Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/8276BFA60BB811EFB091FD1CC4F9AE02.roa
File:                     8276BFA60BB811EFB091FD1CC4F9AE02.roa (raw, json)
Hash identifier:          UCg4wJkvMAwrQhdPO9e6tz9kKiLqe8tkbkp5RwOBI9k=
Subject key identifier:   A2:E3:46:B0:B8:BD:F3:F9:53:32:F2:11:41:E1:C6:7F:8C:2E:56:76
Certificate issuer:       /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial:       04F8
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/8276BFA60BB811EFB091FD1CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:07:58 +0000
ROA not before:           Fri 28 Nov 2025 22:55:30 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     201351
IP address blocks:        2400:8a20:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
                          rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
        Validity
            Not Before: Nov 28 22:55:30 2025 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4807e-71eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:17:88:48:e1:0c:a7:00:fd:cf:e7:d5:08:
                    b2:a7:13:88:b9:4d:4a:bb:33:47:a8:52:aa:55:c5:
                    e0:30:37:e1:a3:e9:09:8c:44:9f:81:9b:5e:21:b0:
                    f0:ac:72:71:99:5d:6f:6b:cb:a5:6a:6a:fc:99:aa:
                    4d:56:f4:0c:cc:48:4d:79:ec:83:98:c7:16:8f:3d:
                    56:77:63:8c:95:f2:66:e7:d8:58:aa:a1:ad:b4:2a:
                    9c:19:d8:5b:9f:ef:33:d1:26:ac:d3:dc:f3:39:9f:
                    33:1d:86:19:8d:28:51:51:2a:0e:f3:75:d8:14:ad:
                    53:57:06:e5:2d:1b:81:92:a8:c4:4f:6d:c4:6c:c4:
                    77:1d:40:d2:11:3b:2d:20:08:d8:4a:1e:e9:7c:dd:
                    01:a6:dc:b5:e4:39:ac:88:06:54:13:19:8f:61:3e:
                    02:06:5a:5b:2f:27:6a:b0:f2:b1:e6:e0:22:45:17:
                    8f:ae:69:21:e3:8e:db:90:1e:8c:d0:ab:5c:a1:fb:
                    be:26:33:67:9e:ef:05:c8:84:92:bb:ec:8b:21:3f:
                    d9:90:26:69:89:34:a8:d1:af:eb:d8:be:5f:f9:6d:
                    93:fa:1d:bc:90:9c:24:34:01:1e:17:c2:c2:b7:25:
                    4e:17:d2:12:54:6f:e3:ef:6a:f0:40:4c:17:7a:be:
                    c9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E3:46:B0:B8:BD:F3:F9:53:32:F2:11:41:E1:C6:7F:8C:2E:56:76
            X509v3 Authority Key Identifier:
                keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/8276BFA60BB811EFB091FD1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8a20:127::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:e5:84:44:20:1d:4b:40:b7:50:cd:bf:51:12:1d:58:13:82:
         19:85:ec:20:2d:ac:7a:b0:05:18:25:a8:79:9b:79:81:30:02:
         ac:b3:94:e1:ec:fa:6e:d3:68:bf:45:8e:3f:51:2d:04:01:57:
         78:5f:f1:5c:dd:d2:65:84:a1:4e:3f:d8:10:5c:98:a3:d3:98:
         0b:95:a1:d1:e5:38:c5:cf:15:54:8f:ab:1e:c6:ef:4a:71:dd:
         d2:9d:74:7c:f9:3e:9e:32:5f:e1:55:f7:c7:37:1c:95:82:61:
         eb:5d:13:16:b5:2e:bd:5d:05:c6:6c:30:02:89:92:6a:a5:cc:
         95:4f:79:ac:d1:47:fa:dc:6d:3a:b2:d5:2e:36:51:c2:06:e7:
         a0:c0:29:5c:45:79:ff:4a:51:c7:8c:26:30:ab:64:ba:4c:ed:
         b2:2b:0a:53:25:b9:79:59:ba:6b:fa:ac:9a:35:98:90:01:93:
         55:b6:42:d9:1c:57:62:ea:81:e4:5b:e6:8f:3e:9c:1a:92:fb:
         ac:ae:ae:03:7a:57:88:96:79:b8:6d:1e:08:fd:8d:15:ed:db:
         c5:7c:19:50:62:10:3b:a0:05:3c:cd:02:79:af:9d:22:19:49:
         21:fd:a8:1e:74:d8:bd:18:f0:25:e3:12:f7:24:ba:a3:7b:07:
         76:59:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:31 2026 by rpki-client