Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/66D426F0E55D11F0B49EA6E0396F56BC.roa
File:                     66D426F0E55D11F0B49EA6E0396F56BC.roa (raw, json)
Hash identifier:          vd4a1cc9Xp0q9vrR1OOEM0LC4eCbdB/9o/CPElQoT8U=
Subject key identifier:   99:1C:51:49:8E:0B:92:B6:C5:C1:6E:01:9D:76:A1:29:5F:0C:DD:51
Certificate issuer:       /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial:       0846
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/66D426F0E55D11F0B49EA6E0396F56BC.roa
Signing time:             Sun 01 Mar 2026 17:24:01 +0000
ROA not before:           Tue 30 Dec 2025 08:56:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139655
IP address blocks:        2001:df1:6f80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
                          rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
        Validity
            Not Before: Dec 30 08:56:17 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47631-16fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:9c:5d:05:a0:7a:7f:99:30:06:29:eb:42:
                    56:ef:ba:97:a9:82:72:a1:78:52:0a:d0:95:13:54:
                    cb:76:f6:0e:5c:e7:b7:79:8a:5c:b6:19:f6:d3:0b:
                    ec:8f:23:b3:02:bf:c1:82:d2:60:be:87:45:35:4e:
                    c8:71:9a:80:35:58:4f:0d:9e:2e:97:4f:b7:5b:15:
                    0e:66:bc:74:e4:ef:d1:49:25:48:bb:a5:f3:05:c3:
                    cc:97:2e:9a:60:d6:ab:47:e4:b5:6b:e8:99:7b:a3:
                    fe:fd:0a:30:eb:b7:32:05:ba:ba:af:ca:b7:87:3c:
                    10:6f:c2:af:87:68:f2:a4:19:79:9e:93:d7:02:00:
                    67:5f:33:0d:75:27:6c:30:23:c9:23:56:55:34:dc:
                    28:64:a5:68:c8:1d:e4:8a:66:4e:2d:f8:01:6f:e0:
                    f1:3d:b9:e7:df:64:95:9a:76:28:2d:4e:e9:b9:52:
                    9e:18:83:70:dc:74:ac:b6:ec:a5:bd:16:32:90:cc:
                    c6:79:79:53:0e:3a:92:90:07:05:c6:fa:72:f1:d5:
                    0e:e7:f7:66:6b:dc:3a:1e:54:ca:75:00:13:ce:a0:
                    6c:cc:e7:67:e2:4b:09:4b:f3:c6:86:ed:14:dc:f8:
                    99:d5:3c:5f:d9:d9:2d:73:39:e3:69:72:ef:27:43:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1C:51:49:8E:0B:92:B6:C5:C1:6E:01:9D:76:A1:29:5F:0C:DD:51
            X509v3 Authority Key Identifier:
                keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/66D426F0E55D11F0B49EA6E0396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:a6:be:54:b9:bf:ee:63:fe:0a:22:46:3c:2a:32:11:23:
         a3:1f:ea:ca:9d:b6:6d:22:2b:43:16:b0:75:8e:81:75:48:37:
         40:53:79:36:6a:05:56:52:14:a3:71:f6:45:8e:ab:1e:36:f0:
         0f:40:34:0d:0c:ef:c7:94:84:36:98:85:b2:da:cc:01:c5:6f:
         a7:15:6d:8f:92:90:0a:fd:17:ba:ea:3a:4d:f1:87:6e:f5:81:
         c4:8a:ba:e7:ff:a6:6d:a0:d0:59:82:95:97:3c:7f:47:b5:cb:
         6d:d9:ed:d7:2e:62:4f:65:5c:89:19:e5:5a:39:23:67:c4:08:
         7e:d5:0a:46:9a:0e:f3:48:ae:84:40:8a:6d:33:78:9a:f9:85:
         83:cf:87:e7:a5:99:7f:7b:34:d5:b1:11:02:1b:7a:2a:3b:13:
         3c:4a:c8:68:bc:3a:ad:e3:a0:22:23:aa:96:07:c9:aa:eb:22:
         e2:cc:30:ed:2a:f6:0a:f9:89:fa:c0:ba:b9:f5:f7:27:e5:b3:
         ea:75:f3:23:3a:49:d4:80:75:66:ed:1e:69:1e:50:e2:77:56:
         29:91:d7:21:0d:07:f8:26:2d:2d:00:51:f5:41:98:ca:a2:8c:
         82:3d:15:a1:56:3a:1e:5d:c3:bc:91:f8:c9:4a:9e:2f:98:51:
         ff:19:2b:10
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3
RDc1RkJEMjcwHhcNMjUxMjMwMDg1NjE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzYzMS0xNmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/ycXQWgen+ZMAYp60JW77qXqYJyoXhSCtCVE1TLdvYOXOe3eYpcthn20wvs
jyOzAr/BgtJgvodFNU7IcZqANVhPDZ4ul0+3WxUOZrx05O/RSSVIu6XzBcPMly6a
YNarR+S1a+iZe6P+/Qow67cyBbq6r8q3hzwQb8Kvh2jypBl5npPXAgBnXzMNdSds
MCPJI1ZVNNwoZKVoyB3kimZOLfgBb+DxPbnn32SVmnYoLU7puVKeGINw3HSstuyl
vRYykMzGeXlTDjqSkAcFxvpy8dUO5/dma9w6HlTKdQATzqBszOdn4ksJS/PGhu0U
3PiZ1Txf2dktcznjaXLvJ0MlIwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJkcUUmO
C5K2xcFuAZ12oSlfDN1RMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1
RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc0OTMvREE0MzQzNDYwNUZDMTFFQjlCMzRBNTgzQzRGOUFFMDIvNjZENDI2RjBF
NTVEMTFGMEI0OUVBNkUwMzk2RjU2QkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8W+AMA0GCSqGSIb3DQEBCwUAA4IBAQBmLqa+VLm/7mP+CiJG
PCoyESOjH+rKnbZtIitDFrB1joF1SDdAU3k2agVWUhSjcfZFjqseNvAPQDQNDO/H
lIQ2mIWy2swBxW+nFW2PkpAK/Re66jpN8Ydu9YHEirrn/6ZtoNBZgpWXPH9Htctt
2e3XLmJPZVyJGeVaOSNnxAh+1QpGmg7zSK6EQIptM3ia+YWDz4fnpZl/ezTVsREC
G3oqOxM8SshovDqt46AiI6qWB8mq6yLizDDtKvYK+Yn6wLq59fcn5bPqdfMjOknU
gHVm7R5pHlDid1YpkdchDQf4Ji0tAFH1QZjKooyCPRWhVjoeXcO8kfjJSp4vmFH/
GSsQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:23 2026 by rpki-client