Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
File:                     671FC40EE29211EE94348874C4F9AE02.roa (raw, json)
Hash identifier:          VorX/TcJnMctyKf1znFoq4UgSn2F6EKq1vU97sOrAnI=
Subject key identifier:   EA:16:3F:15:40:05:43:1E:52:FE:19:13:17:01:09:31:D2:D5:2B:2D
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       0781
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:16:16 +0000
ROA not before:           Tue 22 Jul 2025 23:04:59 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     17762
IP address blocks:        2403:8600:c0::/44 maxlen: 44
                          2403:8600:d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Jul 22 23:04:59 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48270-f372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:43:73:c9:a6:ee:6d:90:16:13:c2:cc:ce:
                    32:01:5f:6b:c2:94:5a:17:52:8e:06:f5:3e:b7:1f:
                    86:21:36:b0:31:f2:96:5b:ec:a4:b3:54:03:b3:5b:
                    28:1b:2d:54:d7:d6:eb:24:a1:e5:64:5e:1b:09:be:
                    00:31:03:49:83:8d:9b:36:6a:f5:94:bb:cb:e2:02:
                    63:fc:54:40:d3:59:93:6c:86:49:12:c9:00:00:53:
                    f5:9a:72:40:3c:8a:7d:4c:5e:ed:fd:e2:25:bd:da:
                    75:2b:48:20:79:12:90:6b:eb:58:85:e2:f1:04:03:
                    2b:a1:61:7d:f9:75:fd:d3:98:40:a6:bb:62:ee:72:
                    ed:5d:98:30:15:da:1b:32:fb:1e:4c:14:81:65:c3:
                    d8:59:51:2c:4e:28:47:c6:9b:35:1e:35:c9:47:a8:
                    dd:a4:3c:40:51:7c:f7:09:17:7c:6c:c6:8e:fc:6d:
                    f2:61:9e:f1:74:9e:3b:4c:2d:99:ab:50:a1:05:59:
                    d7:06:d7:93:4a:00:61:4e:a9:3f:49:75:11:34:e0:
                    cc:a2:f5:1d:29:11:16:70:94:d8:d2:53:13:60:c2:
                    ac:17:6d:d0:47:fb:b4:e6:64:ae:87:02:44:e7:10:
                    2f:aa:25:4f:0c:50:b1:33:34:72:45:ec:7b:65:fb:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:16:3F:15:40:05:43:1E:52:FE:19:13:17:01:09:31:D2:D5:2B:2D
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8600:c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         89:91:6d:6d:ea:29:8d:8d:71:b9:f1:7a:2b:95:15:b4:c4:9a:
         a1:ec:24:a4:ca:6f:2d:aa:f9:69:4f:bd:7e:b8:7a:00:cc:d5:
         80:06:eb:80:81:9d:0e:b4:3f:36:1f:6e:34:34:fe:49:cc:cd:
         d3:b3:45:d2:1a:24:d5:11:8e:31:a8:78:16:d4:aa:c7:58:6f:
         be:e6:78:df:0e:84:16:d7:89:38:92:c1:d4:89:9e:d7:7f:7a:
         c3:e8:83:0a:d1:7e:e1:2b:db:9b:8b:fd:e8:19:a4:36:e3:7f:
         bf:06:d6:68:c0:92:3f:ff:72:fa:ec:1e:c4:65:e5:da:8e:f8:
         ce:d8:19:48:28:f9:bd:4d:65:f9:5c:7b:75:70:c1:b3:49:b1:
         fc:f2:5d:6a:92:62:92:cd:98:2b:2f:c8:64:5b:7a:42:25:b1:
         7d:cb:a0:28:84:ae:90:3f:26:ed:43:38:9b:78:0b:ad:45:9f:
         c1:ae:6d:1d:84:9b:c8:72:5d:f6:38:97:a7:c9:35:bf:3b:71:
         4e:f1:d1:f1:65:c8:56:09:3c:bb:d1:2a:78:53:96:2d:64:61:
         b4:79:6d:65:74:65:97:57:62:61:17:8a:04:43:9f:b5:fe:0d:
         f3:f2:f0:bc:52:ec:8b:ed:a7:38:49:ee:fb:0f:d0:4a:e6:42:
         68:43:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:37 2026 by rpki-client