Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/9E0DB32CB2B511F1801B1A934811F970.roa
File:                     9E0DB32CB2B511F1801B1A934811F970.roa (raw, json)
Hash identifier:          1dIkUQs+9ySkSsx6ExBW7U2VgOdoQ5ewbH5wGx2owX8=
Subject key identifier:   B6:C1:9C:61:F7:E1:1F:5E:EC:E3:96:6B:CA:B0:2C:0A:B1:1F:3D:15
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       023F
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/9E0DB32CB2B511F1801B1A934811F970.roa
Signing time:             Thu 17 Sep 2026 16:34:14 +0000
ROA not before:           Thu 17 Sep 2026 16:34:14 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     219329
IP address blocks:        2403:ad80:5020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 575 (0x23f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Sep 17 16:34:14 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aac1685-839f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:83:0c:fa:27:c1:de:55:ac:60:8d:4b:df:
                    e9:e5:59:a8:d6:31:3f:77:6c:57:76:4d:da:17:1d:
                    d4:36:3a:1c:aa:d6:0e:be:73:81:0c:ce:3a:8d:de:
                    94:f6:f8:ca:38:40:a8:d4:0d:0f:97:06:82:ac:c3:
                    f7:8e:7b:d5:16:04:d1:47:7a:f4:f7:cd:00:4c:19:
                    dc:17:c5:f7:c6:16:c4:2c:e2:76:c5:ab:56:ed:ea:
                    bc:84:16:8c:a6:d8:ee:1e:98:30:aa:b4:7f:b9:5f:
                    dd:ea:3e:70:66:d6:86:4f:17:8a:dd:68:7d:52:bb:
                    b3:74:7a:1b:36:51:df:eb:ee:ed:a2:b2:7e:8d:71:
                    ca:9e:2c:bf:6a:c2:02:50:f4:f1:a7:09:0a:16:3f:
                    24:3a:68:f7:6c:4a:6e:b4:14:37:10:9b:b5:ef:33:
                    17:5a:d7:04:07:23:2d:92:37:c6:3f:16:fe:e8:29:
                    16:d4:f7:17:e2:d2:26:33:5c:6f:38:53:12:87:5b:
                    ab:b0:6e:d8:7c:4a:c5:7e:17:67:2f:7a:bc:47:dd:
                    9e:17:f1:f1:f6:96:fc:34:55:99:5e:59:e8:91:dd:
                    44:3c:fd:e8:91:65:dd:0f:61:a3:6d:25:e2:df:39:
                    2b:76:54:f8:e5:81:c8:d5:d1:09:79:a9:cd:0c:a0:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:9C:61:F7:E1:1F:5E:EC:E3:96:6B:CA:B0:2C:0A:B1:1F:3D:15
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/9E0DB32CB2B511F1801B1A934811F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:5020::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:13:e0:73:ab:59:a5:d1:e8:75:13:07:3a:f7:b9:85:a7:52:
         60:ce:cd:e0:4c:15:1d:32:36:29:99:0f:a4:52:85:30:a4:39:
         c7:e4:69:f4:a1:bf:91:e9:84:ff:7e:f5:18:06:7a:ae:1e:8c:
         f2:b3:16:a6:21:90:0c:92:d7:f5:f1:ee:37:4d:56:be:85:8c:
         2f:f7:02:ea:6d:21:fc:94:49:5d:cb:19:09:0c:5b:30:cf:b0:
         db:4b:53:21:e8:da:34:cd:0d:c0:8c:bb:82:6e:26:21:0f:b0:
         d7:72:24:d3:38:2c:a3:bb:81:17:55:82:3b:98:70:d4:7d:08:
         75:82:f9:2d:a5:0f:6d:93:be:56:d4:5a:0f:d1:a0:33:19:40:
         48:36:df:8d:8f:53:b9:b3:ff:ef:d1:04:2d:7d:a4:29:9f:03:
         38:41:f5:4c:a2:6f:38:51:d1:92:51:15:aa:8d:be:16:64:66:
         ef:d1:a6:e1:bf:e6:62:6a:14:9d:c7:94:e8:da:e5:11:6d:d9:
         27:84:7b:d5:b3:95:e8:e1:16:67:3a:6e:7f:48:b8:3c:31:a1:
         34:f1:cc:1d:dd:3e:b9:4c:89:3d:0f:2f:d0:90:c2:20:88:5e:
         f5:1b:40:d4:77:14:48:ec:4d:e5:db:28:9b:f7:64:1a:16:0e:
         c1:be:d3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:58 2026 by rpki-client