Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/06FAE294924F11EF80B1115DC4F9AE02.roa
File:                     06FAE294924F11EF80B1115DC4F9AE02.roa (raw, json)
Hash identifier:          zwt4jimE5dzItIYvflW2AfnzB22khQhDre8vwGomnT0=
Subject key identifier:   2C:CF:FA:50:F5:78:B4:45:C9:8D:9F:71:61:62:2E:93:CF:68:66:57
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       07DD
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/06FAE294924F11EF80B1115DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:42:54 +0000
ROA not before:           Tue 02 Sep 2025 23:44:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     967
IP address blocks:        2401:2660:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Sep  2 23:44:29 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a488ae-dbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:49:f9:5e:52:d5:ef:8a:32:78:b5:24:77:
                    fb:51:34:9e:e8:78:6f:97:da:85:0c:ee:a2:6c:1d:
                    1a:6b:34:34:5c:77:bf:c0:fa:f5:e0:f3:ee:8f:67:
                    04:2e:de:73:18:75:6b:2b:2b:8d:a9:5a:96:66:13:
                    71:f9:fe:4d:56:c0:59:44:5d:10:58:c6:5c:fd:75:
                    ac:e4:46:25:42:7e:39:3f:52:b3:6f:f7:17:94:68:
                    35:ba:30:05:21:92:e6:0c:68:a0:70:4f:59:ee:c1:
                    a9:fc:d9:28:6a:ad:47:62:9d:54:c9:5b:7b:3b:46:
                    9c:27:6a:80:11:3f:90:1d:44:a0:47:1b:73:15:a3:
                    17:46:28:f9:ed:60:87:cd:67:d1:67:c1:bb:f4:5c:
                    98:54:e8:49:31:46:ea:12:22:85:45:77:3d:b6:ff:
                    da:09:42:48:df:0c:76:ae:6d:d2:13:92:e5:4c:33:
                    81:d6:52:73:23:6a:4a:07:b6:64:1f:dd:30:bd:67:
                    57:e5:52:a3:40:75:5f:0f:c6:82:66:db:7f:4b:e0:
                    0c:07:7d:c0:12:0d:49:9a:ad:d3:3d:bc:44:d5:3c:
                    93:02:24:a7:c4:48:c5:d3:b8:1e:7c:db:d0:c2:79:
                    93:03:92:2e:bc:be:e0:15:94:81:9b:44:3d:1d:5d:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CF:FA:50:F5:78:B4:45:C9:8D:9F:71:61:62:2E:93:CF:68:66:57
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/06FAE294924F11EF80B1115DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2660:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:b1:c1:fa:59:76:f7:35:f6:d7:cd:bd:44:6f:e2:9e:e1:
         4f:0d:62:0a:8e:b7:33:8e:eb:98:c9:01:c7:5e:ed:2d:fc:58:
         5b:4f:6a:46:a7:92:9c:aa:a1:39:97:58:97:0d:ed:f6:9d:e5:
         4d:47:93:c4:2c:7a:1a:70:00:bd:42:7f:ac:3e:ed:5a:58:8a:
         12:9e:d8:c1:fc:77:6a:c1:39:f5:50:c1:7f:eb:85:6a:f6:8d:
         d3:2f:80:4f:4d:dd:11:ba:08:76:3c:84:e5:d1:e0:2b:b9:9d:
         4b:92:e4:c0:38:9c:2f:8d:a9:58:05:d2:0f:d2:43:d1:a1:32:
         3c:85:ba:5b:6d:ad:76:5b:ee:7b:2a:a9:39:0b:94:59:53:72:
         eb:7b:80:74:dd:d8:ed:cd:f2:27:9d:94:11:07:19:7d:19:f8:
         fe:b8:6b:bc:e5:a9:50:28:35:dd:95:9d:5b:a1:aa:53:23:a1:
         53:31:a8:e6:87:12:78:b2:d5:d2:3f:99:8b:be:d6:d8:28:66:
         ce:50:95:d9:d4:23:f1:5d:fe:c5:55:7f:97:f1:75:b2:39:11:
         2b:6b:a2:a7:9f:cb:73:d9:25:8a:3e:d2:79:c8:8a:33:5b:6e:
         90:b8:7e:e6:85:66:be:f2:4f:39:94:02:9f:2c:6a:1e:57:8b:
         80:60:9f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:46 2026 by rpki-client