Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa
File:                     AF2D50BE562B11F0A2095579C4F9AE02.roa (raw, json)
Hash identifier:          GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=
Subject key identifier:   76:85:20:57:74:A1:95:7E:29:77:68:4C:82:7D:DC:F2:E4:75:E4:D9
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       026E
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:15:28 +0000
ROA not before:           Fri 11 Jul 2025 04:09:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151420
IP address blocks:        2401:3fa0:1::/48 maxlen: 48
                          2401:3fa0:fc00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Jul 11 04:09:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47430-1f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:1e:13:f8:9b:28:b7:a6:96:82:18:d4:eb:7e:
                    86:63:8a:c9:eb:05:bd:94:cf:33:fe:08:ee:99:f3:
                    20:0e:cf:7d:72:77:a9:c0:bc:33:9f:f8:70:b5:72:
                    de:23:6e:20:e8:28:c5:57:05:d4:a5:c0:4b:b0:12:
                    7d:97:a2:45:db:ce:b0:96:04:b3:9e:3d:88:95:ea:
                    f4:ee:8b:d1:89:77:d6:d3:d7:34:53:92:ae:6e:a8:
                    b0:38:c7:8d:69:07:74:fc:a4:b6:09:85:6c:4f:28:
                    e2:a5:44:49:d5:2e:32:73:3b:89:66:5f:14:1a:46:
                    e6:3a:8e:43:ea:30:6a:67:28:45:ac:53:56:f4:88:
                    50:59:34:f7:8d:7a:0a:68:c1:e7:bc:42:6f:a9:c4:
                    fb:6d:90:3e:87:6f:bf:6c:d9:1d:c1:b3:43:31:17:
                    17:20:25:57:fe:e6:fd:22:88:dc:65:44:89:c7:29:
                    ff:82:ff:1e:99:de:75:fa:d7:7c:2f:61:eb:5d:1d:
                    46:9d:2c:7c:35:01:c0:3e:18:b7:42:fb:98:db:b0:
                    ba:5f:2c:38:67:ee:c7:5d:a9:95:64:6c:ca:47:e3:
                    ed:46:84:2b:59:86:77:ca:aa:d1:f0:13:23:10:19:
                    1f:3b:b4:57:33:a2:a4:a0:e6:c0:38:6b:95:39:72:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:85:20:57:74:A1:95:7E:29:77:68:4C:82:7D:DC:F2:E4:75:E4:D9
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/AF2D50BE562B11F0A2095579C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3fa0:1::/48
                  2401:3fa0:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:78:dd:8b:06:2c:57:98:3a:1d:57:7f:a4:5f:18:40:51:8f:
         50:23:db:92:5d:88:f5:8f:d7:d0:9d:7b:52:da:4b:c3:a1:63:
         f1:ec:f5:82:50:df:02:80:c1:56:ac:c2:b9:26:ae:af:4c:ea:
         c5:f5:70:3c:e0:dc:b9:8a:3a:27:b1:c2:48:7d:34:f0:2f:7c:
         20:39:4b:ce:8e:6d:7e:72:4e:fa:d1:2b:45:e0:72:6a:6b:da:
         7e:37:a0:2d:03:75:0a:55:87:d2:ab:d8:4b:ae:09:93:6f:4d:
         df:c4:40:84:92:0c:ee:6d:ea:62:ac:ed:2a:cc:57:58:6f:ed:
         21:27:63:ec:e7:d3:26:db:90:c4:39:d8:fe:6b:1c:bb:1e:c7:
         c1:c8:eb:08:33:09:61:8b:19:96:a1:5d:35:d5:b2:f7:3a:41:
         59:2a:94:99:38:c1:4c:85:ed:24:e3:6c:a8:b0:0d:47:61:d3:
         81:74:ee:53:5b:e7:57:b2:e0:c8:62:7f:8d:a3:23:07:7a:fe:
         9a:ae:f1:db:7f:47:0c:d2:c4:1b:83:c9:67:f2:f4:10:77:96:
         a5:da:1d:3f:85:36:c1:5c:e8:4e:69:d2:c7:d9:71:a8:86:a9:
         8a:a1:63:48:26:8c:78:15:55:5e:48:d8:84:db:24:70:07:44:
         e3:11:fe:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE
QzM4QjM1Q0MwHhcNMjUwNzExMDQwOTM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzQzMC0xZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+R4T+Jsot6aWghjU636GY4rJ6wW9lM8z/gjumfMgDs99cnepwLwzn/hwtXLe
I24g6CjFVwXUpcBLsBJ9l6JF286wlgSznj2Iler07ovRiXfW09c0U5KubqiwOMeN
aQd0/KS2CYVsTyjipURJ1S4yczuJZl8UGkbmOo5D6jBqZyhFrFNW9IhQWTT3jXoK
aMHnvEJvqcT7bZA+h2+/bNkdwbNDMRcXICVX/ub9IojcZUSJxyn/gv8emd51+td8
L2HrXR1GnSx8NQHAPhi3QvuY27C6Xyw4Z+7HXamVZGzKR+PtRoQrWYZ3yqrR8BMj
EBkfO7RXM6KkoObAOGuVOXL/WwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFHaFIFd0
oZV+KXdoTIJ93PLkdeTZMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw
QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTg3RkQvNTVFRDZBMTYxMEEwMTFFRTkzNDkzQzUyQzRGOUFFMDIvQUYyRDUwQkU1
NjJCMTFGMEEyMDk1NTc5QzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX
BAIAAjARAwcAJAE/oAABAwYAJAE/oPwwDQYJKoZIhvcNAQELBQADggEBAIx43YsG
LFeYOh1Xf6RfGEBRj1Aj25JdiPWP19Cde1LaS8OhY/Hs9YJQ3wKAwVaswrkmrq9M
6sX1cDzg3LmKOiexwkh9NPAvfCA5S86ObX5yTvrRK0Xgcmpr2n43oC0DdQpVh9Kr
2EuuCZNvTd/EQISSDO5t6mKs7SrMV1hv7SEnY+zn0ybbkMQ52P5rHLsex8HI6wgz
CWGLGZahXTXVsvc6QVkqlJk4wUyF7STjbKiwDUdh04F07lNb51ey4Mhif42jIwd6
/pqu8dt/RwzSxBuDyWfy9BB3lqXaHT+FNsFc6E5p0sfZcaiGqYqhY0gmjHgVVV5I
2ITbJHAHROMR/sg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:20 2026 by rpki-client