Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/B9286BC4F33711EEAAA34C78C4F9AE02.roa
File:                     B9286BC4F33711EEAAA34C78C4F9AE02.roa (raw, json)
Hash identifier:          I9JABl6/gzx03qs1VThcdC1FmK2YJXn7jMmQPHfDYxU=
Subject key identifier:   AA:A6:79:8F:CD:60:38:5B:83:EA:0D:89:A7:33:AB:88:58:45:71:9A
Certificate issuer:       /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial:       3181
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/B9286BC4F33711EEAAA34C78C4F9AE02.roa
Signing time:             Sat 02 May 2026 16:18:46 +0000
ROA not before:           Sat 02 May 2026 16:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8220
IP address blocks:        2405:2000:1006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
                          rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12673 (0x3181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
        Validity
            Not Before: May  2 16:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f623e6-2e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:46:88:71:2a:1c:a6:0d:48:be:61:f7:14:
                    8e:94:74:e4:13:b1:9e:5a:8a:3a:ba:5a:27:35:a2:
                    b9:ed:70:c6:ff:21:d4:1e:6c:9a:26:4a:20:9c:c5:
                    92:8b:06:7b:c5:43:4a:31:6c:fd:0e:19:26:fb:27:
                    57:87:2e:12:20:93:55:a5:6c:e7:b3:37:e6:24:b3:
                    20:32:d9:d4:a9:56:af:e8:6d:62:a9:80:fa:b5:b4:
                    ff:a2:9b:f2:4a:6f:d4:9f:d4:15:df:c5:1f:85:42:
                    ed:ca:b4:54:1e:e2:0c:94:06:f0:83:7e:89:fa:87:
                    a6:2e:42:fb:eb:d9:a8:b0:dc:d3:76:f1:90:97:55:
                    60:a4:ee:63:4c:ad:9c:54:44:bc:e7:16:21:54:8c:
                    62:a8:ad:72:10:c9:fb:67:fe:36:0e:52:67:e7:53:
                    eb:db:bd:03:26:dd:0c:2f:2b:70:1e:14:e3:10:02:
                    1b:09:8f:c8:92:09:68:e5:73:03:94:7b:7d:f0:72:
                    43:5c:45:fe:96:4a:48:17:35:b7:93:20:2d:78:83:
                    3f:c2:4e:33:85:04:89:d3:eb:7c:f4:da:90:88:69:
                    3a:fd:68:fc:d9:ad:8a:a8:8d:a6:4a:2d:3b:75:57:
                    cf:70:73:2b:48:b7:09:e3:2c:85:81:2c:39:71:0a:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:79:8F:CD:60:38:5B:83:EA:0D:89:A7:33:AB:88:58:45:71:9A
            X509v3 Authority Key Identifier:
                keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/B9286BC4F33711EEAAA34C78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2000:1006::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:63:9b:02:86:7f:f6:74:10:f4:a4:b5:fd:1c:2f:33:16:3c:
         c4:a0:17:97:c8:88:5e:04:fd:bb:d2:37:df:8f:03:39:94:27:
         03:8b:5c:4d:fb:e8:58:4b:08:d5:20:ca:80:78:78:74:61:32:
         a8:5e:25:2b:d1:0a:34:a3:a9:f1:b0:5c:02:f8:30:71:e4:d2:
         c0:45:28:e6:30:7c:bd:75:95:67:b9:ce:87:ed:c4:49:40:82:
         44:80:4d:66:56:b6:29:cc:d0:4e:12:2f:c8:37:a4:a8:ee:f7:
         db:b1:b9:84:00:b5:2e:d9:6c:76:f9:b2:07:0e:7c:e0:37:36:
         26:b9:46:e1:94:fd:df:6f:2f:c4:9f:be:2e:26:c5:5b:29:19:
         fa:26:0b:78:89:5a:96:9e:2a:b0:bf:41:1e:79:38:7f:af:15:
         79:7c:f8:94:e2:2b:72:59:18:f0:ec:c7:03:6a:ef:be:3b:85:
         36:e8:35:cf:d3:63:ed:60:ef:27:e1:62:37:48:73:5b:0f:29:
         e8:d9:22:5d:8f:e2:5c:21:08:94:7a:04:5c:69:0a:fd:18:cd:
         9e:6c:fe:4d:ac:45:1e:56:86:c0:8e:62:6e:ae:65:61:df:f2:
         60:b3:93:30:ef:87:a1:ec:3a:0a:09:06:42:ff:f3:b1:ff:b4:
         76:50:bc:b7
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICMYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC
Qjk2NEY2NEIwHhcNMjYwNTAyMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2MjNlNi0yZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvA1GiHEqHKYNSL5h9xSOlHTkE7GeWoo6ulonNaK57XDG/yHUHmyaJkognMWS
iwZ7xUNKMWz9Dhkm+ydXhy4SIJNVpWznszfmJLMgMtnUqVav6G1iqYD6tbT/opvy
Sm/Un9QV38UfhULtyrRUHuIMlAbwg36J+oemLkL769mosNzTdvGQl1VgpO5jTK2c
VES85xYhVIxiqK1yEMn7Z/42DlJn51Pr270DJt0MLytwHhTjEAIbCY/Ikglo5XMD
lHt98HJDXEX+lkpIFzW3kyAteIM/wk4zhQSJ0+t89NqQiGk6/Wj82a2KqI2mSi07
dVfPcHMrSLcJ4yyFgSw5cQqnswIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKqmeY/N
YDhbg+oNiaczq4hYRXGaMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG
NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTU1QzgvOUNEM0U4RjZGRjU4MTFFMkJCNEIyRTNGNTkxMUVBMzIvQjkyODZCQzRG
MzM3MTFFRUFBQTM0Qzc4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAUgABAGMA0GCSqGSIb3DQEBCwUAA4IBAQAlY5sChn/2dBD0pLX9
HC8zFjzEoBeXyIheBP270jffjwM5lCcDi1xN++hYSwjVIMqAeHh0YTKoXiUr0Qo0
o6nxsFwC+DBx5NLARSjmMHy9dZVnuc6H7cRJQIJEgE1mVrYpzNBOEi/IN6So7vfb
sbmEALUu2Wx2+bIHDnzgNzYmuUbhlP3fby/En74uJsVbKRn6Jgt4iVqWniqwv0Ee
eTh/rxV5fPiU4ityWRjw7McDau++O4U26DXP02PtYO8n4WI3SHNbDyno2SJdj+Jc
IQiUegRcaQr9GM2ebP5NrEUeVobAjmJurmVh3/Jgs5Mw74eh7DoKCQZC//Ox/7R2
ULy3
-----END CERTIFICATE-----
Generated at Wed May 13 02:42:01 2026 by rpki-client