Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/0E06126A7E4011F084643A20C4F9AE02.roa
File:                     0E06126A7E4011F084643A20C4F9AE02.roa (raw, json)
Hash identifier:          BOcoiAspHCwkr5azVOhAvR+BAnY8G++2Bq7+nnR+vDU=
Subject key identifier:   CC:FE:71:B1:C4:02:0B:C9:2F:47:D9:B6:50:F5:84:81:E8:DE:AA:35
Certificate issuer:       /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial:       63
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/0E06126A7E4011F084643A20C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:28:24 +0000
ROA not before:           Thu 21 Aug 2025 03:36:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154158
IP address blocks:        2001:df6:3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
                          rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
        Validity
            Not Before: Aug 21 03:36:43 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3dc88-0981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:b1:00:ad:3f:b0:07:f9:b4:2e:b3:e5:12:
                    fc:c4:4f:8f:b1:b1:ba:30:a6:ee:7a:ef:45:87:47:
                    24:21:4b:67:b4:16:57:13:ae:47:3c:aa:e1:62:eb:
                    05:a6:10:e7:d0:c9:e2:72:8c:90:d1:af:d6:d0:9d:
                    ec:42:66:a6:7a:c4:14:78:6e:ad:ae:3f:dc:3c:c9:
                    7d:8e:fd:23:1b:11:bb:b6:e6:6e:ab:74:a3:86:31:
                    44:7a:37:d9:32:9b:5b:5f:12:c7:8a:6b:61:92:db:
                    65:ae:8c:43:84:8b:9e:b7:19:4a:ad:06:0e:10:c0:
                    04:c4:5a:39:cb:15:3d:33:86:5f:17:0c:87:97:96:
                    3e:61:5a:71:57:c1:17:8f:ab:11:aa:45:5d:c8:f2:
                    fb:3f:e6:c3:e2:ea:18:01:2e:71:2e:b1:9b:c4:b1:
                    92:19:8d:6c:5c:c3:92:6d:7e:c7:43:27:65:22:4f:
                    f5:e5:db:87:95:20:45:d3:e0:f3:f0:89:65:dd:42:
                    03:ba:d6:61:5b:6f:55:e2:1a:68:ec:ca:29:63:53:
                    72:d4:95:61:32:74:10:56:56:95:d9:8c:bf:2b:15:
                    7d:67:60:0f:dc:84:49:0c:ec:c6:da:36:7b:69:68:
                    f3:cd:cd:1e:8a:a1:14:73:60:7a:12:a3:dd:db:ab:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FE:71:B1:C4:02:0B:C9:2F:47:D9:B6:50:F5:84:81:E8:DE:AA:35
            X509v3 Authority Key Identifier:
                keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/0E06126A7E4011F084643A20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:0f:52:df:56:3e:75:a9:6f:3a:dc:91:d8:96:64:17:4e:83:
         0c:6c:90:2b:31:38:2e:aa:cc:30:47:ad:3a:6f:40:03:50:64:
         2b:a5:b4:5c:9e:15:40:1b:83:68:78:3d:31:a2:17:9b:e1:06:
         f7:e9:1f:32:71:48:ed:42:9a:a0:7c:08:c3:9b:de:6b:8d:b6:
         21:ad:e8:38:f0:c1:b7:3a:2b:1d:34:70:68:7d:48:a8:e3:c5:
         5e:39:20:d2:f7:a5:48:f9:d0:ff:e9:c4:d6:d9:d0:21:ee:22:
         c9:f3:27:37:94:f1:59:b0:53:19:75:ed:e6:94:79:9a:8b:a4:
         12:be:84:e9:be:16:2e:12:48:f9:cc:d2:7f:48:0f:bf:55:b7:
         32:25:a3:a6:22:b4:4a:e8:0e:9f:f2:ff:35:b0:63:16:65:e4:
         24:e2:3e:98:79:78:d9:5e:88:a4:20:08:1e:77:3b:c7:f1:92:
         da:93:4d:ab:a1:61:a9:18:f3:d7:18:c6:d2:0d:1c:4c:10:64:
         05:01:32:19:b7:e0:2d:e2:02:54:61:af:cc:dc:a6:f5:46:1e:
         90:85:cd:42:bf:4e:82:17:91:8e:b7:49:9c:dd:7e:a4:7e:cb:
         ad:ff:3b:ed:73:7c:fb:6a:05:ec:f1:bb:9e:a5:23:ad:d5:a7:
         ef:cd:6c:ad
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Nzc2MDExMC8GA1UEBRMoRkU0OUNGMzNGQkU0MjQ3QjJCQTFFRTlBNTQ4NEE3NDBB
RDNCNkUwRTAeFw0yNTA4MjEwMzM2NDNaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkYzg4LTA5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtu7EArT+wB/m0LrPlEvzET4+xsbowpu5670WHRyQhS2e0FlcTrkc8quFi6wWm
EOfQyeJyjJDRr9bQnexCZqZ6xBR4bq2uP9w8yX2O/SMbEbu25m6rdKOGMUR6N9ky
m1tfEseKa2GS22WujEOEi563GUqtBg4QwATEWjnLFT0zhl8XDIeXlj5hWnFXwReP
qxGqRV3I8vs/5sPi6hgBLnEusZvEsZIZjWxcw5JtfsdDJ2UiT/Xl24eVIEXT4PPw
iWXdQgO61mFbb1XiGmjsyiljU3LUlWEydBBWVpXZjL8rFX1nYA/chEkM7MbaNntp
aPPNzR6KoRRzYHoSo93bq2K9AgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUzP5xscQC
C8kvR9m2UPWEgejeqjUwHwYDVR0jBBgwFoAU/knPM/vkJHsroe6aVISnQK07bg4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NzYwLzdENTMxNDIwN0Uz
RjExRjBBQjA4OUIxRUM0RjlBRTAyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2Jn
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX2tuUE1fdmtKSHNyb2U2YVZJU25RSzA3Ymc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzc2MC83RDUzMTQyMDdFM0YxMUYwQUIwODlCMUVDNEY5QUUwMi8wRTA2MTI2QTdF
NDAxMUYwODQ2NDNBMjBDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ32A8AwDQYJKoZIhvcNAQELBQADggEBAKcPUt9WPnWpbzrckdiW
ZBdOgwxskCsxOC6qzDBHrTpvQANQZCultFyeFUAbg2h4PTGiF5vhBvfpHzJxSO1C
mqB8CMOb3muNtiGt6Djwwbc6Kx00cGh9SKjjxV45INL3pUj50P/pxNbZ0CHuIsnz
JzeU8VmwUxl17eaUeZqLpBK+hOm+Fi4SSPnM0n9ID79VtzIlo6YitEroDp/y/zWw
YxZl5CTiPph5eNleiKQgCB53O8fxktqTTauhYakY89cYxtINHEwQZAUBMhm34C3i
AlRhr8zcpvVGHpCFzUK/ToIXkY63SZzdfqR+y63/O+1zfPtqBezxu56lI63Vp+/N
bK0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:16 2026 by rpki-client