Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
File:                     6211D40A941F11EEA7C3E86FC4F9AE02.roa (raw, json)
Hash identifier:          SHeprPzbCJK7OlueBAVX3hu432Pz3KHbWo2lGdKMTQE=
Subject key identifier:   04:22:68:AE:D5:BB:A7:53:60:D5:E5:8B:25:5B:4F:62:D5:3C:34:68
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       09AA
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa
Signing time:             Wed 08 Jul 2026 21:22:13 +0000
ROA not before:           Wed 08 Jul 2026 21:22:13 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     26496
IP address blocks:        2406:f380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474 (0x9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Jul  8 21:22:13 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4ebf85-17e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:32:eb:19:5b:2f:33:c1:f5:18:c6:0a:65:
                    38:59:38:3b:4e:1e:fb:c1:3f:7a:0b:38:f6:69:b8:
                    de:c2:91:27:e1:f3:e5:10:fc:28:1d:0f:5f:40:44:
                    34:24:48:35:b7:e1:05:07:1d:ac:5b:ec:30:d6:51:
                    a6:59:e3:7e:f8:58:5b:c7:39:01:ac:1b:2d:3e:ae:
                    97:51:96:c9:4e:58:16:36:14:c6:f7:1a:c1:d7:26:
                    45:63:d9:d0:5b:11:cd:d9:20:ed:54:52:cb:da:7a:
                    26:e4:a6:12:21:bb:5e:30:9f:66:e2:20:df:5f:62:
                    f0:93:6e:f2:07:a8:92:01:48:94:a6:cf:96:f4:16:
                    63:68:5d:8d:c6:78:6d:8e:02:46:50:76:d5:d9:15:
                    d1:40:d4:e6:47:6b:f0:92:7a:c4:59:c7:18:01:47:
                    a7:ad:9b:2a:20:e4:a1:7c:75:bb:01:38:02:b6:8e:
                    94:e7:6b:a0:f8:97:8b:78:d2:19:d3:8b:ed:da:f7:
                    31:b7:5c:42:a9:ec:1d:bd:4a:c1:e6:3e:fa:07:4a:
                    4d:fe:f4:68:ea:92:88:0f:02:90:db:e5:4c:05:e5:
                    dc:aa:be:ce:0a:61:e4:08:b8:9e:a7:e5:3f:ee:d0:
                    9c:64:c1:bb:70:e2:18:6d:35:8c:f5:09:31:97:31:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:22:68:AE:D5:BB:A7:53:60:D5:E5:8B:25:5B:4F:62:D5:3C:34:68
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/6211D40A941F11EEA7C3E86FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f380::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:c7:43:64:4c:10:32:2b:66:f0:20:36:89:04:a3:c9:4e:57:
         76:fd:a8:63:6b:6d:4a:cb:d2:81:25:b1:f3:45:22:d0:bb:f8:
         f1:46:62:99:e9:31:41:7a:43:ae:de:9c:c2:40:83:aa:6d:6d:
         66:c6:7d:a0:1c:c1:4d:3b:cb:8b:57:65:03:96:e2:90:16:a7:
         49:24:35:81:6c:b6:2a:b0:72:7b:a6:4d:b0:b8:fb:e7:0d:61:
         86:96:ad:17:af:72:b0:e7:07:d3:3e:a1:c2:8f:b0:9a:dc:86:
         b3:75:4c:90:04:ef:a5:47:be:77:e6:ef:76:27:d1:c3:ff:7e:
         0f:84:3b:71:82:7b:4c:ae:a6:4c:96:17:dd:53:e5:26:70:f7:
         5f:97:26:bc:cd:d3:21:df:a2:47:48:94:ea:02:ee:96:a1:45:
         07:b8:84:bd:4a:5a:38:a1:37:47:8f:ed:6c:0c:fe:c2:12:ee:
         11:20:7a:3c:0a:a1:5f:d2:d6:8c:77:e9:8a:1e:15:23:01:99:
         f3:98:d6:1e:33:3c:49:45:47:e0:5c:08:20:d6:ad:61:78:06:
         cb:40:ea:b9:89:0e:82:ed:25:69:b8:2b:ac:2e:6d:b9:04:fc:
         a6:a9:cf:88:93:ea:47:f4:4a:c7:fb:4f:e8:99:4e:3f:88:38:
         56:60:c3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:32 2026 by rpki-client