Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
File:                     9F08E8B2D28E11EB9F83683DC4F9AE02.roa (raw, json)
Hash identifier:          ytrXwHDwgf5zRqPoFHCYqQMoZALpJPSEoIv4sspoZXM=
Subject key identifier:   46:DC:C1:8A:98:DD:DB:57:8F:39:EC:1F:62:FA:0A:3D:2E:A2:8E:44
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       10BF
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:37:21 +0000
ROA not before:           Thu 24 Apr 2025 17:46:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142437
IP address blocks:        2405:3340:e011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4287 (0x10bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: Apr 24 17:46:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44f21-1f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:d9:54:0e:3e:4d:08:ca:bc:55:26:9e:db:
                    a5:d5:ff:d1:0c:39:b5:8d:42:0f:35:6b:a0:cd:45:
                    05:54:90:17:34:34:b5:d3:4a:49:e1:de:d0:2e:d4:
                    91:ba:b3:a4:cf:34:a5:d6:7e:a2:bb:e4:97:ca:c5:
                    64:0a:a0:20:12:fc:0d:ca:37:0f:c2:28:b8:48:b9:
                    de:d3:ce:fc:e6:36:c6:7b:3a:51:e3:21:be:de:d2:
                    96:4c:52:5b:d0:d5:40:f1:0f:6c:58:58:88:99:9e:
                    63:66:55:60:c9:4d:92:ff:4b:72:b0:39:c3:d7:3f:
                    32:f8:99:a2:73:09:d5:ee:66:65:bb:0c:62:5d:7e:
                    6f:3f:17:c5:33:ba:03:5a:31:e3:1a:e3:79:e8:0c:
                    bf:e0:c6:96:4c:a2:0d:ca:f2:2d:33:94:e2:7f:76:
                    78:25:f8:c9:f9:f4:8f:65:29:80:97:a2:c8:f2:5b:
                    31:ac:d7:b9:42:6d:2a:b7:c0:12:b1:ed:15:9c:80:
                    c9:2b:46:ce:6c:1b:08:c5:8f:b3:0e:e1:d6:9c:35:
                    5c:d5:bc:7b:49:1b:3f:b3:67:7d:ef:64:2f:9c:4e:
                    0e:a0:03:90:7d:b4:c4:24:7e:bc:e6:17:95:34:63:
                    b4:5f:89:4b:b4:c1:13:0f:d5:19:b6:50:e3:f5:00:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DC:C1:8A:98:DD:DB:57:8F:39:EC:1F:62:FA:0A:3D:2E:A2:8E:44
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/9F08E8B2D28E11EB9F83683DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3340:e011::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:aa:71:c6:3e:86:2a:90:aa:20:34:0e:0c:fe:60:f1:b2:24:
         98:0d:b7:df:61:67:de:4c:fd:c1:6b:1f:62:da:16:14:f6:5e:
         4a:27:f1:ca:09:85:b9:65:29:2a:ee:7f:cd:0f:6c:14:9a:04:
         95:d0:a3:da:1f:d7:e7:db:e2:31:e3:78:09:b6:71:59:05:53:
         47:6e:f0:bb:24:22:99:e2:19:03:64:2d:bd:ff:95:84:3d:32:
         c6:c5:85:33:4d:d9:2a:47:f7:8a:f8:c1:1f:56:78:31:1d:46:
         e8:37:78:e8:ea:cc:b5:2c:ab:03:fb:e2:ab:9e:48:dd:58:08:
         f5:68:53:fa:60:de:f3:ad:8f:a5:3e:c0:4d:26:cd:eb:d3:5a:
         27:98:6e:25:0d:51:cd:86:0e:cf:ea:f6:a8:50:4c:3a:9c:ac:
         a1:af:f1:05:16:75:79:0e:c0:cd:57:eb:78:59:4b:c4:67:07:
         73:0f:cb:48:6a:c7:cc:e4:90:30:03:5a:e8:ba:f8:a9:8c:a4:
         25:78:96:72:27:72:4e:39:59:af:7e:27:19:53:a2:1b:66:21:
         1f:b7:e2:5f:44:59:5b:7b:79:e1:de:78:03:05:32:09:2a:5a:
         f8:ec:e9:d5:78:e9:a4:c3:1f:e6:44:f1:6a:44:23:d7:4f:68:
         37:5d:3c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:56:51 2026 by rpki-client