Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/12BE5F962DA511F1AB5ACB70A2833773.roa
File:                     12BE5F962DA511F1AB5ACB70A2833773.roa (raw, json)
Hash identifier:          nvQami5BEJoZvrDF1xZRqzGeIWI8jjq/huhtnN4wEMw=
Subject key identifier:   C6:E1:0F:56:EB:8A:9A:83:96:78:6C:BB:C0:AB:16:01:94:D7:37:F3
Certificate issuer:       /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
Certificate serial:       0C1C
Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/12BE5F962DA511F1AB5ACB70A2833773.roa
Signing time:             Wed 01 Apr 2026 08:30:44 +0000
ROA not before:           Wed 01 Apr 2026 08:30:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     57402
IP address blocks:        2400:8800:1ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3100 (0xc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA
        Validity
            Not Before: Apr  1 08:30:44 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69ccd7b3-e90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:91:e0:8e:9c:82:a6:6a:eb:e0:04:27:ed:
                    81:b9:63:6e:9b:10:b2:b5:e7:d0:85:70:42:3c:41:
                    e9:4b:61:9f:74:0a:51:63:92:da:3c:29:38:b3:63:
                    09:a1:c1:e9:8f:59:bc:a1:18:b5:05:53:0d:46:4a:
                    6f:c8:5c:cc:b6:b8:da:cb:8b:cc:d7:30:14:9f:61:
                    b7:ed:a7:33:a8:17:bf:3e:b2:b4:ac:17:6a:08:01:
                    fa:2b:68:0a:f9:a1:32:66:0e:01:96:55:38:0d:6a:
                    70:db:fd:e6:62:a9:c8:85:56:6b:67:a4:64:0d:28:
                    e6:21:f0:62:c2:27:fd:25:cd:bd:13:ff:c4:d0:d5:
                    6b:38:fc:74:d8:59:d6:c1:86:a9:c6:e4:b7:63:5b:
                    22:b4:a5:1e:af:62:c8:1c:b5:bf:02:2d:47:c1:51:
                    d8:d6:59:d5:9e:52:19:40:43:b4:b2:46:93:46:37:
                    f0:47:ec:b8:43:95:db:b2:d2:63:ff:ba:a2:20:2b:
                    be:31:8c:4f:d2:19:50:b8:91:41:8c:e0:6d:63:2f:
                    42:cc:12:cc:b3:c1:b7:bb:48:43:6b:73:d9:98:66:
                    28:10:98:cc:95:8e:f2:1d:8b:4e:d4:1d:b7:c5:dc:
                    e6:07:92:4c:c9:3d:38:27:a8:14:e9:61:1a:a7:35:
                    e5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E1:0F:56:EB:8A:9A:83:96:78:6C:BB:C0:AB:16:01:94:D7:37:F3
            X509v3 Authority Key Identifier:
                keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/12BE5F962DA511F1AB5ACB70A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8800:1ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:be:1b:2c:a5:f3:03:8d:2b:de:f1:e4:8c:b5:f6:0b:31:83:
         87:b6:01:57:61:15:a2:40:36:64:10:1d:54:17:08:89:7c:d0:
         fd:c1:54:16:b9:8c:dc:79:0a:19:07:19:44:e2:de:5e:49:2f:
         8d:9a:79:86:02:24:bc:51:e5:a2:10:e3:f2:36:ff:03:f6:20:
         92:fb:27:6a:20:26:21:58:fe:f0:56:1b:01:0c:9e:74:6b:aa:
         8e:ec:a5:35:4c:19:22:c3:35:a2:67:42:bc:e4:72:0a:29:3e:
         4d:55:38:44:a6:2a:a1:f7:2f:43:e8:d1:a8:f4:96:f6:ac:e1:
         42:0a:27:6d:dd:8d:f2:7a:8d:98:23:73:d4:e3:59:ad:5f:ec:
         c2:58:b9:99:1d:34:27:42:4b:93:f3:ce:e7:18:c8:a4:49:4c:
         8b:97:63:89:2c:0d:fc:76:28:e5:2d:f3:c2:c2:e1:d8:32:8d:
         db:71:02:cc:ab:f6:e3:4d:8e:97:d8:c8:41:f5:3e:d7:01:c9:
         8a:23:5d:36:f7:26:c0:5b:1f:ec:a8:89:ef:73:fd:f6:8c:11:
         4e:ad:6f:66:88:a3:8f:df:ed:44:34:df:63:b3:30:25:5a:d6:
         55:21:a8:6d:91:cc:29:d1:6a:19:1e:2f:87:e9:a2:ea:11:cd:
         9a:7f:32:85
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB
OTNDMjYzQUEwHhcNMjYwNDAxMDgzMDQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjZDdiMy1lOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsTGR4I6cgqZq6+AEJ+2BuWNumxCytefQhXBCPEHpS2GfdApRY5LaPCk4s2MJ
ocHpj1m8oRi1BVMNRkpvyFzMtrjay4vM1zAUn2G37aczqBe/PrK0rBdqCAH6K2gK
+aEyZg4BllU4DWpw2/3mYqnIhVZrZ6RkDSjmIfBiwif9Jc29E//E0NVrOPx02FnW
wYapxuS3Y1sitKUer2LIHLW/Ai1HwVHY1lnVnlIZQEO0skaTRjfwR+y4Q5XbstJj
/7qiICu+MYxP0hlQuJFBjOBtYy9CzBLMs8G3u0hDa3PZmGYoEJjMlY7yHYtO1B23
xdzmB5JMyT04J6gU6WEapzXlRwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFMbhD1br
ipqDlnhsu8CrFgGU1zfzMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2
NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvMTJCRTVGOTYy
REE1MTFGMUFCNUFDQjcwQTI4MzM3NzMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJACIAAH/MA0GCSqGSIb3DQEBCwUAA4IBAQDDvhsspfMDjSve8eSM
tfYLMYOHtgFXYRWiQDZkEB1UFwiJfND9wVQWuYzceQoZBxlE4t5eSS+NmnmGAiS8
UeWiEOPyNv8D9iCS+ydqICYhWP7wVhsBDJ50a6qO7KU1TBkiwzWiZ0K85HIKKT5N
VThEpiqh9y9D6NGo9Jb2rOFCCidt3Y3yeo2YI3PU41mtX+zCWLmZHTQnQkuT887n
GMikSUyLl2OJLA38dijlLfPCwuHYMo3bcQLMq/bjTY6X2MhB9T7XAcmKI1029ybA
Wx/sqInvc/32jBFOrW9miKOP3+1ENN9jszAlWtZVIahtkcwp0WoZHi+H6aLqEc2a
fzKF
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:24 2026 by rpki-client