Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/4D0CE5E2707011F1821CCDE576A30FBC.roa
File:                     4D0CE5E2707011F1821CCDE576A30FBC.roa (raw, json)
Hash identifier:          k8rAQNqq8sWrzsdiI+Wr1tNTCkuJZjz1VkVrhy0zp1g=
Subject key identifier:   AD:CE:94:60:A5:69:58:D4:63:FC:2E:49:73:D0:F7:1B:6D:52:14:05
Certificate issuer:       /CN=A915CCEA/serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
Certificate serial:       0A51
Authority key identifier: 86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/4D0CE5E2707011F1821CCDE576A30FBC.roa
Signing time:             Thu 10 Sep 2026 20:40:31 +0000
ROA not before:           Thu 10 Sep 2026 20:40:31 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     5400
IP address blocks:        2402:fb00:8000::/39 maxlen: 39
                          2402:fb00:8400::/39 maxlen: 39
                          2402:fb00:8800::/40 maxlen: 40
                          2402:fb00:c000::/39 maxlen: 39
                          2402:fb00:c200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl
                          rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CCEA, serialNumber=862B73B9CE3504B0BA241D14FDAC0EC4B4E4ADC2
        Validity
            Not Before: Sep 10 20:40:31 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa315bf-329c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8f:b0:b5:6c:1a:6a:87:57:4e:21:39:6d:4c:
                    b1:6b:ec:85:18:e5:c6:46:e2:59:e1:b7:3a:32:d7:
                    18:3c:45:6c:a5:c7:d8:88:05:68:9e:4c:bc:bc:15:
                    63:41:9d:8a:b6:9c:fa:57:6e:d0:26:98:15:d5:9d:
                    5c:b1:96:06:6a:6c:2e:7f:10:7c:18:ba:5a:be:0c:
                    08:17:2c:92:cf:c0:db:02:32:0f:86:49:ca:84:56:
                    c3:fd:87:45:34:c5:d5:59:16:ea:b4:2c:bd:e9:90:
                    d8:7f:8e:12:ef:33:81:19:7f:ea:20:d6:a7:b2:1f:
                    aa:6a:da:ca:76:4f:ba:9e:83:3d:b6:09:e4:13:bc:
                    42:64:3b:aa:42:da:ea:7d:04:9f:97:0c:8b:11:7d:
                    ba:13:37:0c:12:b0:70:c7:8d:00:f4:4f:46:f9:00:
                    cd:54:3b:66:33:a7:b7:33:e3:a5:67:a6:e2:c5:34:
                    87:80:30:7c:a1:84:9c:57:d1:de:ef:fb:22:90:b5:
                    68:74:2b:86:29:e3:b7:32:e5:58:a9:a3:00:c1:0b:
                    f2:54:82:ef:cf:40:79:29:c2:c4:e4:7d:47:db:ee:
                    4d:1d:86:32:c0:50:5f:a9:8e:8d:a8:fb:20:70:5f:
                    6f:20:8e:d2:b3:e1:a3:df:68:66:f4:f9:1f:36:e5:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:94:60:A5:69:58:D4:63:FC:2E:49:73:D0:F7:1B:6D:52:14:05
            X509v3 Authority Key Identifier:
                keyid:86:2B:73:B9:CE:35:04:B0:BA:24:1D:14:FD:AC:0E:C4:B4:E4:AD:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/hitzuc41BLC6JB0U_awOxLTkrcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hitzuc41BLC6JB0U_awOxLTkrcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CCEA/406EF178A0C311EA8764236FC4F9AE02/4D0CE5E2707011F1821CCDE576A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:fb00:8000::/39
                  2402:fb00:8400::/39
                  2402:fb00:8800::/40
                  2402:fb00:c000::/38

    Signature Algorithm: sha256WithRSAEncryption
         22:bb:d4:84:2c:65:99:0e:00:96:be:fa:31:64:fa:16:5a:5f:
         c4:67:d3:99:15:c1:09:b7:a0:04:c8:30:4a:8f:f8:cd:0f:95:
         d3:60:e2:54:08:f9:2d:eb:97:c1:c4:9a:1a:ce:0e:03:a2:57:
         98:1b:2f:3e:0f:7e:5b:ea:eb:88:f3:89:29:94:63:ad:da:47:
         af:7a:e9:9c:cb:9d:fb:77:7d:49:9e:51:05:d2:e0:ff:f8:c1:
         16:e8:bc:4e:09:70:af:b1:a1:ab:43:0d:36:93:4f:ee:3c:18:
         ca:e4:40:c7:cd:69:78:b5:78:5e:f8:61:00:ca:47:97:f9:06:
         f8:bc:de:00:67:2f:3b:3e:1e:2a:2f:0b:ac:09:57:5e:ad:f1:
         28:ee:c4:f2:72:0a:2a:9f:ea:2a:20:20:d7:1d:67:21:7f:08:
         ad:dd:b3:15:61:f0:b9:d7:6f:07:85:55:f9:c0:a7:08:d8:6c:
         05:ef:0d:ad:12:9f:2f:f7:8c:41:7b:45:d1:75:da:3a:c4:eb:
         25:de:9c:c1:b7:83:00:f3:ea:0f:84:72:45:47:f9:f7:92:87:
         63:96:52:ee:32:7b:25:0b:b7:34:39:5d:8d:80:11:a9:e3:fa:
         76:e2:e9:4a:14:38:66:91:6e:e9:4d:20:6d:09:2a:59:e3:87:
         c7:15:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:47:19 2026 by rpki-client