Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa
File:                     DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa (raw, json)
Hash identifier:          MjjSSBlKodGKkn3/GiKSnc0mZV7lMYdhPxahiq3z0B4=
Subject key identifier:   78:01:A1:7C:73:F4:48:D8:89:CE:D8:1C:B1:57:DB:69:3D:60:8D:54
Certificate issuer:       /CN=A916BF2B/serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
Certificate serial:       EF
Authority key identifier: CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:12:56 +0000
ROA not before:           Sun 11 Jan 2026 05:24:15 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137410
IP address blocks:        2001:df4:bc40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl
                          rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BF2B, serialNumber=CAEB77BCF09FF697F18A617AA860896E4326D9D3
        Validity
            Not Before: Jan 11 05:24:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41f38-8f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:b8:ae:1e:c7:9a:b4:df:7f:17:d9:dc:2b:
                    a5:2c:bc:25:d0:3a:10:81:04:c4:c1:e6:3d:0d:15:
                    09:d2:0b:62:ed:21:40:f6:02:fe:c7:28:c3:0c:c1:
                    ac:c9:2c:76:5a:0d:39:42:a8:93:b9:c5:ae:30:56:
                    20:72:d3:ed:8c:cf:cb:77:6c:a8:4c:ad:b0:4e:ee:
                    f5:00:f9:5e:26:94:e1:99:41:49:bd:e3:4e:12:e4:
                    85:62:ed:94:7e:7e:ba:30:1c:3c:f7:56:2f:5d:0a:
                    02:ae:02:fa:63:38:53:d7:2b:79:f6:92:bb:ea:99:
                    2a:5a:97:83:ad:8c:db:cc:44:14:c2:c4:45:a9:45:
                    05:b6:41:74:a7:a1:be:1a:82:12:50:cb:18:c3:07:
                    7b:32:aa:f4:d8:d8:27:b3:12:96:f6:e0:12:1d:d6:
                    73:19:64:fc:fd:0b:01:d9:44:45:cd:fa:c0:c5:68:
                    b9:26:36:dc:a0:98:29:25:12:68:54:90:ad:19:4e:
                    a2:44:80:20:d7:0a:35:a8:d7:1a:15:5a:34:71:6a:
                    d5:36:fa:c8:38:4c:00:8d:07:80:9f:a3:55:99:55:
                    2f:a9:a3:34:ba:ae:41:11:a5:44:8a:3b:89:2a:5e:
                    b9:b8:47:79:cc:e5:6f:e5:1c:ec:69:65:d8:ca:e1:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:01:A1:7C:73:F4:48:D8:89:CE:D8:1C:B1:57:DB:69:3D:60:8D:54
            X509v3 Authority Key Identifier:
                keyid:CA:EB:77:BC:F0:9F:F6:97:F1:8A:61:7A:A8:60:89:6E:43:26:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/yut3vPCf9pfximF6qGCJbkMm2dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yut3vPCf9pfximF6qGCJbkMm2dM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/5E15DD54B63011EF9061CA60C4F9AE02/DE5B0E52B7EE11EF9BCBDD78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:bc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:16:88:f4:94:69:ac:1c:0e:01:c3:3c:ca:d5:08:48:67:71:
         17:c5:8f:98:ce:60:4f:71:28:94:5b:36:88:59:35:f5:6d:5b:
         03:c0:e7:a7:cd:b2:c3:da:5d:33:4b:24:24:bd:b3:78:e6:ee:
         38:41:7a:29:52:07:c3:19:ec:13:80:b0:9b:15:71:d2:c4:a2:
         71:d4:21:ad:5b:bf:04:13:14:25:fb:96:71:ba:94:da:3e:89:
         3e:3e:b5:af:ee:c7:8b:12:0b:49:bc:6f:02:c1:b4:e3:64:f4:
         64:78:70:61:e5:0d:fe:00:c8:0e:0c:68:1c:14:5c:e9:41:dd:
         29:2c:07:02:ff:37:03:4e:bc:63:3e:86:cd:83:df:f0:7e:f2:
         cf:a1:9d:6a:f6:4d:a4:02:7c:ef:66:de:8d:d3:21:a0:85:c9:
         ab:0a:65:17:d8:7e:8c:38:4a:b6:32:d1:d1:d2:42:79:ac:77:
         66:f1:dd:bc:f4:82:06:90:0f:85:57:87:64:69:4e:e0:3d:e4:
         4b:8b:61:7c:74:34:b8:21:e0:10:fa:b9:24:dc:7a:f4:04:9d:
         7b:96:49:ec:69:00:fc:4a:13:10:83:3b:fb:e9:66:f5:1e:9a:
         ae:a0:46:d5:40:8a:b9:78:6b:05:a2:5e:01:1d:f8:06:c7:8d:
         20:08:4e:92
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJGMkIxMTAvBgNVBAUTKENBRUI3N0JDRjA5RkY2OTdGMThBNjE3QUE4NjA4OTZF
NDMyNkQ5RDMwHhcNMjYwMTExMDUyNDE1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWYzOC04ZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSq4rh7HmrTffxfZ3CulLLwl0DoQgQTEweY9DRUJ0gti7SFA9gL+xyjDDMGs
ySx2Wg05QqiTucWuMFYgctPtjM/Ld2yoTK2wTu71APleJpThmUFJveNOEuSFYu2U
fn66MBw891YvXQoCrgL6YzhT1yt59pK76pkqWpeDrYzbzEQUwsRFqUUFtkF0p6G+
GoISUMsYwwd7Mqr02NgnsxKW9uASHdZzGWT8/QsB2URFzfrAxWi5JjbcoJgpJRJo
VJCtGU6iRIAg1wo1qNcaFVo0cWrVNvrIOEwAjQeAn6NVmVUvqaM0uq5BEaVEijuJ
Kl65uEd5zOVv5RzsaWXYyuEQbQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHgBoXxz
9EjYic7YHLFX22k9YI1UMB8GA1UdIwQYMBaAFMrrd7zwn/aX8YpheqhgiW5DJtnT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkYyQi81RTE1REQ1NEI2
MzAxMUVGOTA2MUNBNjBDNEY5QUUwMi95dXQzdlBDZjlwZnhpbUY2cUdDSmJrTW0y
ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l1dDN2UENmOXBmeGltRjZxR0NKYmtNbTJkTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJGMkIvNUUxNURENTRCNjMwMTFFRjkwNjFDQTYwQzRGOUFFMDIvREU1QjBFNTJC
N0VFMTFFRjlCQ0JERDc4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9LxAMA0GCSqGSIb3DQEBCwUAA4IBAQASFoj0lGmsHA4BwzzK
1QhIZ3EXxY+YzmBPcSiUWzaIWTX1bVsDwOenzbLD2l0zSyQkvbN45u44QXopUgfD
GewTgLCbFXHSxKJx1CGtW78EExQl+5ZxupTaPok+PrWv7seLEgtJvG8CwbTjZPRk
eHBh5Q3+AMgODGgcFFzpQd0pLAcC/zcDTrxjPobNg9/wfvLPoZ1q9k2kAnzvZt6N
0yGghcmrCmUX2H6MOEq2MtHR0kJ5rHdm8d289IIGkA+FV4dkaU7gPeRLi2F8dDS4
IeAQ+rkk3Hr0BJ17lknsaQD8ShMQgzv76Wb1HpquoEbVQIq5eGsFol4BHfgGx40g
CE6S
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:22 2026 by rpki-client