Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
File:                     671FC40EE29211EE94348874C4F9AE02.roa (raw, json)
Hash identifier:          SN4RGuqDiiG65cpwDs+vTaEwhdK6bocim+KcbvfscKo=
Subject key identifier:   08:2D:8C:09:B6:DD:5B:AE:E8:14:B0:59:06:E9:D5:2F:19:0A:00:5C
Certificate issuer:       /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
Certificate serial:       07D6
Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa
Signing time:             Sat 18 Jul 2026 23:23:34 +0000
ROA not before:           Sat 18 Jul 2026 23:23:34 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     17762
IP address blocks:        2403:8600:c0::/44 maxlen: 44
                          2403:8600:d0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl
                          rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 23:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C
        Validity
            Not Before: Jul 18 23:23:34 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5c0af6-701f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e5:90:51:64:8c:db:2a:f5:98:99:c0:e8:5c:
                    64:66:fd:c8:9a:db:2a:98:12:7a:aa:d3:37:1d:0f:
                    06:d6:2d:d6:32:82:05:98:f8:63:a5:79:5a:cf:aa:
                    88:ef:42:3e:98:a1:ff:74:8b:c8:f5:f1:a7:42:57:
                    52:39:b4:4c:4a:d2:e1:51:27:02:68:65:f7:44:e7:
                    c8:dc:75:85:e5:c8:69:2e:2f:da:f1:50:f6:3e:58:
                    ed:e8:dc:f1:25:b3:ff:c8:92:76:32:cb:ff:e0:25:
                    69:89:6b:42:a5:c4:a5:a4:d8:86:e9:0e:c8:46:6a:
                    e3:de:23:39:61:a2:b0:62:25:03:c2:56:72:0e:10:
                    0b:c6:b5:30:05:d6:05:2f:4a:9e:63:9d:c3:77:c2:
                    ca:35:b0:d5:f7:b4:ba:39:62:cd:a7:b3:9f:90:2b:
                    5f:fe:91:2c:82:21:77:ff:72:96:9d:75:27:32:fa:
                    a3:f3:36:d1:7e:38:06:c9:f3:24:8f:e1:ca:8f:4a:
                    b7:9f:44:47:33:6d:de:fb:72:5e:1f:44:8e:2d:32:
                    30:a8:4a:e0:1e:6b:f4:15:05:25:67:8f:c5:0e:38:
                    18:05:e5:85:e6:73:20:d3:be:21:7b:e3:8d:c3:32:
                    77:6e:da:ab:8b:a9:50:5e:93:2c:95:49:7a:5e:f9:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2D:8C:09:B6:DD:5B:AE:E8:14:B0:59:06:E9:D5:2F:19:0A:00:5C
            X509v3 Authority Key Identifier:
                keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/671FC40EE29211EE94348874C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8600:c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         16:67:5b:42:b3:07:44:a2:1d:1b:76:6d:b6:87:93:13:ed:64:
         b1:39:23:12:b6:24:dd:fe:df:30:fe:f4:fc:da:c3:c5:5f:23:
         d8:36:f7:92:56:d5:79:d1:dc:9f:d0:4e:99:8f:b3:09:ab:ca:
         c1:16:dc:a2:18:55:38:c4:48:ed:99:bb:f2:9f:5b:76:68:af:
         72:ad:ab:67:e3:b1:cc:fe:26:ba:0a:0c:cb:e8:71:99:bd:e3:
         e9:05:c7:a6:4b:88:58:3a:e0:9c:51:67:f1:07:e4:df:d8:de:
         84:d0:23:0f:62:dc:54:7c:56:5d:97:d6:76:4e:93:14:14:16:
         e4:54:51:11:69:a1:5b:81:71:ac:6b:f8:37:32:81:91:18:df:
         73:84:6c:21:c4:25:57:59:36:54:01:80:80:01:37:c4:b6:c9:
         36:54:bb:c6:e3:62:bb:29:18:2e:c6:d0:1e:11:56:68:3d:7a:
         61:99:77:50:9a:b1:e2:1e:31:12:92:ec:99:87:9b:77:11:db:
         c3:39:5d:74:08:22:be:a1:1a:14:ef:b4:ba:04:f9:84:c1:97:
         3a:db:e6:18:d7:2d:be:c7:5e:ad:91:fc:cf:4c:c8:2f:ee:3b:
         ac:77:66:e7:76:b0:63:b9:ba:15:72:11:a1:c1:79:98:35:93:
         3e:14:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:33 2026 by rpki-client