Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
File:                     CE24A9DE739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier:          1ypTR4tpjHhybEU79OLgj9vwi7cGiaHW8fChke9PVj0=
Subject key identifier:   67:88:C4:37:C7:53:63:E0:31:5F:B6:EC:2E:54:1C:7E:65:33:48:87
Certificate issuer:       /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial:       01C6
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:04:16 +0000
ROA not before:           Fri 01 Aug 2025 05:42:50 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     7718
IP address blocks:        2401:3900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
                          rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
        Validity
            Not Before: Aug  1 05:42:50 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4394f-9ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:8e:50:ea:5a:48:02:aa:18:9d:88:22:8a:
                    ad:43:a6:2c:03:76:b0:c8:2a:42:68:68:19:1e:c3:
                    0f:29:4d:53:17:51:03:a1:9d:6e:16:8b:07:f0:be:
                    43:5d:bd:45:15:11:3e:17:2d:5c:49:95:81:65:dc:
                    f3:57:a6:9d:35:7d:a1:4a:62:cd:ff:23:ff:2c:c6:
                    c9:18:8f:8b:cb:8f:c9:31:dc:11:33:93:d9:00:e8:
                    63:33:67:f3:c6:b3:bc:80:da:2e:9c:89:7e:d2:c3:
                    84:77:ee:db:e2:5f:9b:54:90:79:9f:76:00:1a:fe:
                    13:fb:9d:79:44:38:7d:ca:f7:55:3e:e4:6a:c8:52:
                    98:72:df:9a:6f:14:f0:d0:12:e3:c2:e1:d6:0b:8c:
                    96:d5:59:cd:17:20:42:35:27:d9:01:ac:41:c3:e0:
                    5e:37:d2:13:77:75:c7:9c:db:90:0e:b5:c8:8f:78:
                    1c:0c:e8:a6:51:01:ec:7e:b3:20:4c:7c:77:c2:80:
                    bc:15:31:3c:d0:f9:60:24:bd:fa:8a:9a:a7:c3:31:
                    a7:b0:ac:c3:7c:84:c9:08:90:ff:d2:d7:9e:6f:00:
                    3d:c7:da:47:34:00:f5:3c:0b:ca:1a:56:81:e5:93:
                    57:2f:b2:1a:9f:78:76:f3:7f:be:29:18:2b:30:cc:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:C4:37:C7:53:63:E0:31:5F:B6:EC:2E:54:1C:7E:65:33:48:87
            X509v3 Authority Key Identifier:
                keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CE24A9DE739411EEB8BAE858C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3900::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:00:af:b3:d4:f8:25:cf:12:a4:d2:09:88:d8:d4:9a:86:e2:
         8d:96:e8:e5:7d:6b:3a:e5:10:4a:0c:8f:46:9e:e0:cb:db:04:
         b5:ef:57:5c:0a:65:67:b8:de:91:c2:4c:2d:af:c2:75:79:ba:
         71:e1:f8:ff:c9:6c:79:af:95:c1:76:13:8c:98:fe:64:4c:1c:
         4a:4d:e3:48:d9:40:b6:3a:75:1d:ad:7e:79:14:9c:55:ae:5b:
         ea:87:f7:d6:50:b5:65:55:31:52:9f:08:46:d6:fb:1b:8d:19:
         4f:f9:2b:c2:53:98:89:b3:45:5b:ac:40:8c:9f:fb:72:da:88:
         8d:57:2f:20:53:7d:dc:21:cb:86:62:7a:02:9d:b3:7b:9e:cc:
         2a:bc:86:83:54:92:c2:ae:f2:61:2d:14:a1:a5:b9:8e:27:cc:
         8f:b2:a7:86:95:f9:4a:0d:ff:9f:78:2c:69:ba:4c:fe:ce:58:
         7c:66:44:09:b5:b7:64:70:b7:ab:08:46:0c:2b:3e:7a:ed:9f:
         7d:6c:4c:bc:0f:0b:d2:c5:9a:53:ed:b5:51:92:94:a9:5c:f7:
         4b:d5:5b:ea:e5:ba:2a:4f:fb:4a:cf:ff:d6:b8:99:96:93:eb:
         07:39:86:ad:93:bc:2b:80:95:03:06:fa:15:b5:5f:88:55:e6:
         95:30:54:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:11 2026 by rpki-client