Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa
File:                     BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (raw, json)
Hash identifier:          sAHUpll1wERzRUhYLElWk5j/ikn2NwO+2ZHNAkpXjyI=
Subject key identifier:   BF:34:46:74:2C:C9:84:BD:8D:CB:88:71:DD:F0:29:D6:3D:66:9B:64
Certificate issuer:       /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Certificate serial:       113E
Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa
Signing time:             Thu 24 Sep 2026 17:34:32 +0000
ROA not before:           Thu 24 Sep 2026 17:34:32 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134707
IP address blocks:        2406:a240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
                          rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4414 (0x113e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918036A, serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
        Validity
            Not Before: Sep 24 17:34:32 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab55f28-1969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:63:5e:c8:75:47:87:00:91:9d:28:a0:93:
                    84:6a:6c:51:da:ac:12:e0:e1:ff:79:e4:76:ae:59:
                    6c:09:a4:0b:27:4f:c5:64:a1:c3:13:c9:62:95:73:
                    e1:e2:1e:2b:f4:0e:5e:b2:83:e6:bb:c0:fb:3b:f0:
                    e3:ae:9f:7b:b0:c5:00:36:cf:54:f5:e4:03:f9:7f:
                    6c:d8:1b:1b:8a:73:b3:39:a9:a8:c9:bf:03:61:37:
                    8e:0d:79:03:f6:f8:95:3b:74:0a:8c:50:9f:38:50:
                    c2:34:87:74:0f:ea:26:83:2b:47:7c:81:0a:c7:4b:
                    00:e6:0d:97:f6:ae:b0:77:12:93:fa:82:7e:8d:eb:
                    cb:da:06:c8:82:07:8e:2b:0f:56:6a:5a:10:19:0e:
                    83:10:6d:cd:fe:cc:89:54:66:03:2d:b2:e9:a2:66:
                    86:b4:f0:fb:7d:c1:c9:ed:8d:56:70:86:cc:b2:a8:
                    12:c0:e4:40:8f:50:65:c5:af:0d:52:24:05:85:f3:
                    ba:6a:32:0a:07:01:17:4a:fd:37:90:52:86:c8:3a:
                    c6:15:d4:14:ec:a0:86:c0:34:75:9d:41:b8:ec:42:
                    16:24:65:de:12:52:4f:f5:55:7e:fb:42:db:0a:22:
                    a8:1a:d5:43:c3:65:10:ae:48:fb:18:14:73:e5:88:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:34:46:74:2C:C9:84:BD:8D:CB:88:71:DD:F0:29:D6:3D:66:9B:64
            X509v3 Authority Key Identifier:
                keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a240::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:a9:85:4d:76:2c:9a:75:22:ef:9b:70:0d:a1:2f:c8:05:38:
         08:d8:38:03:34:61:14:69:55:86:57:58:c8:34:89:3a:3f:7a:
         18:1e:62:37:5e:39:40:d2:d2:d5:82:f4:45:b7:f9:82:50:53:
         36:c9:3c:11:a4:e4:44:25:68:05:c0:73:10:35:0a:71:0a:07:
         e0:fa:7c:90:a0:c5:b0:f1:bf:b9:97:83:fe:55:2e:74:cf:b8:
         d4:32:2a:7e:2a:85:5b:b5:98:87:cb:b2:87:e0:66:26:54:1b:
         79:52:b3:60:29:3e:13:9e:fc:e3:4c:6a:fc:73:6b:44:28:22:
         67:8c:4a:c1:ba:92:74:86:fb:a9:73:92:c0:77:15:ce:2c:b8:
         95:6e:ca:6e:8c:7b:52:9c:47:17:bd:15:1d:bc:5a:e5:55:de:
         17:4c:64:21:91:55:f8:f4:3f:83:3b:db:35:46:3b:95:88:6c:
         56:00:72:2d:40:1a:c7:d4:41:c3:c1:dc:87:d5:c1:1a:c7:b9:
         a7:25:c2:f7:85:3a:49:27:42:0f:e3:47:2e:1d:9b:86:1a:57:
         46:12:a3:88:f8:28:56:0f:c3:89:2c:9e:9e:73:30:a3:ca:33:
         a2:52:fe:fa:cf:f9:73:bf:7f:17:2d:d0:04:0b:18:1e:2f:43:
         0e:14:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:15:09 2026 by rpki-client