Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
File:                     6307B34A7CAD11EE9E7B9434C4F9AE02.roa (raw, json)
Hash identifier:          YZqWi1U9utqk5ggFE8PV/hY64JnDm5CAhjyQ9TiQblI=
Subject key identifier:   8A:34:F7:ED:59:A8:02:53:EA:BA:7B:2C:DE:BE:97:AF:86:FC:95:91
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       020C
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa
Signing time:             Sat 11 Jul 2026 04:30:12 +0000
ROA not before:           Sat 11 Jul 2026 04:30:12 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        2400:9460::/32 maxlen: 32
                          2400:9461::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Jul 11 04:30:12 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a51c6d4-9f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:34:6e:38:4d:f0:9a:cd:20:75:89:98:84:
                    bc:00:52:17:40:c3:90:a0:97:d0:b1:73:26:91:32:
                    74:21:0c:74:43:5d:3d:20:e7:ee:0a:96:3e:1e:41:
                    5a:c0:2e:b6:30:67:66:6f:5a:ec:71:cd:cb:5e:6d:
                    8e:da:4f:33:33:86:5d:38:84:36:49:6f:b5:a3:2c:
                    61:18:13:b5:94:99:ca:e9:f3:aa:f6:62:9b:68:70:
                    59:07:c1:fe:7f:33:51:05:8d:5f:9e:6b:f7:40:ef:
                    f1:b4:27:6c:fa:04:3f:3c:da:a4:18:b7:40:61:95:
                    a4:e7:7d:7d:bd:85:ca:21:4a:b4:b9:32:d9:ca:68:
                    e3:0a:81:af:97:db:3f:1e:8e:c2:79:c7:ad:cb:c6:
                    0b:bc:1f:b2:c0:30:0f:c9:75:28:19:86:5c:97:1b:
                    bd:36:7c:fb:07:19:f5:b1:e6:16:88:c9:c9:09:5d:
                    09:07:84:f5:5d:e4:f1:b7:81:d5:af:3a:58:8e:8f:
                    e3:96:81:05:c3:dc:36:a4:bc:8a:6f:7f:ca:fd:1d:
                    f5:fa:f7:e8:c3:b1:88:69:a9:b8:9e:86:14:09:32:
                    55:ad:46:75:66:65:a9:07:04:b2:76:67:77:41:b6:
                    16:7e:11:11:38:a0:43:ba:92:6a:69:45:6e:93:4e:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:34:F7:ED:59:A8:02:53:EA:BA:7B:2C:DE:BE:97:AF:86:FC:95:91
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/6307B34A7CAD11EE9E7B9434C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9460::/31

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:98:06:ee:75:98:e8:b3:05:33:5b:09:3f:3f:e7:40:97:
         57:2c:35:fa:a8:4c:5a:12:59:3c:4c:cb:62:77:89:a1:64:ad:
         d4:c9:77:14:fd:25:c0:64:61:6c:f5:a8:70:8e:21:8a:57:9b:
         02:4f:5d:51:de:37:9c:65:d9:8f:be:6b:7c:c5:35:36:98:38:
         1b:ac:2e:07:6a:ef:e5:90:a9:1b:f8:5d:38:ea:5c:44:26:a0:
         71:1c:20:4b:cb:14:24:69:0e:90:14:2e:85:8a:31:b6:2e:96:
         70:c8:67:de:28:48:08:71:ea:36:c6:81:0a:24:61:9b:ea:d9:
         91:98:da:d8:0c:72:d4:5f:7d:99:66:68:30:5d:58:e0:78:c4:
         72:4a:33:84:bf:1c:b6:25:c4:bd:bf:99:e5:e8:10:29:23:4b:
         1e:ba:91:d9:cf:f1:e0:58:f3:b5:96:db:77:e8:fb:b2:3e:60:
         77:15:8a:0a:c8:36:8d:b6:50:13:dc:7b:c7:2f:94:20:96:47:
         45:b9:e4:32:b9:ec:19:0e:d2:ae:6a:dc:56:11:0f:d7:2f:ef:
         95:0a:ac:97:cb:ea:0a:d4:90:70:38:dc:8e:47:1c:5d:fa:9e:
         66:64:57:81:e0:15:af:53:14:6e:f9:c8:f2:4e:a5:22:0d:20:
         2b:83:ae:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:00 2026 by rpki-client