Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/217645DAC5CC11F0B5963A5AC4F9AE02.roa
File:                     217645DAC5CC11F0B5963A5AC4F9AE02.roa (raw, json)
Hash identifier:          b9SLnnmjCzEPCkObeuo8/EHmdYFDq+wqAL43fh98qxw=
Subject key identifier:   7F:53:56:B4:9E:2B:EC:9D:C0:73:BF:F6:55:87:20:F0:CB:29:35:79
Certificate issuer:       /CN=A9116297/serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
Certificate serial:       36
Authority key identifier: C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/217645DAC5CC11F0B5963A5AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:00:30 +0000
ROA not before:           Thu 20 Nov 2025 04:48:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     46559
IP address blocks:        2001:df6:4e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl
                          rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116297, serialNumber=C3A9E32A1299F2C2C9203565DAC59991397232BD
        Validity
            Not Before: Nov 20 04:48:17 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d5fe-074c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:09:9c:5a:2a:ab:31:29:f9:84:fc:ee:eb:
                    b9:66:a8:40:a2:e0:50:89:e6:9c:af:06:bc:de:98:
                    c7:07:14:3c:56:cf:fc:a2:24:fb:06:c5:32:cb:37:
                    90:97:3d:ae:ca:da:3b:3d:6e:10:d7:19:e3:c8:64:
                    68:5e:d3:9e:5f:aa:89:55:30:76:b4:16:d1:e0:53:
                    c0:24:6c:4b:91:08:6c:37:b0:da:c1:bc:7d:ff:82:
                    a1:9a:50:4a:1a:13:23:91:cb:81:61:3c:81:b7:8c:
                    4f:8d:4d:eb:86:77:66:c6:57:6d:50:5a:b3:65:42:
                    e8:37:9a:6e:7d:bc:a0:b7:63:f6:5f:cb:e2:0e:54:
                    f0:1e:34:93:a8:a8:97:70:27:22:93:91:b2:f5:82:
                    07:d1:96:a3:49:44:3c:ee:ab:50:fc:9f:61:c8:de:
                    e9:4e:b8:a5:7b:f4:c8:66:88:6c:ff:b1:45:84:05:
                    4d:47:ef:85:4f:68:8d:44:e3:fb:c8:9c:e7:04:4b:
                    3b:c6:fd:f3:95:c6:e0:15:bd:77:02:20:b8:7c:89:
                    da:a4:bb:d6:cc:c5:1c:c6:6c:77:d9:65:79:ac:a6:
                    7e:b4:96:70:8c:26:17:b8:05:4e:b5:17:aa:37:70:
                    35:f3:4a:82:03:8a:e8:06:7a:86:62:b4:b2:37:9b:
                    f9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:53:56:B4:9E:2B:EC:9D:C0:73:BF:F6:55:87:20:F0:CB:29:35:79
            X509v3 Authority Key Identifier:
                keyid:C3:A9:E3:2A:12:99:F2:C2:C9:20:35:65:DA:C5:99:91:39:72:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/w6njKhKZ8sLJIDVl2sWZkTlyMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6njKhKZ8sLJIDVl2sWZkTlyMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/734C43B0C5CB11F09666BC58C4F9AE02/217645DAC5CC11F0B5963A5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:4e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:a3:f2:16:a1:a5:02:2b:1f:be:57:bd:34:f0:34:1b:1b:
         87:da:8c:e4:ae:20:2f:98:6a:87:ae:eb:87:39:e9:1b:79:29:
         ab:26:ba:ed:54:1b:21:24:65:cb:0b:5f:15:5f:63:b7:68:1a:
         ba:ff:a0:c6:56:1d:95:3d:63:4c:49:80:80:05:e9:c5:f7:70:
         95:b9:9a:03:66:d3:1b:4f:1e:f0:98:ad:d0:aa:7f:e2:72:40:
         85:a6:8f:a1:4f:ba:42:42:22:14:b0:3e:b2:1d:31:47:0b:b7:
         6f:b3:0d:a9:9a:77:d7:8c:63:4e:b7:31:db:23:7d:73:d0:03:
         b0:a1:81:3b:8e:fb:77:f5:08:60:0f:99:36:23:92:70:7c:9f:
         77:cd:b2:60:e2:83:8c:9a:fb:c5:cf:68:7c:29:b5:42:df:69:
         31:08:a9:92:0d:a4:ed:40:05:a8:83:89:d9:ce:a8:ec:24:57:
         b6:bf:3e:3d:61:82:6b:b9:ab:c1:b3:ae:48:a4:6c:01:5b:41:
         f4:e5:39:81:6f:36:6f:85:fd:a2:6a:4b:23:8d:76:87:ea:cf:
         8d:b7:f1:b1:b1:e3:8b:48:b1:77:39:2d:55:78:b4:b1:c9:42:
         1f:7f:17:45:9b:f7:5e:7b:53:71:9f:c7:20:a4:00:f0:40:24:
         ab:6b:c5:2c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjI5NzExMC8GA1UEBRMoQzNBOUUzMkExMjk5RjJDMkM5MjAzNTY1REFDNTk5OTEz
OTcyMzJCRDAeFw0yNTExMjAwNDQ4MTdaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNWZlLTA3NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC12gmcWiqrMSn5hPzu67lmqECi4FCJ5pyvBrzemMcHFDxWz/yiJPsGxTLLN5CX
Pa7K2js9bhDXGePIZGhe055fqolVMHa0FtHgU8AkbEuRCGw3sNrBvH3/gqGaUEoa
EyORy4FhPIG3jE+NTeuGd2bGV21QWrNlQug3mm59vKC3Y/Zfy+IOVPAeNJOoqJdw
JyKTkbL1ggfRlqNJRDzuq1D8n2HI3ulOuKV79MhmiGz/sUWEBU1H74VPaI1E4/vI
nOcESzvG/fOVxuAVvXcCILh8idqku9bMxRzGbHfZZXmspn60lnCMJhe4BU61F6o3
cDXzSoIDiugGeoZitLI3m/ljAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUf1NWtJ4r
7J3Ac7/2VYcg8MspNXkwHwYDVR0jBBgwFoAUw6njKhKZ8sLJIDVl2sWZkTlyMr0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Mjk3LzczNEM0M0IwQzVD
QjExRjA5NjY2QkM1OEM0RjlBRTAyL3c2bmpLaEtaOHNMSklEVmwyc1daa1RseU1y
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdzZuaktoS1o4c0xKSURWbDJzV1prVGx5TXIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjI5Ny83MzRDNDNCMEM1Q0IxMUYwOTY2NkJDNThDNEY5QUUwMi8yMTc2NDVEQUM1
Q0MxMUYwQjU5NjNBNUFDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ32TkAwDQYJKoZIhvcNAQELBQADggEBAF+3o/IWoaUCKx++V700
8DQbG4fajOSuIC+Yaoeu64c56Rt5Kasmuu1UGyEkZcsLXxVfY7doGrr/oMZWHZU9
Y0xJgIAF6cX3cJW5mgNm0xtPHvCYrdCqf+JyQIWmj6FPukJCIhSwPrIdMUcLt2+z
Damad9eMY063MdsjfXPQA7ChgTuO+3f1CGAPmTYjknB8n3fNsmDig4ya+8XPaHwp
tULfaTEIqZINpO1ABaiDidnOqOwkV7a/Pj1hgmu5q8GzrkikbAFbQfTlOYFvNm+F
/aJqSyONdofqz4238bGx44tIsXc5LVV4tLHJQh9/F0Wb9157U3GfxyCkAPBAJKtr
xSw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:35 2026 by rpki-client