Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/309C7686B90211F18AB080104211F970.roa
File:                     309C7686B90211F18AB080104211F970.roa (raw, json)
Hash identifier:          aJrb3F5xvyBhiEWCx7najd5VEtTU2x7VVj/eyuuOU5k=
Subject key identifier:   11:AC:98:31:E3:54:80:C0:39:71:8E:84:6D:26:F8:18:DD:A4:44:E3
Certificate issuer:       /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Certificate serial:       1BC2
Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/309C7686B90211F18AB080104211F970.roa
Signing time:             Fri 25 Sep 2026 16:57:28 +0000
ROA not before:           Fri 25 Sep 2026 16:57:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     22061
IP address blocks:        2400:cb00:1492::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7106 (0x1bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
        Validity
            Not Before: Sep 25 16:57:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ab6a7f8-2786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:7c:6d:2a:35:56:e4:96:ff:58:27:99:0b:
                    7e:30:5d:d6:9f:d0:3c:60:3d:63:76:cd:ef:af:c6:
                    11:32:d8:c0:77:5c:7e:0c:47:e0:e5:1d:aa:20:a0:
                    ce:93:1b:cb:98:f5:4e:9a:03:34:34:30:1a:47:b6:
                    b4:3b:04:ee:89:09:05:9d:6f:a4:4c:1c:da:40:61:
                    00:6d:60:69:51:6e:c5:e6:21:90:fc:9f:cd:c7:27:
                    21:e6:3f:f8:44:9b:a2:fa:d3:4d:78:cf:cb:7b:c4:
                    fa:3f:5a:5f:c3:85:85:ae:06:a7:2f:83:1e:c5:02:
                    6d:d5:4e:70:58:52:5a:ac:ba:51:66:0a:c5:3a:a8:
                    f3:95:e8:0a:f2:1c:48:b7:51:77:d9:ef:94:ea:7b:
                    b8:dd:be:15:14:1a:d3:6f:3f:b8:d3:9b:f6:e2:d6:
                    af:8b:0d:03:7d:08:05:b0:b2:f6:54:07:fb:cd:ef:
                    eb:57:17:0a:ca:86:11:63:eb:88:3d:fa:a5:31:37:
                    62:44:4a:e5:20:1c:cd:6c:31:68:bc:94:34:00:7e:
                    28:fb:e9:00:58:03:39:a4:1a:23:76:a9:50:62:86:
                    0a:ad:97:f9:48:ab:43:fb:d4:7b:b4:1d:ac:19:08:
                    45:60:46:13:82:78:52:df:c7:be:9d:d9:20:56:9f:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:98:31:E3:54:80:C0:39:71:8E:84:6D:26:F8:18:DD:A4:44:E3
            X509v3 Authority Key Identifier:
                keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/309C7686B90211F18AB080104211F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:cb00:1492::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:11:c3:d0:95:ea:ca:6d:49:5f:9c:f1:d7:94:fd:ab:18:ae:
         3f:e4:d8:d4:b8:d3:0e:2b:21:cc:7b:30:7b:26:b5:1e:75:10:
         10:c7:e7:08:30:1a:90:68:62:5e:ac:69:b8:e4:72:af:40:51:
         3f:c1:a7:45:ef:2f:dc:f8:4a:b5:ee:ef:90:91:85:77:a6:88:
         05:c4:77:db:e3:13:50:b2:88:47:47:a9:28:2e:a3:08:3b:fd:
         18:3a:1a:54:d9:b0:69:b0:29:c1:c5:df:dc:e9:3d:75:5f:f0:
         bf:88:0b:5d:ff:25:5f:be:fb:cb:d0:0f:b6:f1:3c:a9:b7:13:
         87:1d:68:f8:05:7c:9a:c2:a9:29:b1:ca:ed:98:8b:d7:24:39:
         4e:51:79:4d:69:1b:c7:46:8e:19:4f:d7:dc:55:e7:2a:2b:f9:
         f3:9e:fa:66:63:f1:19:7a:65:8e:83:03:6a:a2:55:f4:f0:15:
         9e:19:52:42:77:20:f4:86:a5:6f:4f:9e:57:17:d7:66:08:4c:
         05:fb:5b:62:f1:4c:3f:bf:cb:42:9d:6a:1e:bb:d8:96:8c:63:
         fd:bc:19:a0:29:ae:81:36:86:cd:23:39:12:eb:dc:a6:ea:a2:
         4f:71:3e:06:c5:e5:6f:64:66:66:9a:3e:4a:f7:01:02:66:05:
         f9:59:f4:fa
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICG8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4
NTQwNjY0NDQwHhcNMjYwOTI1MTY1NzI4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI2YTdmOC0yNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjKJ8bSo1VuSW/1gnmQt+MF3Wn9A8YD1jds3vr8YRMtjAd1x+DEfg5R2qIKDO
kxvLmPVOmgM0NDAaR7a0OwTuiQkFnW+kTBzaQGEAbWBpUW7F5iGQ/J/Nxych5j/4
RJui+tNNeM/Le8T6P1pfw4WFrganL4MexQJt1U5wWFJarLpRZgrFOqjzlegK8hxI
t1F32e+U6nu43b4VFBrTbz+405v24taviw0DfQgFsLL2VAf7ze/rVxcKyoYRY+uI
PfqlMTdiRErlIBzNbDFovJQ0AH4o++kAWAM5pBojdqlQYoYKrZf5SKtD+9R7tB2s
GQhFYEYTgnhS38e+ndkgVp9znQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBGsmDHj
VIDAOXGOhG0m+BjdpETjMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx
QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvMzA5Qzc2ODZC
OTAyMTFGMThBQjA4MDEwNDIxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJADLABSSMA0GCSqGSIb3DQEBCwUAA4IBAQCAEcPQlerKbUlfnPHX
lP2rGK4/5NjUuNMOKyHMezB7JrUedRAQx+cIMBqQaGJerGm45HKvQFE/wadF7y/c
+Eq17u+QkYV3pogFxHfb4xNQsohHR6koLqMIO/0YOhpU2bBpsCnBxd/c6T11X/C/
iAtd/yVfvvvL0A+28TyptxOHHWj4BXyawqkpscrtmIvXJDlOUXlNaRvHRo4ZT9fc
VecqK/nznvpmY/EZemWOgwNqolX08BWeGVJCdyD0hqVvT55XF9dmCEwF+1ti8Uw/
v8tCnWoeu9iWjGP9vBmgKa6BNobNIzkS69ym6qJPcT4GxeVvZGZmmj5K9wECZgX5
WfT6
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:50:16 2026 by rpki-client