Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F8D5DC60BF7111EE806CB182C4F9AE02.roa
File:                     F8D5DC60BF7111EE806CB182C4F9AE02.roa (raw, json)
Hash identifier:          hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=
Subject key identifier:   76:37:B2:BB:69:1B:E4:F0:FD:BA:9B:16:00:3E:21:55:8B:A9:C5:90
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       026D
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F8D5DC60BF7111EE806CB182C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:15:27 +0000
ROA not before:           Fri 11 Jul 2025 04:09:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     150368
IP address blocks:        2401:3fa0:100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Jul 11 04:09:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4742f-0fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:a2:28:5e:ea:45:a6:46:b6:09:42:45:89:
                    1a:6e:e0:a7:18:d1:04:a1:fa:d9:c6:12:cf:d7:8a:
                    83:7d:6e:ff:20:39:59:93:a0:a5:a9:0a:45:e6:93:
                    de:b7:14:6a:0f:af:48:56:cf:22:e4:b6:9e:c7:3f:
                    8e:41:2a:db:3d:3d:2c:79:44:1f:36:9c:d1:07:b3:
                    c2:dd:a7:91:f7:09:42:f7:f0:83:fe:c0:53:55:1f:
                    11:44:0a:48:03:47:02:91:31:f2:1f:e0:d1:ef:e8:
                    29:3e:02:ab:1f:ad:6f:13:30:c1:d2:5c:0d:44:c2:
                    9e:6c:3c:bd:60:3b:94:2c:60:04:1b:2d:73:a4:f3:
                    92:64:46:18:fe:9c:3d:38:a8:35:27:36:10:7d:91:
                    07:c8:52:ca:88:10:16:c8:58:86:04:7f:31:d2:bd:
                    74:61:e9:3d:14:e7:0b:47:0a:d5:1c:b6:60:8b:5f:
                    be:04:2d:bf:9e:5c:7f:3e:a5:b2:f7:d8:72:c4:dd:
                    86:4b:92:42:33:14:e1:53:80:00:df:d0:82:c5:1f:
                    8c:7c:d8:4b:cd:32:d5:06:98:7c:fc:ba:b4:0b:1f:
                    03:96:76:b1:ba:08:ff:17:c2:41:7f:3f:0c:0b:30:
                    63:9d:a3:4f:ce:8c:05:81:7b:d8:b6:a1:ea:10:98:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:37:B2:BB:69:1B:E4:F0:FD:BA:9B:16:00:3E:21:55:8B:A9:C5:90
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F8D5DC60BF7111EE806CB182C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3fa0:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:60:e3:c5:10:90:40:bd:b1:64:40:8a:c2:16:9c:60:ae:
         12:9d:0f:1d:2a:ab:eb:08:6a:80:92:77:ba:0e:72:0a:8d:2a:
         89:02:25:ef:2b:5a:b9:64:fa:ce:e5:3b:33:76:2e:91:39:56:
         0a:3e:68:c7:a4:9e:80:7b:bb:3e:09:10:74:d8:96:f8:77:e0:
         cf:86:77:56:bd:34:a1:e4:03:68:f3:2b:8a:68:7f:95:0c:a2:
         77:6f:ea:2d:74:5a:7d:51:a3:85:eb:40:aa:92:b8:10:ff:1e:
         9a:e9:27:35:a5:be:14:51:02:84:4b:05:91:79:41:04:ac:24:
         0e:ba:c7:fb:e5:5e:04:e0:66:d4:3b:a3:ff:90:68:7b:d7:a3:
         c1:86:47:2d:2b:a1:cb:18:e1:29:7f:e5:53:25:81:e9:c8:89:
         38:f0:04:f9:48:75:b3:68:3a:bd:0b:f2:27:2d:5d:ca:8a:a0:
         95:38:17:f3:9b:d1:28:fe:61:b1:c7:b2:e7:c6:02:ec:84:52:
         8a:4c:3e:5b:9c:50:80:53:24:8b:1c:b4:5f:1e:ee:d8:14:5b:
         11:ad:34:c1:db:10:da:73:46:3b:42:10:30:9c:8d:b3:dd:c1:
         7a:0a:a5:8d:68:b4:39:9d:95:ae:03:e8:3e:90:2c:fe:87:bc:
         06:b4:6f:94
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE
QzM4QjM1Q0MwHhcNMjUwNzExMDQwOTM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzQyZi0wZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk6uiKF7qRaZGtglCRYkabuCnGNEEofrZxhLP14qDfW7/IDlZk6ClqQpF5pPe
txRqD69IVs8i5Laexz+OQSrbPT0seUQfNpzRB7PC3aeR9wlC9/CD/sBTVR8RRApI
A0cCkTHyH+DR7+gpPgKrH61vEzDB0lwNRMKebDy9YDuULGAEGy1zpPOSZEYY/pw9
OKg1JzYQfZEHyFLKiBAWyFiGBH8x0r10Yek9FOcLRwrVHLZgi1++BC2/nlx/PqWy
99hyxN2GS5JCMxThU4AA39CCxR+MfNhLzTLVBph8/Lq0Cx8Dlnaxugj/F8JBfz8M
CzBjnaNPzowFgXvYtqHqEJh2XwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHY3srtp
G+Tw/bqbFgA+IVWLqcWQMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw
QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTg3RkQvNTVFRDZBMTYxMEEwMTFFRTkzNDkzQzUyQzRGOUFFMDIvRjhENURDNjBC
RjcxMTFFRTgwNkNCMTgyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAE/oAEAMA0GCSqGSIb3DQEBCwUAA4IBAQBIfGDjxRCQQL2xZECK
whacYK4SnQ8dKqvrCGqAkne6DnIKjSqJAiXvK1q5ZPrO5Tszdi6ROVYKPmjHpJ6A
e7s+CRB02Jb4d+DPhndWvTSh5ANo8yuKaH+VDKJ3b+otdFp9UaOF60CqkrgQ/x6a
6Sc1pb4UUQKESwWReUEErCQOusf75V4E4GbUO6P/kGh716PBhkctK6HLGOEpf+VT
JYHpyIk48AT5SHWzaDq9C/InLV3KiqCVOBfzm9Eo/mGxx7LnxgLshFKKTD5bnFCA
UySLHLRfHu7YFFsRrTTB2xDac0Y7QhAwnI2z3cF6CqWNaLQ5nZWuA+g+kCz+h7wG
tG+U
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:25 2026 by rpki-client