Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/128CE16E991311EF80CC5D53C4F9AE02.roa
File:                     128CE16E991311EF80CC5D53C4F9AE02.roa (raw, json)
Hash identifier:          jfiqYVTlh3b1NMBZHJzUtvWg0KMk02Asv6Lc0unQcHc=
Subject key identifier:   3F:25:43:57:72:94:22:ED:46:95:A1:97:F9:0D:58:7E:1A:4B:0F:E1
Certificate issuer:       /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial:       0190
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/128CE16E991311EF80CC5D53C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:25:26 +0000
ROA not before:           Sun 01 Mar 2026 05:25:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152336
IP address blocks:        2001:df4:8940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
                          rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
        Validity
            Not Before: Mar  1 05:25:26 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3cdc5-19c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:de:61:e7:2d:a3:64:89:4c:12:e4:ad:a2:
                    42:8b:aa:21:a3:4d:92:ab:20:5a:25:45:b0:70:2b:
                    90:ab:bb:40:45:58:c4:8a:a0:a3:03:f4:ba:f4:b0:
                    5c:9a:c4:ea:3b:d7:c9:90:87:cd:45:66:67:a1:c7:
                    e8:c5:17:d4:b7:1a:79:ae:f2:28:ae:a2:a7:e3:50:
                    b8:85:0c:d0:f6:31:d2:54:27:17:0f:af:ad:f6:71:
                    fb:a6:61:75:43:c1:32:ca:a8:c8:79:4c:b0:de:cb:
                    b7:0c:39:7d:c9:dd:dd:17:3a:9b:ef:33:af:60:70:
                    c6:79:12:73:7f:bc:d7:a3:5a:13:c0:02:30:ad:5f:
                    17:c2:bc:07:8f:3f:47:99:ce:b1:7e:f7:b1:9a:75:
                    08:c9:18:e4:17:fd:63:87:c7:5e:87:64:97:67:22:
                    f4:34:f9:e4:10:da:e3:78:96:01:f0:2c:0f:c0:97:
                    fc:62:4d:81:3f:db:d3:55:b7:69:83:aa:b2:db:e2:
                    41:e2:5e:4f:b5:15:1c:10:c9:bf:a8:77:bb:4f:d4:
                    c3:d6:33:da:9d:4c:d2:1e:27:bd:88:82:22:bf:39:
                    23:6b:16:dd:40:dd:21:c2:c8:bd:3a:dc:d3:a5:9b:
                    ea:8a:83:c2:78:de:5b:47:0d:7c:d3:bc:8a:92:3b:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:25:43:57:72:94:22:ED:46:95:A1:97:F9:0D:58:7E:1A:4B:0F:E1
            X509v3 Authority Key Identifier:
                keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/128CE16E991311EF80CC5D53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:8940::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:f0:a8:0e:21:ad:fb:a6:de:65:b7:3e:c5:08:5c:28:f6:00:
         61:6b:54:9f:66:57:9c:10:86:9b:76:03:2d:07:f4:c2:a0:c3:
         3f:4b:01:3e:58:0d:1f:e4:68:84:62:2f:a5:0f:02:14:7f:90:
         37:d9:47:20:68:d8:9b:99:19:1d:27:a6:06:b2:92:47:56:52:
         b2:46:f2:ac:a1:61:e9:ac:91:e6:e7:1b:b3:e3:d9:d5:54:57:
         ad:15:78:3b:a8:4e:50:ec:ea:39:b7:b3:78:bc:53:eb:3f:87:
         f5:98:c4:66:1e:33:4c:1b:b4:c2:39:11:6e:d0:8d:c3:4a:7b:
         d3:af:04:7d:37:06:b0:9c:cf:e6:71:91:24:b1:ee:15:24:09:
         83:79:9c:5b:91:21:d7:f9:97:ab:3c:fd:57:7a:a6:d6:29:19:
         e6:c5:20:ac:d3:18:03:30:e2:61:33:4f:b5:95:f2:a3:75:9b:
         0e:a4:0a:a9:ce:4f:9e:87:0c:30:d5:45:76:95:60:6f:a5:84:
         ba:9c:ce:d9:b1:14:cd:bc:68:f9:9e:bb:8f:35:24:0d:ec:c3:
         f1:af:f5:cc:b7:95:7e:d1:a4:1b:fa:4c:0f:ce:32:ec:19:80:
         a9:9d:07:c7:d2:09:22:54:0a:f6:06:6f:b6:1f:0c:b2:df:37:
         38:3c:df:44
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB
NTAxNkVENkUwHhcNMjYwMzAxMDUyNTI2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzY2RjNS0xOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5DeYecto2SJTBLkraJCi6oho02SqyBaJUWwcCuQq7tARVjEiqCjA/S69LBc
msTqO9fJkIfNRWZnocfoxRfUtxp5rvIorqKn41C4hQzQ9jHSVCcXD6+t9nH7pmF1
Q8EyyqjIeUyw3su3DDl9yd3dFzqb7zOvYHDGeRJzf7zXo1oTwAIwrV8XwrwHjz9H
mc6xfvexmnUIyRjkF/1jh8deh2SXZyL0NPnkENrjeJYB8CwPwJf8Yk2BP9vTVbdp
g6qy2+JB4l5PtRUcEMm/qHe7T9TD1jPanUzSHie9iIIivzkjaxbdQN0hwsi9OtzT
pZvqioPCeN5bRw1807yKkjt+GQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFD8lQ1dy
lCLtRpWhl/kNWH4aSw/hMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4
NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzg4RTAvNTVFMzkyRkNCODUyMTFFRThBQ0FBOTZBQzRGOUFFMDIvMTI4Q0UxNkU5
OTEzMTFFRjgwQ0M1RDUzQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9IlAMA0GCSqGSIb3DQEBCwUAA4IBAQBo8KgOIa37pt5ltz7F
CFwo9gBha1SfZlecEIabdgMtB/TCoMM/SwE+WA0f5GiEYi+lDwIUf5A32UcgaNib
mRkdJ6YGspJHVlKyRvKsoWHprJHm5xuz49nVVFetFXg7qE5Q7Oo5t7N4vFPrP4f1
mMRmHjNMG7TCORFu0I3DSnvTrwR9NwawnM/mcZEkse4VJAmDeZxbkSHX+ZerPP1X
eqbWKRnmxSCs0xgDMOJhM0+1lfKjdZsOpAqpzk+ehwww1UV2lWBvpYS6nM7ZsRTN
vGj5nruPNSQN7MPxr/XMt5V+0aQb+kwPzjLsGYCpnQfH0gkiVAr2Bm+2Hwyy3zc4
PN9E
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:58 2026 by rpki-client