Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/164F6E2079BF11EAB3ADD60FC4F9AE02.roa
File:                     164F6E2079BF11EAB3ADD60FC4F9AE02.roa (raw, json)
Hash identifier:          88karHuZHn9NVBaZGr8GAqmmBxfDq19Aww01VbIu2gM=
Subject key identifier:   52:63:41:FC:7E:B4:F6:61:F9:48:26:8C:93:B5:59:BD:3C:9C:A2:E8
Certificate issuer:       /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Certificate serial:       1AA7
Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/164F6E2079BF11EAB3ADD60FC4F9AE02.roa
Signing time:             Thu 28 May 2026 17:04:10 +0000
ROA not before:           Thu 28 May 2026 17:04:10 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     18809
IP address blocks:        2400:cb00:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6823 (0x1aa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
        Validity
            Not Before: May 28 17:04:10 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a187589-4443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:71:1e:3d:3c:52:c9:f5:1d:c7:d5:ad:2b:a4:
                    64:a4:d7:29:85:53:44:67:91:75:d2:0e:dd:4c:3e:
                    ff:b2:4f:c1:12:81:55:57:65:fb:b3:4a:10:0f:4f:
                    87:a5:ab:5d:0b:1f:5b:4f:1a:f9:32:5e:46:84:b9:
                    e6:0a:ae:83:56:2e:5c:b3:ed:44:fe:40:3b:a9:a0:
                    e2:44:9b:13:1f:0f:ce:22:b2:df:48:73:d8:d5:b4:
                    62:2e:79:64:a8:0d:27:06:58:9f:a7:6c:53:f2:7d:
                    58:50:11:0f:0c:c5:72:9a:0d:30:7c:22:d9:9f:46:
                    b3:72:66:06:95:73:78:cb:99:55:ec:3a:fc:e9:5c:
                    86:81:d9:83:cc:2b:4d:91:33:98:11:ed:63:6f:c8:
                    88:24:3e:7c:65:ce:05:2c:14:25:8c:c5:08:0b:d6:
                    57:35:07:a9:83:d6:93:5a:de:77:f8:c8:0d:39:34:
                    83:f6:82:57:11:c4:cd:b4:b2:18:54:da:7b:43:47:
                    9d:7a:90:5f:65:6b:96:fd:86:fd:75:ba:83:14:66:
                    01:27:4d:3e:bd:9d:02:3d:35:1c:70:76:f7:36:b3:
                    af:bb:b6:48:29:03:2b:2d:21:cb:f5:b2:85:c5:01:
                    fe:06:e6:04:ea:96:a5:7c:cd:ee:3b:5e:4b:d8:f2:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:63:41:FC:7E:B4:F6:61:F9:48:26:8C:93:B5:59:BD:3C:9C:A2:E8
            X509v3 Authority Key Identifier:
                keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/164F6E2079BF11EAB3ADD60FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:cb00:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:22:60:6b:a9:93:2f:ee:b6:6b:86:e6:fa:24:10:b0:1a:db:
         b1:6b:8e:68:03:07:59:d7:e8:6d:e8:1c:bc:a7:55:fc:9d:53:
         fb:5a:05:34:2a:ef:e2:e0:1f:ad:5a:c4:f5:46:f3:6f:f7:b4:
         51:f6:26:0f:e9:ab:6d:03:ae:e1:f7:13:f5:e4:c0:63:d5:f6:
         ef:32:bc:ca:1f:41:89:15:d9:69:53:89:6f:9a:2b:39:a5:fb:
         ed:c7:94:de:05:3d:d8:fb:07:14:a8:bb:b2:0b:e0:f0:cd:23:
         d3:f6:c9:95:2f:98:19:5c:f3:7b:38:ed:5d:38:db:3b:3a:5f:
         b6:00:a1:3e:a8:0f:f0:d1:e3:e4:78:89:29:22:24:2e:81:5b:
         66:4b:47:ee:b3:c7:68:a4:28:97:46:fc:47:3f:ac:b1:9a:3e:
         ac:1e:70:eb:f1:71:4f:56:14:df:b2:e6:bb:c9:e7:2d:55:b6:
         55:7a:f0:e0:25:51:49:17:80:d7:b2:8f:94:ab:4f:0b:2b:e0:
         c1:a8:73:f5:4a:40:a6:1b:1a:5c:dd:d2:18:60:65:66:8a:b5:
         41:a3:aa:0c:c5:af:66:eb:96:4b:8c:37:9e:09:7a:0e:6a:22:
         46:f0:8c:f6:8b:f6:c6:95:f0:d1:b1:d2:6e:4f:4d:7b:9c:c2:
         d0:da:c6:24
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICGqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4
NTQwNjY0NDQwHhcNMjYwNTI4MTcwNDEwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE4NzU4OS00NDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmnEePTxSyfUdx9WtK6RkpNcphVNEZ5F10g7dTD7/sk/BEoFVV2X7s0oQD0+H
patdCx9bTxr5Ml5GhLnmCq6DVi5cs+1E/kA7qaDiRJsTHw/OIrLfSHPY1bRiLnlk
qA0nBlifp2xT8n1YUBEPDMVymg0wfCLZn0azcmYGlXN4y5lV7Dr86VyGgdmDzCtN
kTOYEe1jb8iIJD58Zc4FLBQljMUIC9ZXNQepg9aTWt53+MgNOTSD9oJXEcTNtLIY
VNp7Q0edepBfZWuW/Yb9dbqDFGYBJ00+vZ0CPTUccHb3NrOvu7ZIKQMrLSHL9bKF
xQH+BuYE6palfM3uO15L2PKdpQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFJjQfx+
tPZh+UgmjJO1Wb08nKLoMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx
QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda
RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJEQTQvMUVDNzAyQkNGMUE3MTFFODkwRjA2NjUwQzRGOUFFMDIvMTY0RjZFMjA3
OUJGMTFFQUIzQURENjBGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJADLAACQMA0GCSqGSIb3DQEBCwUAA4IBAQAIImBrqZMv7rZrhub6
JBCwGtuxa45oAwdZ1+ht6By8p1X8nVP7WgU0Ku/i4B+tWsT1RvNv97RR9iYP6att
A67h9xP15MBj1fbvMrzKH0GJFdlpU4lvmis5pfvtx5TeBT3Y+wcUqLuyC+DwzSPT
9smVL5gZXPN7OO1dONs7Ol+2AKE+qA/w0ePkeIkpIiQugVtmS0fus8dopCiXRvxH
P6yxmj6sHnDr8XFPVhTfsua7yectVbZVevDgJVFJF4DXso+Uq08LK+DBqHP1SkCm
Gxpc3dIYYGVmirVBo6oMxa9m65ZLjDeeCXoOaiJG8Iz2i/bGlfDRsdJuT017nMLQ
2sYk
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:18 2026 by rpki-client