Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa
File:                     6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (raw, json)
Hash identifier:          dGkv/rtzo56BVtckHVatWs5obEe9EAieuRY8f0MtX/U=
Subject key identifier:   A6:2F:14:8B:D2:53:DC:E4:16:C3:64:78:7D:7E:42:05:DA:14:D1:F0
Certificate issuer:       /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial:       11AC
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:08:56 +0000
ROA not before:           Thu 26 Feb 2026 17:15:12 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138560
IP address blocks:        2404:43c0::/32 maxlen: 32
                          2404:43c0::/48 maxlen: 48
                          2404:43c0:1::/48 maxlen: 48
                          2404:43c0:2::/48 maxlen: 48
                          2404:43c0:3::/48 maxlen: 48
                          2404:43c0:4::/48 maxlen: 48
                          2404:43c0:5::/48 maxlen: 48
                          2404:43c0:6::/48 maxlen: 48
                          2404:43c0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
                          rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4524 (0x11ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
        Validity
            Not Before: Feb 26 17:15:12 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a472a8-e0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:32:de:d2:10:10:ab:d4:29:72:a5:24:18:
                    92:1d:36:18:6f:d8:34:7e:5c:a1:f6:ec:5c:68:21:
                    4c:71:26:3c:a5:3d:09:90:e5:e8:b0:b7:4b:0a:06:
                    06:21:13:59:8d:08:a9:9e:77:41:b9:66:a8:1e:9e:
                    12:61:61:6e:49:ca:1e:b6:3f:d6:7a:28:e2:be:eb:
                    36:b8:7f:78:3f:ac:1b:1d:70:fa:94:83:cd:63:f8:
                    a5:47:f5:b4:b2:33:4d:b3:09:f3:9c:9b:c8:a4:69:
                    8c:64:f0:57:8c:ea:96:ab:f9:9c:a7:ed:8a:55:db:
                    1c:6d:88:1f:35:18:a3:20:c1:82:ed:6a:1a:58:8b:
                    3f:b7:19:63:cf:32:8f:e6:8d:87:14:29:7c:b3:0e:
                    d6:07:76:fa:e0:f2:f4:54:2f:03:f9:3f:c5:c8:c4:
                    c4:ad:a7:40:f0:40:0d:5e:3d:96:b0:40:51:39:a8:
                    a9:ef:36:f5:ed:14:91:ce:3c:b3:65:32:89:1f:7b:
                    5d:6c:ca:e3:c2:db:cf:ed:cb:d1:7b:bc:0b:67:da:
                    2d:4f:5f:24:c1:2d:94:b7:af:7f:d6:5b:51:e4:6c:
                    fc:ee:07:07:39:7b:69:72:9a:30:10:46:65:bc:07:
                    d1:98:af:15:fd:6d:a3:5c:47:55:8a:57:28:a8:12:
                    6b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2F:14:8B:D2:53:DC:E4:16:C3:64:78:7D:7E:42:05:DA:14:D1:F0
            X509v3 Authority Key Identifier:
                keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:43c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:78:d0:23:aa:9e:d1:9c:ea:18:e7:5d:fa:14:e0:39:da:6b:
         b6:da:73:48:8c:a2:da:c2:9d:70:54:4a:f8:c8:10:05:87:8b:
         28:5b:f4:9b:7b:1b:7e:8b:ec:84:65:e4:b2:3b:ee:3d:a6:05:
         cc:1e:18:24:47:f5:50:17:36:bb:b3:70:b4:41:bd:17:a0:5b:
         6d:e4:71:20:8c:78:71:85:1d:af:e2:76:ac:0c:8f:1f:c6:20:
         d3:f6:50:d7:e8:67:89:da:c4:1a:9b:a4:4c:7b:a2:26:26:96:
         94:20:15:fd:a9:f7:e1:e1:60:a3:06:65:30:f7:75:c5:91:2b:
         b9:dd:7d:70:82:66:0a:55:51:f2:c8:4a:b1:d1:5d:af:bf:60:
         c7:ce:d8:5f:5b:2a:16:7b:fa:11:48:34:c8:27:84:b0:34:97:
         12:c4:03:9f:bb:e3:2d:6a:8b:9f:e0:4d:de:bc:92:f5:15:cd:
         a2:18:78:f7:f2:ee:b9:ff:2a:0e:ce:28:ca:f6:b8:6b:e1:18:
         82:72:23:d3:4e:fd:1a:e4:e2:54:68:b8:9b:77:83:aa:8a:42:
         2c:c1:9b:e1:94:a0:dc:b4:a1:40:1e:18:36:09:3b:f4:3e:8e:
         50:91:6d:0d:9a:b1:dc:31:cf:ed:6a:aa:c8:4d:dd:38:91:28:
         b0:b8:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:42 2026 by rpki-client