Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/95E16734187411F099AC2133C4F9AE02.roa
File:                     95E16734187411F099AC2133C4F9AE02.roa (raw, json)
Hash identifier:          5kAvkiXd0VrwZ3jtx6iRuQ3N6uhhFTy8rHLlpNsn0hI=
Subject key identifier:   94:67:F3:38:C2:26:73:AD:23:00:09:41:1F:75:F7:0A:2B:6C:8B:14
Certificate issuer:       /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial:       014E
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/95E16734187411F099AC2133C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 06:44:40 +0000
ROA not before:           Thu 23 Apr 2026 06:44:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215786
IP address blocks:        2401:f860:9000::/40 maxlen: 40
                          2401:f860:9000::/44 maxlen: 44
                          2401:f860:9010::/44 maxlen: 44
                          2401:f860:9020::/44 maxlen: 44
                          2401:f860:9030::/44 maxlen: 44
                          2401:f860:9040::/44 maxlen: 44
                          2401:f860:9050::/44 maxlen: 44
                          2401:f860:9060::/44 maxlen: 44
                          2401:f860:9070::/44 maxlen: 44
                          2401:f860:9080::/44 maxlen: 44
                          2401:f860:9090::/44 maxlen: 44
                          2401:f860:90a0::/44 maxlen: 44
                          2401:f860:90b0::/44 maxlen: 44
                          2401:f860:90c0::/44 maxlen: 44
                          2401:f860:90d0::/44 maxlen: 44
                          2401:f860:90e0::/44 maxlen: 44
                          2401:f860:90f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
                          rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
        Validity
            Not Before: Apr 23 06:44:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e9bfd8-700d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:b4:56:7a:0f:a0:ca:01:54:28:7d:4e:56:
                    ef:9d:37:43:1e:84:59:33:b3:79:b5:10:79:4e:e9:
                    39:8c:6c:f2:7c:43:4b:c4:99:c8:3f:c3:66:ef:b8:
                    25:0c:ac:1c:a9:1a:67:e6:02:37:bd:f4:a3:5a:12:
                    06:03:9a:3b:99:f2:0c:f7:21:72:b1:0e:a9:f1:18:
                    c4:30:34:93:f7:0c:87:64:3a:1e:76:b7:9d:67:b2:
                    c8:b2:04:9a:07:22:5c:b1:92:09:e1:a7:46:0f:61:
                    4c:d5:9f:4c:93:2f:e9:83:bc:94:df:22:c0:92:2b:
                    0b:94:a8:dc:f6:91:6a:f7:2b:a6:c1:c4:c4:5a:ee:
                    30:6a:4a:82:2f:a6:91:13:e9:68:d8:89:f4:31:c8:
                    d7:d4:e4:d4:77:43:6a:8a:5c:70:f1:5f:f7:f1:29:
                    ff:58:21:5d:61:55:f7:aa:f7:f0:68:e9:72:60:81:
                    25:9c:d4:a9:e0:3a:1b:b6:8c:f5:9c:c3:94:12:7a:
                    89:72:40:c6:98:72:2d:ac:83:34:ff:50:f0:bf:56:
                    6e:52:c5:ae:9a:57:56:b4:9a:e5:14:ad:04:a7:76:
                    6a:9c:7b:b6:5c:e0:17:64:ff:e6:f5:85:2b:b0:5c:
                    ad:56:0f:8a:77:f8:fb:38:0c:37:34:dc:ba:64:cb:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:67:F3:38:C2:26:73:AD:23:00:09:41:1F:75:F7:0A:2B:6C:8B:14
            X509v3 Authority Key Identifier:
                keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/95E16734187411F099AC2133C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f860:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         e3:a8:57:5b:82:b9:d1:23:6a:a2:b4:cf:06:7f:57:df:46:02:
         3c:69:31:e3:a7:8e:e0:78:a0:aa:b2:e1:f0:ce:0d:23:ff:3d:
         cc:4b:86:39:92:dc:5e:6e:5f:06:66:c5:23:b6:fc:29:bd:35:
         d8:bb:66:9e:7c:d4:c4:77:01:3e:e8:0b:c4:7d:ab:9b:6c:9e:
         a2:7d:04:01:b0:48:08:c8:37:1e:50:14:08:4a:1b:25:69:88:
         bd:ab:51:8b:9d:ed:d7:b0:54:7a:0d:bb:5e:92:6e:bb:22:a9:
         11:7c:44:1e:0d:9a:58:49:e7:d1:cc:02:81:80:f7:7d:58:a4:
         12:d5:30:11:86:79:dd:93:da:35:f7:1b:72:d4:1a:83:37:0c:
         b7:77:ca:05:96:00:29:85:d1:66:1a:a3:cd:b3:66:f8:84:dc:
         36:86:24:e9:d2:54:ed:e2:48:fb:42:a3:cd:1a:fe:7e:c7:28:
         d3:80:b5:3b:82:fb:86:02:51:a0:6d:c9:db:5e:ba:a9:78:02:
         43:c7:1f:b1:ed:5c:8e:d0:70:38:c8:ca:74:7c:2a:51:83:1e:
         ef:d1:7f:9b:71:15:fe:6f:5c:f1:d7:d7:2a:f6:77:61:e7:24:
         ef:69:b1:60:92:67:da:f1:55:6a:fd:98:64:ce:8d:6d:7f:dd:
         cf:1e:e5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:59 2026 by rpki-client