Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa
File:                     AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (raw, json)
Hash identifier:          kHDQejmqjPobOzP4RpQqwvEFOqclUXhG9PAka+bN9iQ=
Subject key identifier:   6F:74:7F:9B:4F:CD:6A:57:E3:19:51:52:2F:A2:46:3A:EC:BD:3E:38
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       0441
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:10:28 +0000
ROA not before:           Wed 07 May 2025 01:07:32 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7586
IP address blocks:        2401:1740:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
                          rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: May  7 01:07:32 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a464f4-9cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:bd:3c:62:37:9d:9d:a9:28:2a:a7:5d:43:
                    1b:d1:01:24:70:2c:1b:98:51:05:ed:5c:7e:99:cd:
                    e7:dd:a0:a0:10:08:93:06:5c:33:1f:f5:7b:72:dc:
                    57:6e:92:32:5a:fb:8e:98:bb:63:b8:a3:07:1a:44:
                    2c:28:d9:81:1f:b0:09:04:39:04:7b:67:01:cd:1e:
                    a3:ab:34:34:69:86:be:c8:b7:80:72:cc:66:3e:d7:
                    94:45:a3:7e:9a:29:d8:07:1a:32:5b:67:d4:56:75:
                    58:5c:95:2f:09:1d:b6:e6:a0:c6:6a:a3:66:b6:5f:
                    1b:19:7e:24:e2:ad:a0:8e:74:a9:f5:ff:e9:98:7d:
                    27:58:ae:56:8e:b9:55:31:98:2e:13:dc:fa:98:b9:
                    fb:c5:df:3c:91:7b:dc:59:e2:c2:48:8b:22:6b:68:
                    ae:b4:6d:70:f5:4b:cf:a9:3a:dd:4e:8e:67:e3:21:
                    ad:83:fe:43:28:20:06:e2:12:07:42:83:87:05:d7:
                    76:14:a2:e3:09:33:d7:6a:9f:4f:87:1e:20:03:cb:
                    80:cb:6d:94:6d:38:78:58:5f:1c:cb:8b:dd:c9:5c:
                    98:1e:9f:b0:34:31:28:f5:d5:5c:6e:3c:84:fa:86:
                    3c:07:30:37:82:aa:84:04:ab:b9:e1:2d:6d:1e:58:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:74:7F:9B:4F:CD:6A:57:E3:19:51:52:2F:A2:46:3A:EC:BD:3E:38
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:1d:4d:7e:03:3f:90:a6:1d:d1:2e:f5:95:82:32:21:32:ea:
         06:a7:79:96:77:62:ff:6b:ce:b2:2c:b1:ab:15:4f:dd:a6:d5:
         3e:ee:0c:b8:ac:a9:56:fc:83:a6:22:ed:89:34:cd:a8:ef:9a:
         ea:bb:f2:27:80:93:a5:28:df:28:8b:1d:69:df:8c:57:b7:59:
         c7:5c:65:2f:08:23:16:df:7a:59:9c:3e:23:55:95:df:a9:68:
         bb:fd:0b:51:37:77:96:d5:71:6c:52:46:99:b6:f0:2d:d4:2e:
         f1:44:76:af:7d:ca:ee:04:8d:3e:1d:12:81:17:fc:3a:d6:97:
         96:8c:93:fc:02:8a:4b:88:fa:4c:2c:1b:4f:44:f6:36:00:4e:
         8c:1e:19:62:2c:d9:41:06:8c:a9:93:4d:84:d4:56:bb:7d:4e:
         19:34:87:24:1c:68:af:90:d8:c3:e0:6b:b4:20:ca:45:97:73:
         e1:f5:36:df:01:55:3b:3c:b0:66:ba:ec:3d:ce:3b:dd:84:09:
         ac:73:78:70:46:8f:76:57:4b:6d:2b:cc:cd:6f:e8:2f:ba:4d:
         05:2b:b7:ab:98:90:10:65:ee:ec:96:20:a5:e9:a0:d2:3a:05:
         08:7d:d8:1a:5e:99:39:1b:f3:d8:4a:32:29:fc:e3:64:e7:76:
         87:1a:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:12:23 2026 by rpki-client