Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa
File:                     22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (raw, json)
Hash identifier:          EZBXtatzDllfCW2rTDFXkEXED9M+uf0VNnXIRtQVlAo=
Subject key identifier:   DB:82:41:EB:ED:FD:7A:B1:B8:E8:41:A8:A3:02:7A:DB:A9:9D:A9:AA
Certificate issuer:       /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Certificate serial:       30D0
Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:12:36 +0000
ROA not before:           Wed 04 Jun 2025 15:52:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     4851
IP address blocks:        2402:e400::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
                          rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12496 (0x30d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
        Validity
            Not Before: Jun  4 15:52:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a40303-096f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:f8:ad:88:09:d4:0b:e1:1c:bc:c5:23:25:
                    6e:4d:c7:af:51:6f:5e:c9:89:26:c2:cd:83:db:05:
                    55:e1:a5:56:e5:e5:91:d8:69:71:5f:84:8b:f0:3e:
                    0e:b7:6b:a2:d0:6e:60:2a:52:8a:20:10:36:a3:57:
                    7d:35:88:51:51:41:12:0f:0e:5b:66:a2:5b:3c:81:
                    f2:82:f2:7b:fa:19:bc:3e:7d:fd:0e:b3:00:0b:f6:
                    52:70:0e:d5:31:f8:41:73:7c:df:4f:7c:ab:87:0f:
                    e8:3b:e1:f6:b0:e7:4d:a2:c7:67:8c:11:77:02:b2:
                    4a:0f:49:ed:62:9f:03:96:c4:36:0e:7e:95:70:2d:
                    8f:02:ff:c4:9c:7e:23:0d:40:e8:a1:0a:00:8b:91:
                    77:0c:a8:ba:73:5e:e8:88:e7:4a:16:73:1b:6b:79:
                    fd:71:d7:16:bd:23:f8:3b:7a:76:71:a5:36:74:0a:
                    10:a6:31:25:3b:ce:03:28:ff:d3:ee:34:f0:ef:01:
                    7e:3c:1d:6e:b5:13:38:d5:46:58:1b:5d:9b:0d:47:
                    bd:1b:fc:4f:1f:e5:53:a4:7b:d8:81:c8:8c:27:53:
                    99:c6:da:c9:05:c4:7c:2e:70:55:58:01:53:2c:03:
                    3f:9e:48:f1:72:e6:2a:97:2c:80:11:d3:e6:d4:7f:
                    2e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:82:41:EB:ED:FD:7A:B1:B8:E8:41:A8:A3:02:7A:DB:A9:9D:A9:AA
            X509v3 Authority Key Identifier:
                keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         d1:bf:03:a1:bd:9c:98:5e:60:bd:08:d9:d5:b5:c9:ff:d2:7b:
         c5:8e:b6:3b:1d:21:b4:64:d7:91:1a:b7:33:08:17:48:2d:a6:
         ff:11:59:06:b8:2b:da:09:7e:3f:40:cf:62:df:f2:fe:a7:d0:
         8e:be:9b:f1:b5:5d:e4:78:48:be:a7:3e:ed:a0:fe:ae:3d:54:
         ec:e2:6d:06:ec:3c:16:15:fe:41:56:dd:69:07:3d:60:a0:86:
         18:84:fe:f7:10:ce:0b:0c:06:83:ab:07:c8:d7:bc:f8:43:41:
         57:b4:d6:14:6d:be:23:80:a0:e2:65:61:9c:86:9f:a2:93:8f:
         d9:df:b5:43:0e:45:45:b6:d1:1e:5d:d6:15:a7:ea:da:39:f6:
         0b:e1:c8:4e:ed:df:be:40:d2:18:7d:7a:5b:e6:22:d6:f7:6b:
         54:76:ab:c3:3d:44:42:0b:7a:cf:51:4b:87:1e:de:d5:26:d4:
         18:77:58:c0:c6:28:1a:9a:15:27:a5:66:f5:8e:47:26:a6:00:
         0e:fe:01:ea:be:49:c4:59:7b:ea:15:1c:71:7c:d8:e9:cb:3f:
         06:e1:4c:15:ca:c1:13:1d:02:4f:6c:3f:b9:a9:db:25:8a:fd:
         a9:11:9a:5d:46:46:a7:34:ba:9d:5b:5f:07:72:de:3a:15:f6:
         ae:03:22:c4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICMNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD
MzIwN0NFQ0EwHhcNMjUwNjA0MTU1MjIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDMwMy0wOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyB/4rYgJ1AvhHLzFIyVuTcevUW9eyYkmws2D2wVV4aVW5eWR2GlxX4SL8D4O
t2ui0G5gKlKKIBA2o1d9NYhRUUESDw5bZqJbPIHygvJ7+hm8Pn39DrMAC/ZScA7V
MfhBc3zfT3yrhw/oO+H2sOdNosdnjBF3ArJKD0ntYp8DlsQ2Dn6VcC2PAv/EnH4j
DUDooQoAi5F3DKi6c17oiOdKFnMba3n9cdcWvSP4O3p2caU2dAoQpjElO84DKP/T
7jTw7wF+PB1utRM41UZYG12bDUe9G/xPH+VTpHvYgciMJ1OZxtrJBcR8LnBVWAFT
LAM/nkjxcuYqlyyAEdPm1H8umQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFNuCQevt
/XqxuOhBqKMCetupnamqMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4
QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzUyRjQvODAxNjRGNEVGOEJDMTFFMkFEOTE4MTNCNTkxMUVBMzIvMjJFMkUzQzI0
RTI5MTFFRjhCRUU4RTEwQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJALkADANBgkqhkiG9w0BAQsFAAOCAQEA0b8Dob2cmF5gvQjZ1bXJ
/9J7xY62Ox0htGTXkRq3MwgXSC2m/xFZBrgr2gl+P0DPYt/y/qfQjr6b8bVd5HhI
vqc+7aD+rj1U7OJtBuw8FhX+QVbdaQc9YKCGGIT+9xDOCwwGg6sHyNe8+ENBV7TW
FG2+I4Cg4mVhnIafopOP2d+1Qw5FRbbRHl3WFafq2jn2C+HITu3fvkDSGH16W+Yi
1vdrVHarwz1EQgt6z1FLhx7e1SbUGHdYwMYoGpoVJ6Vm9Y5HJqYADv4B6r5JxFl7
6hUccXzY6cs/BuFMFcrBEx0CT2w/uanbJYr9qRGaXUZGpzS6nVtfB3LeOhX2rgMi
xA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:16:52 2026 by rpki-client