E6:6F:0F:8A:8E:CF:12:AA
            X509v3 Authority Key Identifier:
                keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:eaa0:1::-2401:eaa0:4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:91:52:2b:67:43:3b:83:84:96:c2:01:68:23:45:af:3e:
         82:63:ff:2d:55:e9:89:30:05:d1:c2:37:32:b0:79:e4:b5:14:
         79:c7:71:1f:a0:ec:1b:66:5c:85:0b:9d:d2:6d:ad:c6:c5:4c:
         d8:76:59:07:54:a5:95:8b:0f:51:79:bd:71:f0:e2:08:b9:6d:
         34:b7:3c:3f:6f:b9:0a:6b:a1:0c:6b:9b:e1:30:2e:7c:b1:2a:
         3b:94:3e:22:f7:e5:14:16:f0:bd:64:93:de:0d:11:b2:2b:cd:
         ff:ef:46:76:d1:ae:46:18:4c:da:de:f8:8f:cf:62:65:ab:0f:
         95:be:7b:d1:9f:50:f5:61:f7:bf:a7:e0:7e:9a:b8:fc:18:21:
         05:02:bd:a5:77:3f:8f:1d:79:9f:fd:2c:f0:21:f6:67:3c:69:
         bd:ee:99:cf:ad:36:18:57:19:28:19:0a:29:7b:0a:27:a0:f1:
         da:4e:3a:03:54:b0:00:e1:8a:84:0f:db:e9:fd:15:1a:3f:97:
         fe:79:d7:54:70:6d:f8:45:9a:e3:03:df:f3:2a:5b:92:2f:0c:
         5b:56:b3:3d:b9:b1:64:37:3c:03:05:c8:8e:37:8a:c7:1d:44:
         73:c5:4d:2a:95:fa:4f:c0:fe:45:f9:63:e8:66:16:77:67:9a:
         f8:9a:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:22:24 2026 by rpki-client