Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/6873616CCAE811ECBB89015FC4F9AE02.roa
File:                     6873616CCAE811ECBB89015FC4F9AE02.roa (raw, json)
Hash identifier:          naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=
Subject key identifier:   D9:0B:4D:25:79:31:62:5D:7A:75:0F:D3:86:A5:44:85:A2:37:A7:57
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       04D1
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/6873616CCAE811ECBB89015FC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:31:27 +0000
ROA not before:           Fri 03 Apr 2026 00:31:27 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     135395
IP address blocks:        2400:58a0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Apr  3 00:31:27 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf0a5e-a8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:26:c3:ef:43:fb:7a:28:a9:ab:a8:c9:75:dc:
                    c2:a1:cd:7c:70:47:69:61:ac:04:20:00:62:a8:8b:
                    5c:ee:1a:e7:28:74:23:5d:5f:80:3c:b5:9c:75:e1:
                    c4:eb:c3:cf:71:74:40:a7:5f:bf:26:52:9c:4d:30:
                    2c:d4:6a:5e:5b:ab:62:b8:39:2c:57:da:82:05:8a:
                    8c:f2:3c:b2:1f:17:0e:55:b9:68:e7:17:49:17:9f:
                    24:7f:14:7f:35:ed:a9:97:23:31:9a:dc:93:cd:49:
                    ee:0f:7d:92:91:af:dd:49:fa:5b:c6:05:00:fc:db:
                    09:3f:8b:5c:52:d6:f9:15:ec:16:19:c7:18:0e:64:
                    95:74:ec:ca:a6:e2:f3:10:10:ef:18:ab:8f:27:76:
                    3d:30:a2:f8:db:c5:56:7a:5d:c2:57:fd:52:11:db:
                    ee:27:c1:b2:76:5e:b3:58:19:62:ca:cd:bd:01:bb:
                    31:ec:80:b3:1b:2c:bd:b7:3e:b0:66:0e:cd:f4:84:
                    58:c2:03:04:47:f4:43:38:23:18:e8:b7:4b:93:d7:
                    ac:dc:af:97:0d:1c:57:36:83:7f:00:90:b4:97:43:
                    df:dc:37:97:75:1c:f0:c4:b4:49:08:3f:68:ce:0b:
                    3c:5f:42:ab:a2:16:eb:0c:3d:d4:8c:20:a1:1c:46:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0B:4D:25:79:31:62:5D:7A:75:0F:D3:86:A5:44:85:A2:37:A7:57
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/6873616CCAE811ECBB89015FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:58a0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:62:c1:af:c1:42:95:b6:a1:48:9d:a9:1f:3d:b3:a3:08:10:
         70:a6:a8:b6:72:4b:13:05:c7:b9:5c:ea:0b:74:12:20:6c:7a:
         c4:cf:3c:8f:68:c7:f3:e9:9c:f8:5f:9e:50:00:ee:9c:0e:e3:
         64:ed:22:4b:53:f5:7c:c0:ba:fb:e2:07:c3:79:29:6a:39:0a:
         a1:a1:1a:47:08:3b:ea:c8:46:af:26:ef:df:ed:cd:08:c9:2c:
         0f:e3:8a:0e:07:3d:dc:5c:c5:bb:cc:03:fd:2d:b7:57:23:4c:
         86:61:b5:98:9b:64:2c:9f:c8:31:21:bd:dd:2c:31:64:81:86:
         1b:a5:51:4c:93:aa:90:91:55:75:13:26:28:5d:47:83:38:98:
         3c:5f:a0:c3:c2:7b:ab:6b:2b:1c:88:a7:aa:14:49:0b:06:ef:
         00:07:5c:2e:50:f4:5f:49:7f:4e:19:dc:9e:1c:dc:ff:80:11:
         8d:42:b5:65:e6:2e:13:9c:d9:dc:10:b7:d1:de:1f:97:58:7c:
         cf:d6:58:e4:95:94:5b:32:3d:07:a3:b7:c3:c0:ea:1f:d3:8f:
         be:34:69:35:e4:48:b8:9b:4a:db:55:9e:79:e8:7a:3f:c3:fe:
         f2:b7:48:3f:52:43:1a:44:5d:6e:7b:dc:50:36:8f:ef:2c:b4:
         93:18:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:45 2026 by rpki-client