Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/CCB3F0C665C411F19AAB55CC8147A888.roa
File:                     CCB3F0C665C411F19AAB55CC8147A888.roa (raw, json)
Hash identifier:          6HsQ3Z7sCMaiW2glN0WOtCM/Fh9gJPdbJXQJdZ4RzC8=
Subject key identifier:   29:48:76:F2:CE:5E:EE:56:27:AF:D2:98:43:A6:91:6C:AC:9A:C9:7D
Certificate issuer:       /CN=A91694A4/serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
Certificate serial:       03
Authority key identifier: 64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/CCB3F0C665C411F19AAB55CC8147A888.roa
Signing time:             Thu 11 Jun 2026 18:38:55 +0000
ROA not before:           Thu 11 Jun 2026 18:38:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137081
IP address blocks:        2402:49a0:1::/48 maxlen: 48
                          2402:49a0:10::/48 maxlen: 48
                          2402:49a0:11::/48 maxlen: 48
                          2402:49a0:12::/48 maxlen: 48
                          2402:49a0:13::/48 maxlen: 48
                          2402:49a0:14::/48 maxlen: 48
                          2402:49a0:15::/48 maxlen: 48
                          2402:49a0:16::/48 maxlen: 48
                          2402:49a0:17::/48 maxlen: 48
                          2402:49a0:18::/48 maxlen: 48
                          2402:49a0:19::/48 maxlen: 48
                          2402:49a0:1a::/48 maxlen: 48
                          2402:49a0:1b::/48 maxlen: 48
                          2402:49a0:1c::/48 maxlen: 48
                          2402:49a0:1d::/48 maxlen: 48
                          2402:49a0:1e::/48 maxlen: 48
                          2402:49a0:1f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=6464A8D4CB7A6BC92B949D1A1E6F099333C56DF1
        Validity
            Not Before: Jun 11 18:38:55 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a2b00bf-4800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:3a:01:fb:db:32:0b:88:53:4d:1a:61:16:
                    92:cf:ae:04:ff:d2:ae:61:50:fd:42:01:a0:cc:cd:
                    ef:f6:8a:71:1d:1e:c0:32:8a:bc:c1:73:63:d4:30:
                    81:f1:ed:47:6b:6a:fb:d4:ce:b9:99:b4:6f:c0:53:
                    17:10:36:fe:be:a3:a6:b0:45:a0:be:a6:0f:20:d2:
                    3c:74:2b:e6:17:51:29:0b:8d:a5:a2:4b:03:3a:37:
                    c7:d2:27:57:c8:10:65:40:c7:eb:53:8e:09:b5:2a:
                    27:f9:55:67:be:00:e7:b1:1e:21:d6:d7:53:f0:ab:
                    4d:47:b7:3c:58:7d:c7:a5:76:72:a1:ec:9e:fa:1e:
                    a5:1e:78:df:7d:d2:0b:ee:3a:75:6e:b9:cc:66:4a:
                    1c:da:fd:7e:75:35:05:07:be:56:dd:e0:d7:91:89:
                    e7:d5:c7:43:ef:a2:39:d3:96:1d:74:61:ff:88:16:
                    34:71:7f:09:1e:ab:98:d2:5d:a0:58:b0:4c:e5:fe:
                    ee:02:26:69:1e:58:75:f2:a9:31:c6:82:b4:79:de:
                    dc:03:6f:f2:07:45:04:60:36:34:6d:f2:0a:ed:c4:
                    83:a6:21:e2:01:6f:ba:f5:cf:74:6f:c2:b7:3b:f4:
                    ba:1e:a4:2e:9b:a9:d2:7e:a3:f6:cf:89:12:ef:97:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:48:76:F2:CE:5E:EE:56:27:AF:D2:98:43:A6:91:6C:AC:9A:C9:7D
            X509v3 Authority Key Identifier:
                keyid:64:64:A8:D4:CB:7A:6B:C9:2B:94:9D:1A:1E:6F:09:93:33:C5:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGSo1Mt6a8krlJ0aHm8JkzPFbfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/22698E4465BC11F19A81043C7E47A888/CCB3F0C665C411F19AAB55CC8147A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:49a0:1::/48
                  2402:49a0:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:49:8b:9b:d4:1f:38:b8:22:c7:45:42:6c:22:4d:81:d4:94:
         bb:63:f0:86:3c:20:bb:b2:69:35:fb:e5:36:f7:92:a1:ab:cd:
         d2:a4:c7:62:35:0d:20:00:38:b9:f1:91:71:15:31:79:62:b0:
         e4:79:b5:08:a5:92:f3:49:25:06:bb:f8:04:89:fe:f1:84:55:
         df:95:50:3c:cc:7f:d7:42:5c:a8:03:db:22:a8:73:cc:ee:6c:
         46:88:e5:5b:e4:aa:10:86:ee:2f:dc:8c:cd:e0:ef:49:a3:bf:
         ab:0e:29:63:99:a9:95:50:0b:11:8c:5a:a4:dd:b8:ad:a8:d6:
         b9:7f:37:23:53:36:0f:c6:c6:7e:7b:ce:56:76:ea:2f:b0:e3:
         37:6f:1e:ad:57:f4:28:14:24:1d:f4:dd:f3:c2:f7:7a:0a:6b:
         ec:a5:81:75:86:fa:fa:d5:62:9f:9b:09:8f:21:b1:ca:f6:8d:
         a5:6c:02:36:89:81:78:0c:c1:ef:d4:a1:41:14:be:4d:d2:f2:
         16:f4:22:05:8d:dc:b6:82:92:18:3c:da:5b:ba:b8:66:9b:06:
         ec:1b:a2:fb:53:d0:ca:c8:c2:25:37:36:55:4f:85:c9:73:56:
         87:36:7d:cc:72:a9:6e:97:35:ec:ec:f6:0e:1e:9e:34:c3:a5:
         02:3c:04:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
OTRBNDExMC8GA1UEBRMoNjQ2NEE4RDRDQjdBNkJDOTJCOTQ5RDFBMUU2RjA5OTMz
M0M1NkRGMTAeFw0yNjA2MTExODM4NTVaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMmIwMGJmLTQ4MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2wjoB+9syC4hTTRphFpLPrgT/0q5hUP1CAaDMze/2inEdHsAyirzBc2PUMIHx
7UdravvUzrmZtG/AUxcQNv6+o6awRaC+pg8g0jx0K+YXUSkLjaWiSwM6N8fSJ1fI
EGVAx+tTjgm1Kif5VWe+AOexHiHW11Pwq01HtzxYfceldnKh7J76HqUeeN990gvu
OnVuucxmShza/X51NQUHvlbd4NeRiefVx0PvojnTlh10Yf+IFjRxfwkeq5jSXaBY
sEzl/u4CJmkeWHXyqTHGgrR53twDb/IHRQRgNjRt8grtxIOmIeIBb7r1z3Rvwrc7
9LoepC6bqdJ+o/bPiRLvl2prAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQUKUh28s5e
7lYnr9KYQ6aRbKyayX0wHwYDVR0jBBgwFoAUZGSo1Mt6a8krlJ0aHm8JkzPFbfEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5NEE0LzIyNjk4RTQ0NjVC
QzExRjE5QTgxMDQzQzdFNDdBODg4L1pHU28xTXQ2YThrcmxKMGFIbThKa3pQRmJm
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWkdTbzFNdDZhOGtybEowYUhtOEprelBGYmZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTRBNC8yMjY5OEU0NDY1QkMxMUYxOUE4MTA0M0M3RTQ3QTg4OC9DQ0IzRjBDNjY1
QzQxMUYxOUFBQjU1Q0M4MTQ3QTg4OC5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE
AgACMBIDBwAkAkmgAAEDBwQkAkmgABAwDQYJKoZIhvcNAQELBQADggEBAJVJi5vU
Hzi4IsdFQmwiTYHUlLtj8IY8ILuyaTX75Tb3kqGrzdKkx2I1DSAAOLnxkXEVMXli
sOR5tQilkvNJJQa7+ASJ/vGEVd+VUDzMf9dCXKgD2yKoc8zubEaI5VvkqhCG7i/c
jM3g70mjv6sOKWOZqZVQCxGMWqTduK2o1rl/NyNTNg/Gxn57zlZ26i+w4zdvHq1X
9CgUJB303fPC93oKa+ylgXWG+vrVYp+bCY8hscr2jaVsAjaJgXgMwe/UoUEUvk3S
8hb0IgWN3LaCkhg82lu6uGabBuwbovtT0MrIwiU3NlVPhclzVoc2fcxyqW6XNezs
9g4enjTDpQI8BLI=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:19:13 2026 by rpki-client