Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa
File:                     62CDEE42941F11EEA7C3E86FC4F9AE02.roa (raw, json)
Hash identifier:          azInidenMOueD30As1H+RBAKXgDG+VqWECAoFhqLl5M=
Subject key identifier:   A2:74:6B:A9:28:60:ED:B1:D0:98:6D:AD:57:65:B8:0A:BC:7A:5B:94
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       09AC
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa
Signing time:             Wed 08 Jul 2026 21:22:18 +0000
ROA not before:           Wed 08 Jul 2026 21:22:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     398109
IP address blocks:        2406:f380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2476 (0x9ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Jul  8 21:22:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4ebf89-2e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:e2:81:f4:72:df:03:27:76:3d:af:91:d5:
                    dd:72:57:56:7b:1c:93:66:03:09:e0:f0:14:b6:6b:
                    51:b8:2e:c1:62:34:ed:b0:18:60:fe:7d:21:5d:2f:
                    e2:28:2d:fb:d9:c0:c2:03:3b:4c:bb:dc:ac:fc:a1:
                    e6:5f:d7:c4:ea:99:31:5c:97:ac:ef:d9:d4:42:33:
                    20:91:3d:5c:2c:41:11:75:94:7f:54:ea:b7:32:8a:
                    11:43:c2:7c:a9:dc:f4:51:6a:2a:7a:88:54:0c:ee:
                    40:c1:88:7f:cf:91:6a:f2:14:3d:8f:84:7a:dc:fc:
                    0c:62:fe:14:02:9f:1c:41:0a:42:12:56:18:c0:90:
                    62:4c:a4:e0:a0:76:37:61:f8:bc:07:ba:e4:b4:1e:
                    29:87:95:76:08:45:56:36:3a:40:a3:41:f5:9e:83:
                    46:cf:3a:8c:41:75:7d:52:05:66:17:4d:1d:b5:f7:
                    2f:ab:74:b9:03:7f:19:65:37:e5:86:9c:ac:52:77:
                    00:72:35:c0:7e:c2:20:27:eb:8a:b9:cd:cb:c0:44:
                    18:b6:e7:5c:cb:79:9d:04:fd:0f:4d:88:25:2f:85:
                    4c:1e:5e:29:72:fc:bb:fa:14:27:1f:0e:d8:9a:58:
                    2e:50:e6:9b:af:f0:dc:ab:8c:b4:af:17:ca:c5:2a:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:6B:A9:28:60:ED:B1:D0:98:6D:AD:57:65:B8:0A:BC:7A:5B:94
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/62CDEE42941F11EEA7C3E86FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f380::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:81:7f:ba:9e:d0:ed:2b:4a:71:fe:35:e2:2b:71:ad:e2:15:
         69:53:5b:a1:b5:4b:f1:4a:01:61:c7:5a:b9:57:bf:ae:28:43:
         01:7b:40:67:ff:36:c2:5a:d3:28:5f:e7:bd:9e:cd:a3:eb:12:
         d4:9e:00:a5:37:4a:b1:c4:a5:b1:2d:73:97:40:de:b1:84:a8:
         9c:f2:40:49:83:2e:79:e1:d5:a8:82:52:ca:38:c9:a9:ee:b7:
         dd:e5:98:18:17:d8:8d:43:e6:aa:f1:b0:ad:fa:56:74:96:88:
         ec:2c:dd:31:c7:19:18:f6:e1:ee:f5:9d:0d:eb:64:da:c7:ea:
         1b:57:a8:07:7d:94:8b:f0:57:13:4e:6c:a4:2b:02:33:8d:25:
         73:08:3c:d7:cf:6a:39:78:9a:07:4b:dd:e7:d5:a1:91:5b:16:
         82:69:77:3e:34:c6:1a:0b:15:55:05:65:3c:f5:85:fc:f2:ea:
         ae:8c:c6:ae:99:cb:2c:f1:5a:5f:4a:e7:62:ea:46:ae:37:a9:
         e6:34:d4:1c:20:ce:27:35:24:dd:19:ca:9c:80:ef:51:58:62:
         10:84:53:69:ba:10:3b:52:aa:40:a0:25:a4:66:d2:2a:60:75:
         d6:c0:c4:de:b8:b8:45:0e:94:d8:39:3f:fd:e4:5f:4c:28:a9:
         8e:12:e9:27
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICCawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdDNEMxMTAvBgNVBAUTKDJBOUFFRjZCQzEyOTkxNENBMEI5MTA1QzkyNzFERUFG
MzlEQkM4NjYwHhcNMjYwNzA4MjEyMjE4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRlYmY4OS0yZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxHigfRy3wMndj2vkdXdcldWexyTZgMJ4PAUtmtRuC7BYjTtsBhg/n0hXS/i
KC372cDCAztMu9ys/KHmX9fE6pkxXJes79nUQjMgkT1cLEERdZR/VOq3MooRQ8J8
qdz0UWoqeohUDO5AwYh/z5Fq8hQ9j4R63PwMYv4UAp8cQQpCElYYwJBiTKTgoHY3
Yfi8B7rktB4ph5V2CEVWNjpAo0H1noNGzzqMQXV9UgVmF00dtfcvq3S5A38ZZTfl
hpysUncAcjXAfsIgJ+uKuc3LwEQYtudcy3mdBP0PTYglL4VMHl4pcvy7+hQnHw7Y
mlguUOabr/Dcq4y0rxfKxSq6KQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFKJ0a6ko
YO2x0JhtrVdluAq8eluUMB8GA1UdIwQYMBaAFCqa72vBKZFMoLkQXJJx3q8528hm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0M0Qy9DQ0IyMDM1NEI5
RTIxMUVBQkM1NTRCODNDNEY5QUUwMi9LcHJ2YThFcGtVeWd1UkJja25IZXJ6bmJ5
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0twcnZhOEVwa1V5Z3VSQmNrbkhlcnpuYnlHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDdDNEMvQ0NCMjAzNTRCOUUyMTFFQUJDNTU0QjgzQzRGOUFFMDIvNjJDREVFNDI5
NDFGMTFFRUE3QzNFODZGQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAbzgDANBgkqhkiG9w0BAQsFAAOCAQEAB4F/up7Q7StKcf414itx
reIVaVNbobVL8UoBYcdauVe/rihDAXtAZ/82wlrTKF/nvZ7No+sS1J4ApTdKscSl
sS1zl0DesYSonPJASYMueeHVqIJSyjjJqe633eWYGBfYjUPmqvGwrfpWdJaI7Czd
MccZGPbh7vWdDetk2sfqG1eoB32Ui/BXE05spCsCM40lcwg8189qOXiaB0vd59Wh
kVsWgml3PjTGGgsVVQVlPPWF/PLqrozGrpnLLPFaX0rnYupGrjep5jTUHCDOJzUk
3RnKnIDvUVhiEIRTaboQO1KqQKAlpGbSKmB11sDE3ri4RQ6U2Dk//eRfTCipjhLp
Jw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:26 2026 by rpki-client