Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/0BC2889A5FA911F0BE187C31C4F9AE02.roa
File:                     0BC2889A5FA911F0BE187C31C4F9AE02.roa (raw, json)
Hash identifier:          zrRgfnp38K1AzMVlPjOoh2MFOFcFzH7RaFrG8qYx39w=
Subject key identifier:   4B:98:32:48:ED:3D:6C:37:35:B0:F9:C6:12:E2:BC:22:39:75:70:BA
Certificate issuer:       /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
Certificate serial:       D7
Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/0BC2889A5FA911F0BE187C31C4F9AE02.roa
Signing time:             Sat 29 Aug 2026 06:56:56 +0000
ROA not before:           Sat 29 Aug 2026 06:56:56 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151351
IP address blocks:        2402:1760::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl
                          rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33
        Validity
            Not Before: Aug 29 06:56:56 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9282b8-5666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:68:e7:26:6e:3b:71:cf:20:ba:98:7e:4a:
                    c3:10:d7:bd:14:9a:ec:f7:c9:20:38:cd:09:e5:1b:
                    0e:b6:38:19:84:76:70:a5:8a:ea:af:40:ed:1e:40:
                    ff:65:e5:15:75:83:2a:81:2e:69:9c:6d:db:73:ae:
                    43:56:a4:2e:4b:d8:a0:f7:3f:27:ea:e6:69:8f:5b:
                    78:e0:3c:8a:63:8b:a8:dd:5f:ab:bb:36:58:44:d4:
                    e5:a3:15:6e:68:87:a1:28:61:b9:cc:88:ac:32:3a:
                    68:c1:99:23:aa:72:aa:e2:4e:16:89:29:04:45:8c:
                    ba:36:54:15:53:21:4c:5d:4a:af:cf:0e:46:7e:bb:
                    e1:21:d3:66:f5:63:21:af:55:08:78:21:01:a3:c0:
                    f1:cf:5f:51:b8:04:86:f7:f5:a7:c1:8f:b3:b6:39:
                    1a:75:ba:90:6e:b1:a2:b0:ef:d9:3a:34:28:a2:10:
                    05:13:19:46:df:00:84:19:e5:c8:e5:e1:69:08:ac:
                    48:e5:09:a1:26:01:7c:72:63:cc:73:13:47:80:c1:
                    67:b9:ab:b2:b1:4b:26:5c:ea:5a:2e:a3:11:b5:4b:
                    f1:a9:5b:58:a6:02:9d:44:54:87:b6:4a:b7:5b:88:
                    15:d9:d9:b6:c0:b3:7f:61:f7:7d:ca:8b:f4:59:02:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:32:48:ED:3D:6C:37:35:B0:F9:C6:12:E2:BC:22:39:75:70:BA
            X509v3 Authority Key Identifier:
                keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/0BC2889A5FA911F0BE187C31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1760::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:54:46:a0:73:61:4f:0f:09:41:f1:62:f7:84:e4:80:56:
         04:2d:ca:85:1a:48:0e:9f:ac:05:4a:87:7a:22:79:d3:e9:40:
         88:79:a8:32:20:b0:0c:c5:9a:d3:5f:80:f2:68:f1:76:db:1f:
         a1:a6:09:e6:cc:8c:d3:e1:81:a8:fa:f7:14:2b:74:00:d0:a2:
         e7:6b:1a:17:2d:ed:c6:c4:7a:65:40:5f:0c:b8:08:e2:50:93:
         53:6b:9c:b2:30:50:04:ad:da:c0:0a:e3:50:f0:4e:e5:d2:80:
         97:82:92:bf:78:aa:cd:e7:2b:79:a3:a1:eb:72:3e:5e:04:ab:
         13:4c:f5:13:22:7f:0a:e5:18:a1:7e:5c:26:e0:66:a3:25:40:
         84:18:06:16:68:45:c6:80:ef:46:cf:44:9b:4d:f7:a3:ba:90:
         99:65:77:e8:a3:ac:11:55:c0:47:9c:6b:6c:05:c9:81:8a:b3:
         d9:26:a4:cb:8c:a7:43:fe:3e:4a:b4:d0:45:86:be:ca:e7:50:
         c6:26:90:d0:cd:d7:0d:0b:da:5c:fc:d9:82:a4:bb:9d:d6:c4:
         64:88:98:f9:50:cc:6e:62:08:66:60:d4:61:90:4d:1f:49:2e:
         9c:c7:7a:c5:fb:7e:12:9e:78:58:07:f3:0e:44:be:f8:97:76:
         0b:20:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:35:10 2026 by rpki-client