Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/84064494E48F11EF8386EA50C4F9AE02.roa
File:                     84064494E48F11EF8386EA50C4F9AE02.roa (raw, json)
Hash identifier:          LR7RWtzCSkjjwTR1g42dH9tJ5gPluG4/ve6uLIriaRI=
Subject key identifier:   0B:B4:E4:65:B2:C3:D4:64:43:E9:EA:62:98:86:DC:5E:FB:7F:F8:83
Certificate issuer:       /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial:       1E73
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/84064494E48F11EF8386EA50C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:29:55 +0000
ROA not before:           Wed 30 Sep 2026 16:29:55 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     149844
IP address blocks:        2406:d00:ccc4::/48 maxlen: 48
                          2406:d00:ccc5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7795 (0x1e73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
        Validity
            Not Before: Sep 30 16:29:55 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3902-47d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:89:01:01:17:e6:de:fa:84:a1:a1:88:c2:66:
                    9d:16:a9:8b:28:68:a6:ef:7a:31:0e:52:3d:36:25:
                    4f:a3:41:4a:f5:08:40:97:a5:d8:dc:4d:27:af:56:
                    5a:69:e7:70:7c:08:d8:b9:5e:54:19:a6:4e:d2:92:
                    13:e4:be:ca:36:c7:bb:f9:49:3f:f7:97:3f:b6:8a:
                    81:eb:e5:bd:99:e7:a4:89:b9:03:6d:b2:a3:ee:a7:
                    1b:9f:c3:5a:37:05:1e:b8:3d:cd:f0:6b:ee:11:73:
                    f9:d0:87:3f:da:cf:ad:0f:1e:65:a7:d3:2c:55:cd:
                    68:61:39:9c:01:8b:e5:46:8b:2b:59:fa:39:2d:11:
                    0f:8c:3f:29:e3:32:d2:a5:c5:47:b7:c9:be:b2:2a:
                    01:e2:9e:2b:d3:f4:53:5d:f1:9c:ef:03:a8:15:2e:
                    48:b6:57:04:eb:e7:c5:1b:69:65:e0:2a:d6:c8:a3:
                    87:d3:94:0c:de:09:70:77:8f:3d:bc:4b:c5:0d:2e:
                    f4:9d:44:c1:77:25:e1:7d:18:d6:a8:31:f5:cd:2f:
                    48:d1:d2:08:8e:42:f2:43:d9:bd:0d:28:1d:70:5a:
                    8c:7a:5c:67:19:bb:52:35:6d:c6:eb:79:28:b4:22:
                    3f:1c:2e:28:69:05:8b:aa:97:da:5f:28:7c:40:f5:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B4:E4:65:B2:C3:D4:64:43:E9:EA:62:98:86:DC:5E:FB:7F:F8:83
            X509v3 Authority Key Identifier:
                keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/84064494E48F11EF8386EA50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d00:ccc4::/47

    Signature Algorithm: sha256WithRSAEncryption
         b8:db:68:00:db:3d:31:d5:6c:49:64:58:29:2b:52:4e:6e:5c:
         e6:05:f6:c6:f1:d9:98:41:11:43:5f:a8:2a:d9:39:5d:fb:d2:
         4b:3e:c3:f7:90:e6:0b:2d:36:9f:cf:79:95:e3:0a:01:e6:54:
         10:5a:f8:99:24:de:78:ca:d8:89:87:94:10:72:30:80:7a:1f:
         0b:f5:46:d8:26:8f:be:ad:9d:44:5a:98:5d:b9:b7:6d:34:a5:
         cb:1b:f8:43:62:e4:58:d3:b5:46:13:71:d7:b4:be:3e:b5:58:
         6d:8b:f1:8f:c5:c7:1c:28:1e:7c:20:5e:88:fa:d4:5f:d0:fb:
         e8:f7:91:de:2e:f3:6c:56:25:12:6e:8e:97:94:a7:19:44:31:
         8c:dc:d1:16:ec:9f:8c:ee:d4:28:a4:46:17:9a:d1:f7:8a:3a:
         8e:6b:59:84:42:4d:a0:50:b2:62:6b:e1:c3:4a:16:e8:08:6f:
         df:1a:64:bf:9b:c1:a0:3d:78:98:c2:23:78:87:89:23:4f:93:
         27:35:9c:4b:8c:3a:73:fe:c4:ca:af:73:78:41:03:21:7a:33:
         6f:c9:f0:ed:0a:59:f3:f3:cc:d2:e1:03:ea:2a:e0:9e:5c:49:
         6a:42:fb:3a:c7:67:0d:a7:94:83:45:76:16:4e:76:6e:77:0b:
         bc:67:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:27:52 2026 by rpki-client