Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/D4AECB7A701611EF824F7281C4F9AE02.roa
File:                     D4AECB7A701611EF824F7281C4F9AE02.roa (raw, json)
Hash identifier:          gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=
Subject key identifier:   B1:CB:A9:A6:94:6A:E8:92:52:FD:60:83:F1:FE:53:1D:EC:DB:99:22
Certificate issuer:       /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial:       0AA7
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/D4AECB7A701611EF824F7281C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:00:49 +0000
ROA not before:           Thu 30 Oct 2025 20:09:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58877
IP address blocks:        2405:2d00::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2727 (0xaa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
        Validity
            Not Before: Oct 30 20:09:10 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a44691-4d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:9f:57:af:1b:67:5b:48:91:0d:4d:49:9b:
                    19:d8:48:70:a7:a3:29:2b:cd:9b:35:78:6c:c5:6e:
                    d1:2b:17:54:f8:80:44:0d:12:7b:66:dc:0d:ef:60:
                    aa:6f:50:b0:0a:58:2d:64:93:07:7f:db:63:00:fc:
                    31:76:7c:c6:ba:ab:45:55:dd:d2:29:47:1f:1d:e1:
                    d5:7f:dc:90:22:8c:51:b4:f5:a6:a6:d1:d4:38:6a:
                    f1:2e:2b:24:42:12:48:df:27:b6:01:39:61:63:4d:
                    15:cc:43:12:95:02:84:ee:d4:86:12:95:8e:8d:85:
                    55:28:2d:6f:21:ae:28:a8:f5:0a:31:df:6c:6f:c2:
                    81:af:3b:a3:cd:0e:72:17:f1:b5:7a:f0:a1:03:ed:
                    7b:43:b5:fa:01:d7:77:b7:08:98:fb:3f:fa:98:d3:
                    8b:7b:22:57:88:1e:a2:7b:e9:0d:4e:29:a0:2a:ac:
                    d1:aa:7c:ab:6e:77:57:c0:14:72:f6:59:86:90:ce:
                    41:da:45:d1:47:c5:10:d5:6f:35:aa:36:34:7a:34:
                    d1:e7:78:3a:39:37:08:3e:c4:43:56:79:3d:3a:ac:
                    71:d0:cb:36:57:2d:d8:56:b0:50:85:3a:60:0c:e4:
                    df:ef:fa:7d:1c:90:ee:77:4a:fc:53:92:fc:7f:a2:
                    c9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CB:A9:A6:94:6A:E8:92:52:FD:60:83:F1:FE:53:1D:EC:DB:99:22
            X509v3 Authority Key Identifier:
                keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/D4AECB7A701611EF824F7281C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:0c:fd:ca:77:4f:f6:99:5c:14:19:47:85:f9:80:f7:98:f4:
         c1:73:d3:26:5e:91:56:a7:cc:64:b5:35:c4:07:bf:e3:72:b9:
         6f:08:11:8b:a6:1a:c6:ec:c1:1e:4f:1c:a6:f5:91:82:6b:65:
         10:88:80:87:29:0b:05:a6:76:01:63:37:2a:b7:27:a8:b1:a0:
         b9:8d:f6:a5:f1:d8:f0:fb:61:d8:0a:b3:73:e5:3c:b3:0d:23:
         03:a4:39:f7:22:0b:53:32:85:38:7e:16:b7:8e:7b:41:79:52:
         ff:21:7e:70:fa:3b:ab:02:14:aa:b7:01:e4:db:0b:1d:0e:8b:
         e5:2e:b1:a2:55:34:91:b7:79:de:8a:c8:35:87:03:a2:8f:39:
         74:ae:8b:4e:af:e1:a7:91:4e:f5:a1:98:41:6d:62:0e:bb:04:
         c0:f6:81:a1:60:38:f7:62:2a:55:52:e6:03:81:81:55:95:1d:
         6e:16:81:8d:a6:50:1c:ec:97:eb:29:43:ed:93:ff:46:34:ab:
         15:cb:be:74:76:2b:29:39:b5:ce:51:c1:38:31:89:cb:7a:a5:
         95:01:a6:fb:e4:ba:17:a0:fc:d6:33:a4:b6:83:ec:0a:07:27:
         32:54:9e:9d:f4:2a:4a:95:f7:3c:a6:d9:db:d0:fa:8a:e3:f7:
         07:28:5b:98
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICCqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC
QkFCOUM4MUMwHhcNMjUxMDMwMjAwOTEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDY5MS00ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApdSfV68bZ1tIkQ1NSZsZ2Ehwp6MpK82bNXhsxW7RKxdU+IBEDRJ7ZtwN72Cq
b1CwClgtZJMHf9tjAPwxdnzGuqtFVd3SKUcfHeHVf9yQIoxRtPWmptHUOGrxLisk
QhJI3ye2ATlhY00VzEMSlQKE7tSGEpWOjYVVKC1vIa4oqPUKMd9sb8KBrzujzQ5y
F/G1evChA+17Q7X6Add3twiY+z/6mNOLeyJXiB6ie+kNTimgKqzRqnyrbndXwBRy
9lmGkM5B2kXRR8UQ1W81qjY0ejTR53g6OTcIPsRDVnk9Oqxx0Ms2Vy3YVrBQhTpg
DOTf7/p9HJDud0r8U5L8f6LJkwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFLHLqaaU
auiSUv1gg/H+Ux3s25kiMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E3QTYvNERCOTQ0M0E3M0I2MTFFQTlCOEMxRjVDQzRGOUFFMDIvRDRBRUNCN0E3
MDE2MTFFRjgyNEY3MjgxQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAUtADANBgkqhkiG9w0BAQsFAAOCAQEAYAz9yndP9plcFBlHhfmA
95j0wXPTJl6RVqfMZLU1xAe/43K5bwgRi6YaxuzBHk8cpvWRgmtlEIiAhykLBaZ2
AWM3KrcnqLGguY32pfHY8Pth2Aqzc+U8sw0jA6Q59yILUzKFOH4Wt457QXlS/yF+
cPo7qwIUqrcB5NsLHQ6L5S6xolU0kbd53orINYcDoo85dK6LTq/hp5FO9aGYQW1i
DrsEwPaBoWA492IqVVLmA4GBVZUdbhaBjaZQHOyX6ylD7ZP/RjSrFcu+dHYrKTm1
zlHBODGJy3qllQGm++S6F6D81jOktoPsCgcnMlSenfQqSpX3PKbZ29D6iuP3Byhb
mA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:10 2026 by rpki-client