Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
File:                     2C60C8AAE01111EEA6583A7DC4F9AE02.roa (raw, json)
Hash identifier:          KzpDIugbV8vHQ/gYQ5pO+EKoT/0uahv1Vz2s5knDV8s=
Subject key identifier:   27:A1:F6:4D:73:9B:69:C4:77:99:9D:F0:FD:84:E1:22:1E:52:50:2E
Certificate issuer:       /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
Certificate serial:       0843
Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:44:16 +0000
ROA not before:           Wed 28 Jan 2026 21:17:35 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     23926
IP address blocks:        2406:8600:f040::/48 maxlen: 48
                          2406:8600:f840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl
                          rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184
        Validity
            Not Before: Jan 28 21:17:35 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a45ed0-f507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:c5:62:b2:25:92:4d:67:ff:1e:ec:a6:49:
                    3d:ad:5a:05:c0:b0:d1:2f:49:2f:ce:85:63:66:8e:
                    44:b6:62:5a:0e:57:c3:2b:3e:44:41:7a:aa:9f:79:
                    9d:89:42:9e:29:b3:7c:95:30:80:75:26:c1:fc:57:
                    cc:4a:ec:2d:f6:5c:70:8c:9e:c3:ef:c8:25:99:90:
                    64:34:08:0b:d8:c9:8a:46:f9:80:c6:3d:3d:43:25:
                    b9:62:6b:39:cd:f1:d4:9f:91:96:99:c7:1b:f4:f4:
                    9e:a5:7b:c4:4a:32:60:57:17:05:af:c2:b2:21:0e:
                    02:88:22:fd:52:d6:e3:22:71:46:60:55:f7:97:24:
                    94:f3:4d:0e:f3:b7:4f:2a:01:b1:1b:99:64:07:0d:
                    3c:88:3d:12:69:c5:79:a6:b4:6c:3f:c6:66:59:ac:
                    c0:de:2a:49:9e:97:9c:65:a5:ff:ed:d8:44:9d:c0:
                    ef:dc:9b:70:29:6b:66:eb:ef:77:d1:7c:23:d5:4c:
                    e0:83:0f:9e:53:44:05:6e:d3:98:32:bf:db:e4:dd:
                    bb:a6:3a:e0:97:57:2d:bd:75:3c:bf:6a:d7:3f:94:
                    d4:d8:7d:06:d0:2f:59:76:1f:5a:0d:3a:8d:94:34:
                    00:47:3e:78:2e:2d:9f:9b:14:74:3b:0b:53:50:65:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A1:F6:4D:73:9B:69:C4:77:99:9D:F0:FD:84:E1:22:1E:52:50:2E
            X509v3 Authority Key Identifier:
                keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/2C60C8AAE01111EEA6583A7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8600:f040::/48
                  2406:8600:f840::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:38:3e:4e:71:56:65:1b:ad:ce:a7:7e:65:3c:95:86:64:cd:
         1a:1c:c1:c3:44:5b:94:4d:a6:b0:f0:23:09:12:27:42:c3:95:
         51:75:12:94:ae:c6:1a:a7:53:09:b7:21:24:88:38:3f:bd:75:
         df:f0:de:d3:95:44:db:1d:06:2a:b8:c8:97:2e:d8:77:14:02:
         da:9c:e2:b5:57:9b:5d:bb:d7:f6:cf:62:73:a1:60:24:1c:75:
         a3:18:8d:c3:8e:33:2d:79:53:4d:fd:40:66:8a:14:6b:a8:8c:
         6e:56:2a:35:6b:f4:99:44:6a:12:ab:b8:d0:cb:ae:c8:54:8a:
         24:2a:94:32:78:06:da:0e:63:3d:9f:03:c2:67:38:38:df:80:
         99:a2:5a:dd:a5:ed:68:f0:87:76:2b:92:5b:9f:b7:76:13:c3:
         3a:16:55:e8:aa:9d:a2:5f:e5:b0:6d:1d:37:86:de:69:ca:29:
         fc:dd:b6:1b:1a:e9:d0:e0:68:92:fc:88:8e:3d:ff:fd:19:1e:
         dc:bf:65:fe:14:d0:11:6f:d7:45:33:66:b5:8f:4e:4f:b3:27:
         82:a6:93:8d:47:ba:91:bf:74:70:45:d0:b9:7c:dc:7d:b3:53:
         3e:dd:72:b9:cb:bd:85:4f:8d:cb:01:e9:6f:45:c5:f7:5b:57:
         ec:53:29:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:32 2026 by rpki-client