Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
File:                     87FEDB446B9B11F1A0F959156D47A888.roa (raw, json)
Hash identifier:          AYMk45b6CL8KReePrtbWEzoQNuf96ZiI29X04jKh5iY=
Subject key identifier:   FD:6D:10:C0:37:BB:DE:31:94:A0:55:6C:7D:93:D2:FA:2F:CE:CA:D4
Certificate issuer:       /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial:       018A
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa
Signing time:             Thu 27 Aug 2026 04:56:02 +0000
ROA not before:           Thu 27 Aug 2026 04:56:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     136461
IP address blocks:        2401:b6a0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
        Validity
            Not Before: Aug 27 04:56:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8fc362-8999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:66:fa:9c:4d:8c:d9:53:90:bc:42:a2:ec:
                    eb:c3:6c:24:bf:91:1c:c5:ec:f4:64:df:55:06:6f:
                    b4:f4:fa:e7:d0:c9:c1:15:5d:1b:45:b1:9e:02:aa:
                    8b:d6:68:71:3b:7b:e7:27:b2:44:c0:82:cf:6f:9f:
                    d2:88:08:30:75:2d:6d:ec:a5:b9:91:00:ea:a4:40:
                    b8:b7:4b:cc:c8:d9:e3:c2:e3:47:b6:aa:56:35:0c:
                    dd:c3:f1:a4:28:30:cb:83:c7:67:78:8a:eb:c8:7d:
                    11:6b:0a:70:28:2d:81:d5:b3:78:06:69:9e:48:d2:
                    c2:f3:3c:da:63:fb:99:98:50:da:41:61:62:d2:e5:
                    c3:66:49:1d:2e:56:a3:f6:d5:fc:64:be:25:e6:74:
                    b6:58:2f:1b:cd:17:1b:9f:b2:c8:e0:d0:b6:e8:0a:
                    85:9a:8f:f6:b8:49:8c:a4:d2:7d:f9:d9:bf:56:32:
                    b6:c5:54:f1:da:86:bf:01:29:27:70:3a:63:a7:5e:
                    1d:2a:c7:6c:74:b3:9f:f2:f1:6a:23:a6:4c:17:f8:
                    c8:cb:dc:29:c3:20:3a:a5:07:70:3e:29:30:c0:18:
                    18:3b:cf:a0:47:ec:56:f4:25:bc:73:be:8c:1b:66:
                    01:47:11:dd:51:e2:6e:cf:20:14:1d:a1:54:ae:06:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6D:10:C0:37:BB:DE:31:94:A0:55:6C:7D:93:D2:FA:2F:CE:CA:D4
            X509v3 Authority Key Identifier:
                keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/87FEDB446B9B11F1A0F959156D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b6a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:65:18:c3:28:fa:f0:23:68:1b:63:1a:1d:00:99:9c:c6:20:
         cb:5d:ad:4a:8a:4e:92:5b:a6:7f:35:34:40:4d:b3:16:04:df:
         bf:13:6b:8a:b8:24:5a:18:9c:51:bb:fb:1a:3b:07:f6:e8:0d:
         7f:57:cb:4a:2f:84:66:d8:1d:d9:24:ec:58:1d:ec:3b:a2:67:
         77:52:d6:f2:98:5f:5a:40:29:ba:2d:af:1f:4d:44:4d:45:cb:
         8c:df:f3:13:df:cf:e0:37:74:c2:ed:65:08:92:4b:5a:83:5b:
         7b:51:2a:46:a1:6c:c4:87:bc:05:00:66:a0:3b:3c:ea:95:33:
         53:93:96:ff:b7:ab:05:82:68:8c:f8:f0:fe:20:7c:dd:ee:17:
         b4:02:d5:f2:02:fb:f5:6b:a3:fd:23:22:81:04:00:de:ac:4f:
         c9:e1:20:1f:b3:07:f0:4f:c1:52:f1:50:f1:8e:59:7e:9d:26:
         31:e8:d2:46:92:5d:95:ac:a8:31:0f:57:97:f2:6f:78:85:0c:
         03:5a:f8:23:a2:50:d9:58:27:ac:79:4c:0c:af:77:32:11:15:
         e5:f7:33:6a:6a:06:89:0f:09:f4:91:b4:d7:82:13:27:89:29:
         0b:cd:fe:1e:70:83:67:c9:c6:fa:1e:68:55:37:72:5e:e3:61:
         c3:71:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:22:45 2026 by rpki-client