Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/2B2CF35A35A411ED89F95974C4F9AE02.roa
File:                     2B2CF35A35A411ED89F95974C4F9AE02.roa (raw, json)
Hash identifier:          8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=
Subject key identifier:   63:6A:B4:14:83:7E:D4:D2:15:3F:45:00:F0:A8:40:E5:1B:28:79:41
Certificate issuer:       /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial:       0445
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/2B2CF35A35A411ED89F95974C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:03:46 +0000
ROA not before:           Fri 14 Nov 2025 23:15:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     397182
IP address blocks:        2406:9f01::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1093 (0x445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
        Validity
            Not Before: Nov 14 23:15:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45552-615a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:4c:2c:d8:89:37:14:74:1a:0c:20:e7:4a:
                    c9:5e:cb:29:db:5e:a0:17:98:00:22:8d:39:be:c3:
                    e6:c5:68:23:ec:19:e3:8e:d8:2a:2a:62:c1:23:41:
                    bb:6e:1d:e5:c6:98:32:a5:68:b6:fc:2d:de:22:16:
                    2f:54:49:13:66:b3:39:e7:e5:4f:21:3a:71:3e:dc:
                    03:94:a5:4f:ea:2b:ac:13:6e:65:5a:24:4f:d5:3b:
                    f0:6a:c5:85:bd:ee:78:2a:38:2b:6c:a6:74:2d:f3:
                    02:3f:d1:a1:a6:ed:98:b0:af:c7:f3:75:6d:d1:6f:
                    a6:78:05:ba:3d:64:09:c4:36:c3:c6:94:2c:dd:f5:
                    5b:d7:eb:0b:9d:b3:46:72:e1:61:ce:8e:74:b2:84:
                    b3:41:11:f7:47:ca:3e:44:c9:ff:80:25:3e:4a:e7:
                    f3:7a:a2:b8:2a:9f:3a:9b:22:6c:99:2f:55:3c:9b:
                    00:51:c6:63:83:01:3b:e9:b1:e1:33:f1:b5:36:b6:
                    e1:24:5a:9a:21:7e:3f:34:f7:36:25:fe:c7:cf:3a:
                    43:ef:c4:38:cd:b9:09:5b:d2:7c:3e:aa:f1:e1:4f:
                    66:41:fb:3c:96:23:9c:00:10:87:a7:64:9f:b9:35:
                    12:aa:52:33:47:3d:8a:f8:69:5c:08:18:e4:c9:ee:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:B4:14:83:7E:D4:D2:15:3F:45:00:F0:A8:40:E5:1B:28:79:41
            X509v3 Authority Key Identifier:
                keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/2B2CF35A35A411ED89F95974C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9f01::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:93:ca:70:3e:b4:c7:bb:b3:45:c6:89:fd:be:fd:49:9f:
         08:0b:eb:e4:74:a0:cd:2b:a0:51:96:4a:91:65:1a:31:a6:be:
         ca:10:63:14:e4:15:17:31:26:b4:63:24:4c:8f:18:26:d8:89:
         26:f6:46:44:49:3c:02:14:d3:4e:8b:b4:f4:1c:de:9b:fd:d3:
         ce:12:9d:eb:35:0b:69:57:4c:11:07:54:58:08:2b:69:4d:72:
         f1:3f:a2:17:91:48:0d:03:93:8c:1f:bb:6f:5d:48:d6:7d:12:
         2b:05:8b:82:92:63:97:be:5d:7f:b6:f5:ba:48:b5:a3:8b:9c:
         98:26:53:44:88:9a:b8:2f:16:c1:78:fd:5f:c0:35:5d:20:cf:
         c4:ee:dc:83:4f:24:27:e9:ad:bf:32:9f:e3:e2:a4:cd:58:52:
         aa:07:94:c9:8b:2b:67:32:90:26:a8:a0:67:56:e9:07:57:83:
         ba:3e:00:69:b9:65:9b:3c:1e:6d:7c:27:b5:52:52:7d:5d:a3:
         57:d3:e5:1c:a6:2e:2b:b9:ba:8e:01:a1:ee:fe:c0:84:f3:0a:
         78:bf:b5:e6:a1:f2:c1:ad:5c:c1:1c:1e:0e:fb:a2:12:cf:e0:
         5b:52:08:75:17:06:e7:b4:38:26:93:cf:0d:f2:d9:9b:a7:e5:
         8a:ab:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:12 2026 by rpki-client