Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa
File:                     955C204027D911F183CCD80FA7833773.roa (raw, json)
Hash identifier:          tYXGyBLXGMJ9TEdThJmPAhWV7Kw3QjVCE7lJviid3as=
Subject key identifier:   88:77:A4:2A:2F:10:AC:FB:CC:C2:71:17:FF:30:2A:FA:96:B4:E7:F8
Certificate issuer:       /CN=A916537A/serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
Certificate serial:       03
Authority key identifier: 56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa
Signing time:             Tue 24 Mar 2026 23:31:29 +0000
ROA not before:           Tue 24 Mar 2026 23:31:29 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     38809
IP address blocks:        2400:b300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=56A7321BFC8C3EC2E99160FA333B4F54C182946A
        Validity
            Not Before: Mar 24 23:31:29 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69c31ed1-a4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7c:01:a5:de:78:99:c7:ce:22:ac:a4:03:f4:
                    e6:fb:ee:25:03:8e:d1:9f:9f:80:b6:96:94:4d:4c:
                    c4:3b:ba:54:1e:ca:08:99:6b:e0:52:61:15:3b:23:
                    8b:69:a2:d7:03:8a:f2:96:ee:75:c1:d9:8c:89:60:
                    79:3b:ec:8d:67:c0:f0:69:86:d0:6e:e8:5b:e9:1d:
                    7a:2b:3e:77:ae:cf:72:54:4c:b3:71:5f:85:a4:47:
                    89:9e:8b:32:34:af:85:24:55:c6:62:ad:b1:44:4f:
                    87:16:94:6a:17:bf:5d:43:90:78:1f:3e:b5:99:27:
                    bc:8b:97:51:d0:23:6c:05:7e:14:c2:3c:2e:b9:f3:
                    df:87:26:35:37:3d:32:44:63:bc:92:1e:8a:d0:1f:
                    af:0a:68:2c:d8:80:de:34:3c:80:0f:ae:d7:17:4b:
                    1e:f0:f5:a2:6d:d5:58:31:30:3f:0e:24:b7:c3:cd:
                    58:c2:8c:71:d7:87:09:ed:19:7d:de:a9:79:58:57:
                    60:89:25:09:52:9b:4c:e9:1c:5d:ef:36:48:2f:b1:
                    a2:50:01:6d:57:c3:54:0e:c3:0b:96:1f:07:af:fc:
                    82:39:86:7a:77:cf:b2:40:de:b0:8f:d6:f0:5f:2f:
                    a9:fd:2a:bf:3d:b0:aa:ad:24:9a:e3:6d:d6:eb:ef:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:77:A4:2A:2F:10:AC:FB:CC:C2:71:17:FF:30:2A:FA:96:B4:E7:F8
            X509v3 Authority Key Identifier:
                keyid:56:A7:32:1B:FC:8C:3E:C2:E9:91:60:FA:33:3B:4F:54:C1:82:94:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/VqcyG_yMPsLpkWD6MztPVMGClGo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VqcyG_yMPsLpkWD6MztPVMGClGo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9F817BB6276A11F1A891B17FC2833773/955C204027D911F183CCD80FA7833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:df:16:68:be:aa:8b:2b:23:7c:49:db:f6:90:29:07:0b:4e:
         ff:e5:33:59:b2:71:b1:96:43:e4:f4:50:ad:77:d7:54:d9:0f:
         cc:aa:22:2a:8b:08:6d:f1:f7:da:11:77:bd:d5:b9:8e:70:db:
         a9:23:a7:23:32:c3:e1:2c:f5:1b:ad:28:f9:00:2f:d9:a1:cd:
         8a:48:cb:33:8a:50:c9:46:36:e2:77:b0:04:80:7e:42:8b:f3:
         bb:24:fd:f4:37:bb:fe:f2:a9:66:67:31:14:10:00:99:61:4c:
         13:55:eb:79:04:fb:c6:59:58:17:01:a0:a7:f2:2b:4c:55:ee:
         d3:fa:c8:21:68:63:c6:65:82:00:1f:ae:f8:11:56:e9:79:62:
         c7:8b:2b:75:b1:70:a5:25:be:fe:84:01:be:60:c0:d9:53:46:
         d6:ea:f0:03:ad:fa:74:33:15:38:17:df:02:32:26:a3:85:3f:
         c9:1a:27:34:58:21:aa:5b:4c:b9:42:e3:70:7d:7a:4f:e4:62:
         5a:57:bd:13:f2:10:4b:69:67:25:3e:ab:89:30:90:51:2b:23:
         e3:ae:a7:a2:59:cb:86:37:01:1a:15:3e:5f:21:ad:be:03:df:
         e4:e1:78:7b:cb:a7:81:91:49:87:a1:d8:72:7e:a1:4d:b9:13:
         9f:3f:fd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:01:29 2026 by rpki-client