Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/3CBCF5BED6D911F0B064CD5C85D3641D.roa
File:                     3CBCF5BED6D911F0B064CD5C85D3641D.roa (raw, json)
Hash identifier:          sM6CeOH9Bgvv3iRWHhGYzH5sAI6j1iD3slAlqraB/mI=
Subject key identifier:   0D:F7:AC:B9:99:94:42:DD:B0:E1:90:93:B4:31:69:BE:F0:64:05:EA
Certificate issuer:       /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Certificate serial:       53
Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/3CBCF5BED6D911F0B064CD5C85D3641D.roa
Signing time:             Tue 05 May 2026 08:42:13 +0000
ROA not before:           Tue 05 May 2026 08:42:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     174
IP address blocks:        2402:4480::/33 maxlen: 33
                          2402:4480:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
                          rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
        Validity
            Not Before: May  5 08:42:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f9ad65-5b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:92:ef:48:fd:96:90:67:26:33:1e:e9:0a:
                    e1:71:75:33:2a:91:e6:0d:e0:ea:89:ac:dc:c9:e1:
                    fe:7c:5c:b2:93:c0:d0:a6:88:e7:e7:66:22:85:2e:
                    82:27:8d:11:04:39:5e:37:27:fb:26:bb:33:4b:d6:
                    92:d1:5c:c3:e0:95:07:e7:88:38:99:31:dd:35:48:
                    63:43:2b:f8:49:ba:26:9a:47:b9:d1:12:64:41:db:
                    2a:2c:4c:68:d2:ab:a5:f5:54:a9:4a:56:9b:ea:48:
                    c8:82:35:fc:70:8f:f4:c4:29:d4:9a:15:4e:f8:e9:
                    b0:69:01:84:77:3f:bb:b9:f2:bd:96:ef:64:0c:fd:
                    6b:a5:66:02:3c:49:b7:12:f8:aa:9b:9d:8e:83:01:
                    92:c9:51:05:75:b2:79:53:ea:0b:63:70:df:33:14:
                    53:4c:da:f9:3e:80:12:5d:85:42:b3:40:ec:fb:ba:
                    42:04:a6:44:82:64:08:64:3c:76:69:97:5d:97:f7:
                    3c:df:a3:5a:48:38:32:a3:e5:31:25:4e:4a:d0:92:
                    c3:94:ad:1f:de:7c:bf:0f:f4:cc:85:ee:17:38:c3:
                    78:9b:85:e7:7c:4a:98:5a:7a:e6:14:99:34:e0:c2:
                    f5:ff:84:29:0f:4c:96:3b:62:34:b5:c4:50:ab:9f:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F7:AC:B9:99:94:42:DD:B0:E1:90:93:B4:31:69:BE:F0:64:05:EA
            X509v3 Authority Key Identifier:
                keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/3CBCF5BED6D911F0B064CD5C85D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4480::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:49:a3:1c:1e:2e:bb:26:09:02:f7:85:14:8f:56:0f:23:f0:
         c6:54:ba:c8:2f:e2:a9:fb:0f:b8:41:7b:be:ea:8c:6a:41:c3:
         5f:1e:f2:b2:64:e5:06:b9:dc:2b:8c:5b:8d:b1:40:41:a2:9e:
         a6:22:cd:e9:84:55:34:dc:29:c1:f0:eb:f9:71:a0:aa:58:36:
         df:48:d9:02:7a:21:9d:93:ee:cd:22:ef:b3:18:28:45:fb:5b:
         af:ac:22:2d:40:1d:53:d7:a5:4d:16:f2:30:f8:bc:26:c9:9b:
         fc:e0:bd:f5:d4:cb:6b:ed:c1:81:a3:8c:b2:0f:c7:db:5d:f8:
         84:ff:5d:cf:a1:47:b6:56:2f:f0:e4:a9:b0:82:12:ba:92:c4:
         4f:0c:fc:49:d9:10:cc:c2:c5:5e:0b:d9:44:b3:61:81:35:f4:
         e8:4c:2e:7a:96:6a:2a:eb:98:23:98:ae:62:3a:4c:16:aa:9a:
         db:e6:73:dc:38:27:3c:73:f6:87:b2:e9:9d:76:a4:4f:ef:a5:
         04:77:8a:48:af:37:cb:99:ef:17:d3:c7:62:79:f3:19:e5:b4:
         a4:17:95:c9:f5:45:c0:ea:c5:11:33:3b:8f:4c:3c:d2:75:fa:
         cc:97:bf:ea:76:05:26:57:a0:3c:c7:91:f1:d5:cd:9c:11:54:
         24:d9:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:06 2026 by rpki-client