Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/63F359F0620711EE8BBCFF68C4F9AE02.roa
File:                     63F359F0620711EE8BBCFF68C4F9AE02.roa (raw, json)
Hash identifier:          XKoeDmYjE0yysdP5l673w8or1oKAp76jZNEv1XZ67fc=
Subject key identifier:   DF:97:3C:84:29:DB:7F:3C:D0:CF:C8:DC:FF:75:50:CD:FA:3A:6D:EF
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       043E
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/63F359F0620711EE8BBCFF68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:10:25 +0000
ROA not before:           Wed 07 May 2025 01:07:29 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136600
IP address blocks:        2401:1740:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
                          rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: May  7 01:07:29 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a464f1-08d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:28:74:bd:38:b7:86:9b:67:a9:4c:da:1f:e7:
                    09:e4:38:06:a3:6f:be:1c:1a:23:4c:68:91:db:42:
                    4c:ca:08:e0:6b:ef:6e:59:1b:63:b3:0f:e1:e4:7a:
                    2e:4d:7e:16:9f:c6:36:0e:b3:d6:fc:c1:f8:22:bf:
                    6e:c9:72:3a:8d:56:1c:13:77:c8:e3:d7:01:6b:15:
                    98:96:b7:22:0a:e7:c7:a6:ff:89:c1:3b:2e:58:24:
                    dd:76:eb:f6:68:91:25:2e:81:65:77:68:0a:b0:ad:
                    ef:15:24:6e:34:76:3f:fe:16:94:72:5a:a2:e6:de:
                    32:cf:54:00:e3:da:5c:2c:db:71:97:ad:9f:4e:31:
                    f4:0d:73:e5:34:d0:ec:e0:dc:49:31:02:7a:ce:aa:
                    c9:a1:6b:74:73:1f:fa:57:4c:2a:e4:a2:fd:5c:ec:
                    64:df:92:11:73:e6:3a:07:38:6e:32:e3:3e:ee:9d:
                    91:1b:65:0d:da:04:37:0d:70:78:73:44:48:b4:5c:
                    72:dc:10:cc:de:4b:fe:f2:37:5b:90:d7:e9:bf:b9:
                    9c:bc:c6:63:08:82:a7:c8:6c:e8:cd:ff:fe:89:15:
                    bf:da:8d:38:fc:23:54:a1:03:61:01:39:f1:9a:19:
                    e0:93:6b:f0:01:33:51:97:fe:ac:82:1e:54:3f:2c:
                    e4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:97:3C:84:29:DB:7F:3C:D0:CF:C8:DC:FF:75:50:CD:FA:3A:6D:EF
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/63F359F0620711EE8BBCFF68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:6c:1b:28:bc:d9:af:a1:ae:0f:3f:a6:87:dd:ae:a2:27:
         2c:75:2f:59:f6:30:f5:fc:ab:28:75:25:5e:c9:21:9e:98:ac:
         ce:ff:bb:91:4c:a4:08:12:5c:ff:d7:77:9a:4e:16:bd:dc:21:
         61:33:9c:36:c1:a1:b6:87:af:25:4e:7b:90:cd:70:e9:df:2c:
         69:75:3f:a2:01:3c:81:23:f3:39:b4:08:09:f2:f2:85:7e:a9:
         36:20:e7:bb:48:c0:88:3c:98:20:1c:ab:a2:8d:d7:30:a4:33:
         1a:71:b3:51:14:bd:6a:66:7a:e7:46:45:43:08:3f:8d:29:7a:
         81:73:62:d8:ff:37:9a:62:17:32:c7:93:52:dc:a0:91:a4:eb:
         42:e5:0d:fc:53:ed:4a:35:60:66:82:b8:8f:7f:f5:90:f9:73:
         2a:c9:a7:a5:ee:29:87:62:6e:80:71:17:f1:d9:d4:06:43:d2:
         18:e6:1a:cd:f3:44:de:df:d6:0b:63:af:a9:ce:cb:25:73:ee:
         91:2a:6d:cf:7c:d7:51:37:95:fc:f3:c5:38:77:e2:1b:38:32:
         07:ef:77:60:89:32:f4:a0:88:a4:bb:1e:d4:b9:88:99:14:dc:
         e1:f7:84:55:9b:36:8b:40:70:07:1b:17:b1:7b:d2:34:01:40:
         e5:54:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:39 2026 by rpki-client