Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa
File:                     164D3C32379711EF9ECC714EC4F9AE02.roa (raw, json)
Hash identifier:          B641zo4E2GFJ5LCWNJG+VpduJ5KvN9NgkU6fmyuJi4Y=
Subject key identifier:   DE:6F:ED:C5:AD:13:C8:64:37:51:74:C4:17:B1:3F:83:65:A2:24:52
Certificate issuer:       /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Certificate serial:       013B
Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:50:43 +0000
ROA not before:           Tue 29 Jul 2025 06:12:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152932
IP address blocks:        2001:df3:f940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
        Validity
            Not Before: Jul 29 06:12:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3efd3-cb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:21:ab:e9:31:ac:d4:b8:dc:02:41:e7:07:
                    80:8a:8e:21:1a:6c:1f:d2:f3:c2:61:6a:79:97:c2:
                    c6:6c:88:30:0b:22:b0:85:db:7e:1e:fb:66:ba:f9:
                    96:0a:a9:3a:39:8e:00:42:49:e2:09:4c:c4:43:14:
                    c5:08:64:32:19:1d:f2:e1:c0:b4:f8:1b:69:a1:6e:
                    45:92:c2:e8:9e:2a:1a:34:16:cc:2b:9c:5c:2b:5e:
                    4c:a3:ae:61:3f:ca:c1:f2:0a:02:cb:68:0f:83:24:
                    2d:a2:58:43:17:4c:a0:9b:ab:33:f4:79:1e:5d:fa:
                    4d:f0:29:36:63:55:e8:cf:1f:34:c2:2b:42:17:12:
                    bd:6b:de:4d:9e:55:a8:0f:a7:04:d8:64:be:06:0b:
                    9b:00:ac:f4:55:45:7d:0c:82:1c:d1:9e:11:f7:ab:
                    00:88:f2:d1:08:4c:70:0e:25:ba:6d:67:bc:a2:40:
                    bf:76:94:79:e1:7e:84:f8:ad:15:4f:a6:77:70:75:
                    c8:cb:21:ea:85:6c:5b:ef:92:dd:b8:20:18:29:26:
                    8b:3c:c5:18:e3:8d:9e:bc:71:38:5e:a7:48:11:e9:
                    ec:ce:d9:6f:69:35:cd:32:1a:12:a7:b4:bd:60:36:
                    13:c9:e5:75:c8:f8:d0:70:7d:91:78:23:b3:9e:5f:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:ED:C5:AD:13:C8:64:37:51:74:C4:17:B1:3F:83:65:A2:24:52
            X509v3 Authority Key Identifier:
                keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/164D3C32379711EF9ECC714EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f940::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:f3:25:22:75:ac:4c:43:af:bd:6a:7d:a0:66:25:b7:ff:
         7f:5d:1c:e0:f8:33:ee:aa:21:e6:19:17:71:b9:0b:3c:15:1e:
         14:71:d4:a3:09:e2:83:b1:46:63:1e:fd:e7:37:b6:5a:63:eb:
         de:a1:85:9b:bf:a2:2b:6e:79:7f:10:a5:93:5c:50:3f:12:3f:
         fe:f6:c3:c2:c4:51:a5:dc:67:63:f4:93:f0:4d:02:32:4b:79:
         3a:94:53:18:c7:ba:a3:1c:ef:93:f5:ae:07:75:2b:c1:96:e1:
         b5:6c:85:77:15:f7:ad:97:64:60:75:08:f4:0a:ba:f9:0a:37:
         71:88:e8:45:f7:1e:e7:bc:f9:1b:6a:63:48:aa:73:e3:4f:41:
         6d:b8:cc:42:f1:6a:9d:53:bb:5d:c2:77:d9:53:c7:e6:7a:42:
         66:ac:1a:f1:7e:be:8e:23:18:90:3e:c7:9c:3e:20:fc:bc:04:
         a1:c3:be:06:45:f8:45:a7:af:fc:c7:55:9a:67:48:7c:58:76:
         a4:ec:03:fc:2f:15:bf:c5:f7:c4:64:fa:d3:a2:86:40:fb:75:
         b2:85:7a:fa:b2:ac:50:99:71:0c:c4:0a:ac:d7:df:cb:13:42:
         dd:51:27:f7:4d:66:92:89:d1:74:c6:3b:0d:b4:c9:3b:94:eb:
         0e:6b:e6:37
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIyMkUxMTAvBgNVBAUTKEZBQ0MzMzUyQkNFMzgwMjg1M0RCRjRCMDQwNTI1Q0ZD
MUUxNTJFNjAwHhcNMjUwNzI5MDYxMjEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZWZkMy1jYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQkhq+kxrNS43AJB5weAio4hGmwf0vPCYWp5l8LGbIgwCyKwhdt+HvtmuvmW
Cqk6OY4AQkniCUzEQxTFCGQyGR3y4cC0+BtpoW5FksLonioaNBbMK5xcK15Mo65h
P8rB8goCy2gPgyQtolhDF0ygm6sz9HkeXfpN8Ck2Y1Xozx80witCFxK9a95NnlWo
D6cE2GS+BgubAKz0VUV9DIIc0Z4R96sAiPLRCExwDiW6bWe8okC/dpR54X6E+K0V
T6Z3cHXIyyHqhWxb75LduCAYKSaLPMUY442evHE4XqdIEensztlvaTXNMhoSp7S9
YDYTyeV1yPjQcH2ReCOznl8oiwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFN5v7cWt
E8hkN1F0xBexP4NloiRSMB8GA1UdIwQYMBaAFPrMM1K844AoU9v0sEBSXPweFS5g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84QkUxMDA4NDM3
OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi8tc3d6VXJ6amdDaFQyX1N3UUZKY19CNFZM
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1zd3pVcnpqZ0NoVDJfU3dRRkpjX0I0VkxtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUIyMkUvOEJFMTAwODQzNzk1MTFFRjg3Q0ZENjRCQzRGOUFFMDIvMTY0RDNDMzIz
Nzk3MTFFRjlFQ0M3MTRFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8/lAMA0GCSqGSIb3DQEBCwUAA4IBAQAMJfMlInWsTEOvvWp9
oGYlt/9/XRzg+DPuqiHmGRdxuQs8FR4UcdSjCeKDsUZjHv3nN7ZaY+veoYWbv6Ir
bnl/EKWTXFA/Ej/+9sPCxFGl3Gdj9JPwTQIyS3k6lFMYx7qjHO+T9a4HdSvBluG1
bIV3Ffetl2RgdQj0Crr5CjdxiOhF9x7nvPkbamNIqnPjT0FtuMxC8WqdU7tdwnfZ
U8fmekJmrBrxfr6OIxiQPsecPiD8vAShw74GRfhFp6/8x1WaZ0h8WHak7AP8LxW/
xffEZPrTooZA+3WyhXr6sqxQmXEMxAqs19/LE0LdUSf3TWaSidF0xjsNtMk7lOsO
a+Y3
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:54 2026 by rpki-client