Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
File:                     92F8F6D042DA11ED93029A6AC4F9AE02.roa (raw, json)
Hash identifier:          UDQzazfBuaV3+4EFYL41OYHeyXuzIXRdh8rlJayt6QI=
Subject key identifier:   41:6D:3A:9F:B7:86:FB:D7:BE:F0:CE:09:91:53:F2:0A:0A:CB:CF:2C
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0DAF
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa
Signing time:             Mon 14 Sep 2026 18:35:52 +0000
ROA not before:           Mon 14 Sep 2026 18:35:52 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141731
IP address blocks:        2406:ff80::/32 maxlen: 32
                          2406:ff80:1::/48 maxlen: 48
                          2406:ff80:2::/48 maxlen: 48
                          2406:ff80:3::/48 maxlen: 48
                          2406:ff80:4::/48 maxlen: 48
                          2406:ff80:5::/48 maxlen: 48
                          2406:ff80:6::/48 maxlen: 48
                          2406:ff80:7::/48 maxlen: 48
                          2406:ff80:8::/48 maxlen: 48
                          2406:ff80:9::/48 maxlen: 48
                          2406:ff80:a::/48 maxlen: 48
                          2406:ff80:b::/48 maxlen: 48
                          2406:ff80:c::/48 maxlen: 48
                          2406:ff80:d::/48 maxlen: 48
                          2406:ff80:e::/48 maxlen: 48
                          2406:ff80:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3503 (0xdaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Sep 14 18:35:52 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa83e88-f7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:c1:45:82:c3:b5:25:b0:07:00:d2:41:fd:
                    fd:21:73:db:6f:d4:e1:81:a1:b9:16:2b:dc:cb:a4:
                    37:4f:99:c3:e0:37:9c:12:1a:3e:b0:27:50:cd:2b:
                    cd:8e:a6:d4:9e:15:c2:0a:b7:f4:b0:0c:d3:cb:08:
                    24:3f:84:8d:83:23:1e:9e:2a:5a:24:67:d9:80:b0:
                    3e:f6:0f:84:f9:ec:68:d3:c7:91:23:6f:e0:ea:5a:
                    23:dd:a4:b6:88:4d:98:db:01:ec:f3:bd:e4:8f:99:
                    97:02:10:53:13:80:e4:14:c8:eb:51:e3:8b:03:86:
                    e7:57:cd:fa:db:3a:7d:25:0e:43:bd:0b:c8:de:86:
                    6c:10:b7:09:08:e9:40:32:06:ad:38:d9:76:a3:de:
                    20:a4:56:3d:78:3e:db:2e:57:1d:d5:f0:72:2d:72:
                    d2:12:e5:f6:0a:13:b9:1b:85:68:b9:e9:6f:00:a6:
                    ee:b1:20:8f:44:a5:ce:c6:c7:17:c9:cd:20:e9:c4:
                    69:90:75:58:38:bc:aa:50:02:ef:ac:93:2c:12:3e:
                    ed:f9:11:dd:d6:df:36:aa:d5:41:93:d5:22:f8:e8:
                    59:0f:18:36:2e:3a:0e:8a:4f:64:8d:22:df:ad:bb:
                    d9:a0:a2:b7:66:e8:0e:8b:a0:6f:3b:87:25:27:90:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6D:3A:9F:B7:86:FB:D7:BE:F0:CE:09:91:53:F2:0A:0A:CB:CF:2C
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/92F8F6D042DA11ED93029A6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:ff80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:33:14:40:f8:14:21:d0:bb:77:b4:83:12:bf:2b:03:8a:
         48:ab:66:75:c3:12:0c:53:7a:68:c9:4d:50:4b:3b:61:31:78:
         37:c7:11:6a:3a:c8:7b:8c:95:15:ca:15:f7:87:06:aa:52:0c:
         cd:ae:c9:77:45:28:b0:c7:68:ff:2b:29:09:cb:46:37:dd:5d:
         90:d1:5c:27:df:c6:8f:2e:d8:5e:20:96:aa:57:6f:ab:b5:0b:
         ec:39:4e:59:7e:dc:e4:83:07:37:fd:d6:23:d5:cb:43:49:24:
         24:c9:49:29:e2:ff:89:89:5d:26:c3:ae:09:63:ba:47:a9:74:
         2b:68:77:d6:da:65:a4:9a:f7:b0:f0:26:5c:63:7b:83:fd:6a:
         06:60:78:b4:0c:ee:f2:91:0c:29:9b:b2:4d:89:78:00:dc:c5:
         1d:9d:86:47:b7:f8:43:8c:9d:b9:c2:57:e7:9f:5a:9f:53:ac:
         92:cb:85:eb:cd:2e:e8:09:35:96:f1:ad:ad:51:58:b2:5a:77:
         db:da:10:17:cf:94:89:89:56:31:42:98:71:d2:77:9c:79:66:
         72:bf:10:31:3a:57:9f:88:5a:92:99:5a:6a:4e:f6:e1:5c:c9:
         9b:56:9e:01:eb:d0:2b:cf:97:97:ca:23:c9:e9:b2:f0:c6:af:
         7f:ea:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:23:28 2026 by rpki-client