Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/12BE5F962DA511F1AB5ACB70A2833773.roa
File:                     12BE5F962DA511F1AB5ACB70A2833773.roa (raw, json)
Hash identifier:          R5zAoICV1Khp7ZSKr9zmuPdSSnluyaeLcZGrxGttx1M=
Subject key identifier:   E7:0F:33:12:51:F3:90:40:99:00:B6:69:AE:5F:13:02:EA:B5:3F:35
Certificate issuer:       /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial:       0C64
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/12BE5F962DA511F1AB5ACB70A2833773.roa
Signing time:             Tue 28 Jul 2026 19:41:21 +0000
ROA not before:           Tue 28 Jul 2026 19:41:21 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     57402
IP address blocks:        2400:8800:1ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3172 (0xc64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
        Validity
            Not Before: Jul 28 19:41:21 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6905e1-fd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:93:d6:57:56:70:b1:ca:94:45:63:f3:2d:
                    a7:24:3b:5c:1a:c9:a8:f6:3c:e5:3c:37:99:ad:34:
                    27:5d:de:71:6b:d6:7c:1c:1e:49:41:84:a7:0f:43:
                    db:28:2c:9c:97:91:04:65:07:be:3c:3f:00:f1:17:
                    df:6b:a7:80:38:3f:d2:7b:31:d6:31:b4:64:17:fd:
                    7c:99:ae:20:0f:66:b4:6b:63:87:15:79:e0:96:14:
                    03:fa:af:01:5d:bd:99:ab:66:92:b7:fd:11:f8:34:
                    d6:69:47:71:75:59:03:4e:4b:c3:3c:f3:80:1a:e6:
                    05:13:64:8c:37:fb:b1:6f:44:ca:0c:a0:15:e9:8e:
                    95:a3:fe:30:94:0e:8b:72:8b:ac:fc:7f:04:bc:b6:
                    5d:aa:a3:86:ce:80:f2:88:8f:80:d0:f6:ee:ea:24:
                    79:de:3c:35:38:ae:81:b9:9e:cd:b9:1b:36:ad:43:
                    79:c8:f4:b5:d9:83:19:7e:c1:10:31:8a:fd:98:1b:
                    72:e3:11:49:0d:b1:48:d2:be:30:3a:93:9c:74:9f:
                    8c:88:33:40:6f:4c:72:9f:37:3d:5e:91:e3:7b:8b:
                    ce:58:38:c2:8c:c3:12:47:90:8c:c1:e4:da:2c:45:
                    69:53:b0:90:ef:8c:bb:07:ff:ee:a1:3a:36:da:4d:
                    43:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0F:33:12:51:F3:90:40:99:00:B6:69:AE:5F:13:02:EA:B5:3F:35
            X509v3 Authority Key Identifier:
                keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/12BE5F962DA511F1AB5ACB70A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8800:1ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:cd:a0:d7:2b:50:da:34:03:1d:ad:3b:2b:8b:6e:9f:cc:
         12:82:e7:41:e8:92:90:40:39:d6:97:0d:cf:4f:f0:eb:a7:de:
         3a:94:5b:5a:bb:54:30:e3:64:a0:50:ed:ac:c9:9b:35:b4:97:
         a7:c8:20:0b:ab:13:ee:9e:da:b3:77:e1:fb:aa:fe:f5:27:4a:
         1a:2a:e8:84:b9:1e:29:d3:5a:76:95:97:91:7a:a4:e2:9b:c3:
         2d:43:98:d5:d7:06:36:84:16:c7:0f:91:33:58:d9:1b:d3:01:
         e1:84:3a:45:36:e9:4b:02:1c:9d:58:ab:57:b8:c2:32:72:de:
         e1:f1:97:8f:81:c6:5b:dd:37:5c:fb:24:24:f3:d0:5d:37:6a:
         17:ff:54:15:29:48:f3:9c:29:9b:da:b1:b5:e9:a3:ea:0b:8f:
         81:98:be:7d:e8:a7:23:96:31:75:3a:f3:90:ab:63:a0:0d:a6:
         8b:04:10:17:89:cd:d9:3a:60:b8:92:3f:16:87:ce:0b:93:fb:
         bb:ba:47:c6:cd:52:57:8b:77:7f:bc:e1:1e:e4:a1:4a:bc:81:
         9c:6f:27:dc:6b:ee:a7:d4:d8:33:51:a5:b7:94:b3:e2:33:96:
         2e:35:f3:2c:fe:e3:61:47:3d:52:31:27:20:04:fb:9b:03:7c:
         fb:9d:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:24 2026 by rpki-client