Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/0FB60AEED6D711F085B1D0E884D3641D.roa
File:                     0FB60AEED6D711F085B1D0E884D3641D.roa (raw, json)
Hash identifier:          zu2J1LZYT0w/3iHjLznZWECGOhdsg6myGC2fCgr+ku8=
Subject key identifier:   FB:B5:8E:7A:AD:3E:CA:79:3F:9B:86:EF:F4:8A:03:33:34:1A:05:86
Certificate issuer:       /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Certificate serial:       2D
Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/0FB60AEED6D711F085B1D0E884D3641D.roa
Signing time:             Sun 01 Mar 2026 05:54:06 +0000
ROA not before:           Thu 11 Dec 2025 21:19:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     27424
IP address blocks:        2402:4480:202::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
                          rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
        Validity
            Not Before: Dec 11 21:19:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3d47e-dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:ab:c6:6d:8b:71:5d:38:74:ba:37:f5:ca:
                    6e:36:3a:1e:0d:68:89:f5:d1:10:72:31:c5:50:e5:
                    dc:d9:d2:86:00:4e:85:3f:e3:fd:b0:3a:04:b4:bc:
                    cf:6b:f5:ff:54:98:10:ef:dd:fb:32:5e:1b:16:13:
                    52:b9:f5:35:79:a5:5d:38:8d:42:47:1a:a8:16:18:
                    05:e5:27:18:75:fc:40:a9:b8:97:79:99:51:a1:53:
                    f0:4f:13:85:6b:06:d1:c9:32:03:cc:3f:0c:e1:ad:
                    11:88:c2:31:f1:28:de:3d:c1:b6:e5:98:d3:4f:df:
                    c3:f8:df:9e:23:90:f6:17:55:ad:a1:a7:65:da:65:
                    1d:cb:ff:2d:39:91:97:a7:38:20:ae:8c:d5:e9:c0:
                    39:74:40:33:35:9e:9f:bf:d7:2d:e1:32:c9:27:bc:
                    58:e9:6d:4c:ad:b7:ed:ec:24:88:aa:a6:40:57:7f:
                    ca:a4:4f:be:3c:5b:b0:f7:25:73:a6:9a:08:0d:4d:
                    8a:c6:be:5b:e5:cf:5d:9a:6b:7b:a6:7c:88:bf:85:
                    7c:bd:1c:75:82:11:1d:c2:fc:5f:ad:8f:cf:aa:8e:
                    a8:b4:d0:9c:d9:36:03:9c:47:e7:3d:13:85:87:97:
                    2b:11:c5:89:44:36:80:47:fc:b7:7a:2e:cb:b5:cb:
                    af:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B5:8E:7A:AD:3E:CA:79:3F:9B:86:EF:F4:8A:03:33:34:1A:05:86
            X509v3 Authority Key Identifier:
                keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/0FB60AEED6D711F085B1D0E884D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4480:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:16:e5:5c:d0:0c:3c:89:6e:ee:66:a1:53:50:52:6a:38:04:
         ef:67:34:54:c5:c8:06:06:a3:b1:93:07:1d:33:da:e4:df:0a:
         d5:de:1f:cd:61:8a:e7:9b:39:66:91:7c:a5:ee:1f:c5:54:96:
         47:1d:2a:dc:85:dd:78:31:64:c4:b1:a5:86:2b:63:8a:52:fa:
         0a:b0:07:69:b4:09:6a:64:6f:49:3a:b7:db:49:e8:17:08:4b:
         78:db:58:24:2a:bf:67:df:15:90:b1:50:4f:d4:68:20:19:16:
         d3:c5:12:e9:b0:3b:1d:42:e9:e9:2e:fe:7d:34:4f:97:60:2f:
         63:7b:4d:2e:da:47:86:bc:03:35:d9:5b:4c:2c:dc:af:00:56:
         df:59:2a:b8:e2:1c:f6:3e:cc:b0:94:a2:9b:fd:71:a4:b0:a8:
         05:d5:65:ed:2f:ac:7f:27:d6:fd:53:55:2c:db:ce:aa:ef:fc:
         8a:c0:bb:bb:08:c2:56:25:20:d1:8c:f3:d8:93:69:38:a4:ac:
         19:38:2a:f6:8e:83:2b:e4:8f:b4:a9:64:e1:e1:8f:f0:0d:71:
         d8:a7:f4:7d:18:61:ca:a6:7e:6f:96:20:68:36:85:d0:4e:6b:
         9a:45:63:12:3b:11:4d:70:21:32:a4:6c:7d:56:9b:1b:1a:2e:
         05:89:86:d4
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Mjk4OTExMC8GA1UEBRMoQUI2OUM3NDAyNTQ4OUFGRDYxNzQ3RkY5MzM1QjE0N0Uy
MEJCMjVENDAeFw0yNTEyMTEyMTE5MjJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNDdlLWRjNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0OavGbYtxXTh0ujf1ym42Oh4NaIn10RByMcVQ5dzZ0oYAToU/4/2wOgS0vM9r
9f9UmBDv3fsyXhsWE1K59TV5pV04jUJHGqgWGAXlJxh1/ECpuJd5mVGhU/BPE4Vr
BtHJMgPMPwzhrRGIwjHxKN49wbblmNNP38P4354jkPYXVa2hp2XaZR3L/y05kZen
OCCujNXpwDl0QDM1np+/1y3hMsknvFjpbUytt+3sJIiqpkBXf8qkT748W7D3JXOm
mggNTYrGvlvlz12aa3umfIi/hXy9HHWCER3C/F+tj8+qjqi00JzZNgOcR+c9E4WH
lysRxYlENoBH/Ld6Lsu1y6+dAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQU+7WOeq0+
ynk/m4bv9IoDMzQaBYYwHwYDVR0jBBgwFoAUq2nHQCVImv1hdH/5M1sUfiC7JdQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTg5L0VGRkRENzE0RDZE
NTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pk
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcTJuSFFDVkltdjFoZEhfNU0xc1VmaUM3SmRRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjk4OS9FRkZERDcxNEQ2RDUxMUYwQjA2Mzg0QjU4MUQzNjQxRC8wRkI2MEFFRUQ2
RDcxMUYwODVCMUQwRTg4NEQzNjQxRC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAkAkSAAgIwDQYJKoZIhvcNAQELBQADggEBABAW5VzQDDyJbu5moVNQ
Umo4BO9nNFTFyAYGo7GTBx0z2uTfCtXeH81hiuebOWaRfKXuH8VUlkcdKtyF3Xgx
ZMSxpYYrY4pS+gqwB2m0CWpkb0k6t9tJ6BcIS3jbWCQqv2ffFZCxUE/UaCAZFtPF
EumwOx1C6eku/n00T5dgL2N7TS7aR4a8AzXZW0ws3K8AVt9ZKrjiHPY+zLCUopv9
caSwqAXVZe0vrH8n1v1TVSzbzqrv/IrAu7sIwlYlINGM89iTaTikrBk4KvaOgyvk
j7SpZOHhj/ANcdin9H0YYcqmfm+WIGg2hdBOa5pFYxI7EU1wITKkbH1WmxsaLgWJ
htQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:08 2026 by rpki-client