Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa
File:                     44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (raw, json)
Hash identifier:          aLH1AvmivEk7WizlOlXYSpsdAmTXmH2XnGqApjHlxM0=
Subject key identifier:   6F:63:A6:62:62:0A:6F:7F:8A:D3:84:5D:97:2F:65:B4:4C:70:F5:A9
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       04BB
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:09:40 +0000
ROA not before:           Sat 05 Apr 2025 01:05:48 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     204185
IP address blocks:        2400:58a0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Apr  5 01:05:48 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a464c4-f4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:d2:4f:89:22:f3:92:7f:1c:8c:d2:fe:d5:
                    f1:05:fc:6e:97:47:6b:b1:9a:a1:1e:34:16:df:25:
                    43:1a:f4:12:4d:c5:3e:3e:85:55:ca:e5:04:15:3f:
                    87:d9:04:a6:80:2f:65:26:19:98:94:a0:e7:7d:da:
                    26:60:14:17:c1:a3:b4:83:19:3e:62:b7:df:ca:e8:
                    f6:fa:e4:97:d2:53:40:4f:78:a3:10:89:d2:77:b2:
                    eb:99:c0:fe:8e:8e:4c:90:02:08:68:62:62:bc:2d:
                    19:8e:a9:3b:c1:dd:39:7c:b1:56:11:d4:0c:fd:1f:
                    2c:e1:60:cd:54:44:72:7a:c1:75:90:a1:f5:14:e4:
                    65:73:d7:2f:44:c8:a7:e4:54:b0:5c:89:fa:7f:b6:
                    ee:a4:3d:58:b2:93:72:2d:03:a6:0b:c2:84:23:3f:
                    49:03:cd:4e:97:14:f9:93:85:32:ae:ab:73:f6:76:
                    6b:87:1e:17:f7:7c:b2:b9:97:6b:c6:2f:7b:f1:d5:
                    01:65:d0:e5:a3:d4:f1:a7:4d:7e:80:57:46:ec:c4:
                    3f:88:b4:eb:02:40:30:f0:33:da:a8:29:29:7c:98:
                    75:98:28:6d:b5:c0:67:3e:80:bc:be:8a:d9:39:b3:
                    ef:8d:d5:92:09:97:09:12:b0:f3:ca:7f:60:3b:a7:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:63:A6:62:62:0A:6F:7F:8A:D3:84:5D:97:2F:65:B4:4C:70:F5:A9
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:58a0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:0c:45:92:ff:95:74:a5:c0:de:32:3b:b4:3a:bd:f9:46:
         3c:0f:a8:6b:46:fc:61:d4:64:04:99:d1:71:5d:7d:20:0e:4b:
         87:e0:e9:9c:3b:ad:ce:73:80:b3:80:44:86:2a:93:1a:c8:26:
         bb:3d:ab:45:8d:52:95:f5:e4:6f:50:ec:02:dc:6d:3b:57:92:
         d2:0b:d2:85:96:18:e6:4d:97:04:d5:91:1c:a7:c8:5d:97:2e:
         dc:24:1b:e8:f3:8f:cc:62:88:40:12:56:0d:53:a7:6c:da:d5:
         5e:82:f0:0d:c3:9d:24:78:7e:40:66:9a:3f:bd:44:11:50:da:
         b2:2a:f6:f2:6b:3c:7f:36:33:65:4c:8e:9e:fe:9d:29:de:7f:
         ae:0a:9d:8a:57:ae:08:34:fb:83:6d:ca:c6:e8:79:fc:09:94:
         f5:03:c7:73:8f:e6:60:bb:28:48:0b:34:75:91:70:65:4f:7b:
         74:3a:09:09:6e:b2:a4:b8:93:9b:8f:b8:a0:f4:b7:6e:f2:b2:
         21:f9:96:b0:43:5d:28:6f:b8:86:55:c9:fe:37:2f:f5:aa:3c:
         e0:77:e4:26:bc:47:14:57:4f:bb:ef:1c:07:85:17:b0:5d:37:
         7e:14:f5:7a:0d:8d:01:38:b7:a9:8f:7b:f5:16:d7:93:d5:9d:
         dc:8f:91:91
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5
QTQ1QzlFQ0IwHhcNMjUwNDA1MDEwNTQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjRjNC1mNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj83ST4ki85J/HIzS/tXxBfxul0drsZqhHjQW3yVDGvQSTcU+PoVVyuUEFT+H
2QSmgC9lJhmYlKDnfdomYBQXwaO0gxk+Yrffyuj2+uSX0lNAT3ijEInSd7LrmcD+
jo5MkAIIaGJivC0Zjqk7wd05fLFWEdQM/R8s4WDNVERyesF1kKH1FORlc9cvRMin
5FSwXIn6f7bupD1YspNyLQOmC8KEIz9JA81OlxT5k4Uyrqtz9nZrhx4X93yyuZdr
xi978dUBZdDlo9Txp01+gFdG7MQ/iLTrAkAw8DPaqCkpfJh1mChttcBnPoC8vorZ
ObPvjdWSCZcJErDzyn9gO6eMQwIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFG9jpmJi
Cm9/itOEXZcvZbRMcPWpMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1
NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0I0QkYvQjhDQzY5M0M4NTVDMTFFQzhFM0NCQjUxQzRGOUFFMDIvNDRCMTFBNTJD
QUVFMTFFQ0JDMEIyQjdFQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJABYoOAwDQYJKoZIhvcNAQELBQADggEBAFAuDEWS/5V0pcDeMju0
Or35RjwPqGtG/GHUZASZ0XFdfSAOS4fg6Zw7rc5zgLOARIYqkxrIJrs9q0WNUpX1
5G9Q7ALcbTtXktIL0oWWGOZNlwTVkRynyF2XLtwkG+jzj8xiiEASVg1Tp2za1V6C
8A3DnSR4fkBmmj+9RBFQ2rIq9vJrPH82M2VMjp7+nSnef64KnYpXrgg0+4Ntysbo
efwJlPUDx3OP5mC7KEgLNHWRcGVPe3Q6CQlusqS4k5uPuKD0t27ysiH5lrBDXShv
uIZVyf43L/WqPOB35Ca8RxRXT7vvHAeFF7BdN34U9XoNjQE4t6mPe/UW15PVndyP
kZE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:13 2026 by rpki-client