Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/84D63AB4D83511F180D8C7953066CEF9.roa
File:                     84D63AB4D83511F180D8C7953066CEF9.roa (raw, json)
Hash identifier:          qF8syILGQo53wDItJ55CVXM6mm83pdfeDcLX9VEF0q4=
Subject key identifier:   93:30:BC:6E:42:C6:00:72:B4:21:67:57:D7:74:FD:25:8F:8A:EF:FE
Certificate issuer:       /CN=A9154F63/serialNumber=FAB637366A3BFF277268E4BF34530CABCE91BCE6
Certificate serial:       04
Authority key identifier: FA:B6:37:36:6A:3B:FF:27:72:68:E4:BF:34:53:0C:AB:CE:91:BC:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/84D63AB4D83511F180D8C7953066CEF9.roa
Signing time:             Wed 04 Nov 2026 09:53:00 +0000
ROA not before:           Wed 04 Nov 2026 09:53:00 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     136896
IP address blocks:        2402:7a60::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.crl
                          rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 09:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154F63, serialNumber=FAB637366A3BFF277268E4BF34530CABCE91BCE6
        Validity
            Not Before: Nov  4 09:53:00 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aeb007c-61f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:30:9c:d0:f4:1a:55:df:c4:23:6c:9f:ae:
                    73:c8:87:e0:06:11:50:c9:4e:db:99:e4:c5:ee:13:
                    55:39:96:1e:62:64:d6:e5:64:6f:56:a1:ca:40:89:
                    33:8a:cd:ac:63:9e:61:38:8b:fc:e0:8a:93:cd:92:
                    85:03:27:79:33:0c:16:5c:e7:04:1e:79:0b:c8:3a:
                    c2:3b:e3:ce:12:c2:63:ef:7c:98:78:8e:19:76:a8:
                    22:32:30:be:c1:7b:2a:f5:57:34:66:c9:81:02:27:
                    c5:3f:97:9c:b0:9b:bc:ef:05:72:f6:bb:f5:19:61:
                    24:b5:61:c0:27:6d:c5:44:58:ec:96:75:20:12:d3:
                    8e:a4:6d:bd:85:bf:06:10:f6:a3:fe:2d:f8:d8:fc:
                    db:04:67:5f:72:90:e1:37:57:46:5a:13:15:c4:83:
                    a1:84:dc:4a:29:38:34:22:12:b7:00:f1:53:84:98:
                    7c:0a:6c:13:99:a3:52:d1:88:24:19:ae:c3:30:71:
                    66:34:93:72:ac:3b:02:83:7b:c8:22:c6:dd:24:2a:
                    c2:51:30:72:17:ec:2e:9a:69:e2:f2:3d:05:cd:f6:
                    28:9e:27:71:98:d8:be:78:92:05:16:2b:68:3d:ae:
                    f4:bf:78:68:db:63:5b:8b:b0:3a:67:5d:04:7d:88:
                    2f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:30:BC:6E:42:C6:00:72:B4:21:67:57:D7:74:FD:25:8F:8A:EF:FE
            X509v3 Authority Key Identifier:
                keyid:FA:B6:37:36:6A:3B:FF:27:72:68:E4:BF:34:53:0C:AB:CE:91:BC:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/-rY3Nmo7_ydyaOS_NFMMq86RvOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-rY3Nmo7_ydyaOS_NFMMq86RvOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154F63/A78B29E6D83211F1BCD0001C2F66CEF9/84D63AB4D83511F180D8C7953066CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:d6:2e:84:51:25:5c:a6:84:40:2c:46:5d:65:9a:7e:4f:f6:
         36:f4:42:e4:f0:d2:a6:b2:9f:98:b4:1f:54:c4:74:de:2b:d8:
         3b:7d:de:4c:11:07:5b:f2:cc:67:49:2a:0b:bf:0a:00:07:88:
         70:7e:8d:56:b8:65:51:b2:c4:d5:ad:9d:d6:83:88:da:68:72:
         2c:bd:fd:1a:54:c2:54:8a:38:17:22:06:ec:9c:d1:ed:ca:a6:
         77:b0:41:ed:7f:75:ab:3f:52:e9:0e:54:22:3a:ce:ea:09:71:
         ac:72:95:f1:9a:1b:28:54:fe:30:cc:ff:dd:67:74:99:f4:07:
         88:99:d2:33:34:8e:c5:69:73:ec:bf:5c:b3:a2:a6:36:69:5a:
         b0:92:93:01:e0:ce:db:41:50:41:b2:19:4a:14:98:ac:f5:d7:
         40:a8:a4:97:3b:f5:61:e0:84:82:83:56:a6:7b:89:be:e8:bc:
         d6:51:12:3e:aa:6d:7c:48:19:40:60:6d:c4:1a:aa:c2:5f:65:
         2d:8b:5f:04:f1:2d:1a:91:31:e2:d8:bc:d3:e1:86:5e:ac:15:
         e9:a9:3d:33:0f:61:6f:b2:e5:f6:27:fe:55:1f:f7:17:dd:f5:
         08:93:00:b1:32:1e:9c:32:dd:6d:e8:d0:1a:60:19:b4:8c:9c:
         1c:84:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:50:10 2026 by rpki-client