Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/44E524C6660611F0AC01FC4FC4F9AE02.roa
File:                     44E524C6660611F0AC01FC4FC4F9AE02.roa (raw, json)
Hash identifier:          IZAEj6W6QOuR8H1nZarqOKRBQJYHaDrF6ES808DOjWg=
Subject key identifier:   C7:A8:19:D7:67:B8:83:D3:8C:64:23:7D:1E:56:26:97:BF:C0:5C:FE
Certificate issuer:       /CN=A91425C3/serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127
Certificate serial:       74
Authority key identifier: 5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/44E524C6660611F0AC01FC4FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:12:09 +0000
ROA not before:           Mon 21 Jul 2025 07:42:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154071
IP address blocks:        2001:df5:e4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl
                          rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91425C3, serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127
        Validity
            Not Before: Jul 21 07:42:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e6c9-27b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:be:ac:24:41:5a:fe:5a:85:0e:b6:5c:4a:92:
                    5c:c9:e8:6e:fe:7a:4b:b8:10:a5:a9:a8:eb:e1:66:
                    06:e0:b7:83:5b:6c:b4:87:b5:98:6d:ca:15:ab:43:
                    74:24:7d:d6:86:bf:b6:8d:cb:45:84:98:d6:94:b2:
                    c7:53:ff:7e:4f:e1:a7:3f:be:25:6f:bd:30:40:10:
                    e1:61:6d:ae:e3:d6:5d:f1:e2:5e:cd:3a:09:7e:ff:
                    16:62:88:f6:1a:5d:0b:15:5b:e9:4d:bd:93:aa:17:
                    c7:1b:78:fe:cf:ba:3a:0f:41:f2:db:fe:f9:51:dd:
                    84:b3:04:c7:93:f6:48:ae:d0:0a:14:55:18:13:d1:
                    04:52:81:d2:eb:b4:10:bd:4d:a4:63:b3:77:33:be:
                    fa:74:a5:0c:6f:76:0d:46:2c:a9:a1:e7:fe:99:8e:
                    b1:d1:09:20:da:aa:48:20:27:7c:52:dd:d4:70:25:
                    a2:1b:23:2f:57:78:c9:fd:c8:ab:f4:04:cf:50:94:
                    14:1e:d5:8a:e7:d8:58:e8:30:9d:bc:48:e3:c6:13:
                    28:88:50:27:6d:d8:34:45:b9:ab:87:61:8f:33:2b:
                    97:6e:3a:ab:70:c7:e7:c1:0a:0b:93:c4:17:08:ed:
                    29:ed:e5:b6:0b:17:56:5a:eb:f2:d0:46:3a:92:2f:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A8:19:D7:67:B8:83:D3:8C:64:23:7D:1E:56:26:97:BF:C0:5C:FE
            X509v3 Authority Key Identifier:
                keyid:5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/44E524C6660611F0AC01FC4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:e4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:11:64:b2:3e:9b:21:af:13:39:b0:f6:fa:13:1d:ba:df:
         63:68:b7:75:44:39:80:97:57:48:91:e6:c7:15:89:75:53:c7:
         ce:0b:3c:1e:46:3f:86:c9:b4:f2:a7:b2:bc:1a:ef:38:71:de:
         00:e3:04:36:4d:20:af:d3:5e:fe:3b:03:55:cf:ec:de:be:92:
         3d:e0:cd:b0:69:ec:9a:9e:62:68:d3:14:04:06:e6:49:e6:b7:
         f8:d0:5d:37:02:e0:2b:c6:d4:0d:ad:b3:15:f7:91:fe:d5:a3:
         2c:fd:45:a5:ff:43:0d:3f:f6:4b:a6:8c:20:02:27:c7:77:2a:
         bc:54:61:13:98:0c:0d:79:6d:af:3a:c6:69:b6:67:5e:ab:96:
         5a:be:aa:e3:d4:9d:70:75:16:e9:93:d5:75:68:e3:29:51:6c:
         8e:87:99:14:f3:ec:6b:74:51:bb:78:4d:15:00:7f:3a:9a:e5:
         4a:92:39:11:fb:44:11:d0:f3:25:8f:f2:e7:53:99:67:ad:d5:
         9b:ac:eb:f7:12:05:39:b5:65:df:8c:d7:4e:bd:2a:01:a4:78:
         09:e0:d8:33:67:91:87:17:09:0c:95:ec:13:3b:b3:94:62:93:
         ca:d7:b3:af:cf:13:5b:38:c8:e5:e0:4f:a3:d4:f3:ee:ef:bc:
         c5:09:69:21
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjVDMzExMC8GA1UEBRMoNUFGQkI5Q0JCQzY1NDZCRDU1MUQxNzI2MzAxOTBBRTgx
QTlBRjEyNzAeFw0yNTA3MjEwNzQyMzZaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNmM5LTI3YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsvqwkQVr+WoUOtlxKklzJ6G7+eku4EKWpqOvhZgbgt4NbbLSHtZhtyhWrQ3Qk
fdaGv7aNy0WEmNaUssdT/35P4ac/viVvvTBAEOFhba7j1l3x4l7NOgl+/xZiiPYa
XQsVW+lNvZOqF8cbeP7PujoPQfLb/vlR3YSzBMeT9kiu0AoUVRgT0QRSgdLrtBC9
TaRjs3czvvp0pQxvdg1GLKmh5/6ZjrHRCSDaqkggJ3xS3dRwJaIbIy9XeMn9yKv0
BM9QlBQe1Yrn2FjoMJ28SOPGEyiIUCdt2DRFuauHYY8zK5duOqtwx+fBCguTxBcI
7Snt5bYLF1Za6/LQRjqSL4kXAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUx6gZ12e4
g9OMZCN9HlYml7/AXP4wHwYDVR0jBBgwFoAUWvu5y7xlRr1VHRcmMBkK6Bqa8Scw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzJDOTcxNEVFNjYw
NDExRjBBNEM1MTkyQkM0RjlBRTAyL1d2dTV5N3hsUnIxVkhSY21NQmtLNkJxYThT
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV3Z1NXk3eGxScjFWSFJjbU1Ca0s2QnFhOFNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjVDMy8yQzk3MTRFRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi80NEU1MjRDNjY2
MDYxMUYwQUMwMUZDNEZDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ315MAwDQYJKoZIhvcNAQELBQADggEBAF8IEWSyPpshrxM5sPb6
Ex2632Not3VEOYCXV0iR5scViXVTx84LPB5GP4bJtPKnsrwa7zhx3gDjBDZNIK/T
Xv47A1XP7N6+kj3gzbBp7JqeYmjTFAQG5knmt/jQXTcC4CvG1A2tsxX3kf7Voyz9
RaX/Qw0/9kumjCACJ8d3KrxUYROYDA15ba86xmm2Z16rllq+quPUnXB1FumT1XVo
4ylRbI6HmRTz7Gt0Ubt4TRUAfzqa5UqSORH7RBHQ8yWP8udTmWet1Zus6/cSBTm1
Zd+M1069KgGkeAng2DNnkYcXCQyV7BM7s5Rik8rXs6/PE1s4yOXgT6PU8+7vvMUJ
aSE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:10 2026 by rpki-client