Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
File:                     E7F6D15AD17411EE87F7325DC4F9AE02.roa (raw, json)
Hash identifier:          zQuRWZynPjX+xVieuFFOjcx7urcSlA8n96bIrvyW0V4=
Subject key identifier:   8E:AC:89:67:FD:ED:45:B4:90:34:74:58:CD:79:75:28:0A:14:49:0C
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       0194
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 04:37:01 +0000
ROA not before:           Tue 31 Mar 2026 04:37:01 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152585
IP address blocks:        2001:df3:7ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Mar 31 04:37:01 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cb4f6d-523d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:83:5c:79:c2:25:65:68:e9:83:d6:47:de:
                    3b:a8:05:84:2d:0f:32:af:35:a6:9f:ee:eb:2a:de:
                    b1:a0:05:f6:68:27:8b:7b:61:b1:09:d6:2f:b7:9e:
                    d1:0c:a2:47:fc:9d:99:68:60:f6:81:26:fb:d4:f0:
                    e9:6b:88:48:b7:4e:8e:d8:61:fe:fd:a7:09:7e:5a:
                    9b:46:00:37:9b:d1:90:d6:b7:d6:54:2e:9b:0f:f6:
                    80:3f:c3:06:14:e5:f6:c3:71:4d:9e:ea:29:17:86:
                    4a:ed:c3:af:ce:0b:79:24:d8:24:04:9e:ba:79:80:
                    1a:80:47:5f:f2:0f:25:be:76:c3:3f:77:f4:72:d5:
                    e1:b2:de:8e:2e:dd:4d:e0:3c:f9:2e:b3:4a:60:aa:
                    42:8c:75:ec:4e:ef:53:aa:a7:c1:38:05:4a:31:db:
                    3e:3b:0d:c3:07:0c:eb:b6:fa:4e:58:6a:54:bf:29:
                    76:ef:2e:e7:c1:a0:9f:36:d7:ac:4a:c6:90:72:51:
                    a0:30:cd:5d:39:ed:78:6a:de:59:d4:05:da:05:b7:
                    36:d9:49:61:91:6e:8f:6a:76:83:f0:f4:e9:a8:6c:
                    9a:28:91:28:ab:9a:36:09:09:8a:9f:69:5c:18:f8:
                    ca:a4:cd:14:51:bc:5d:1b:45:53:17:9e:52:0d:01:
                    8d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AC:89:67:FD:ED:45:B4:90:34:74:58:CD:79:75:28:0A:14:49:0C
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/E7F6D15AD17411EE87F7325DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:95:1c:c9:ae:98:21:7e:e8:4e:ce:35:ab:bb:79:a2:85:0c:
         56:42:da:5e:09:ef:75:43:bd:95:66:81:a5:7f:5c:b1:b0:9a:
         65:56:a0:38:1c:d2:ee:a4:fe:74:e1:95:ad:0a:60:7e:a4:32:
         57:88:dc:36:b3:3b:8a:30:82:7c:f2:6e:d0:7c:36:3b:69:4a:
         38:3b:c6:37:83:39:c9:99:4d:d8:db:f6:5d:68:b2:8f:a3:1c:
         65:8d:03:bb:7d:f0:7d:9c:90:34:01:48:08:0b:16:d2:67:14:
         be:77:91:f4:da:58:76:b3:8b:90:e3:65:4b:79:9f:1b:0c:5e:
         28:ea:98:f4:84:5b:1a:f9:a8:31:e4:dc:29:80:f2:f2:4a:2a:
         b9:59:32:08:9a:eb:5e:4b:f2:63:d6:f3:d9:df:a9:02:a7:11:
         95:36:fc:f4:8c:d5:86:18:29:01:d4:25:38:a9:d4:07:7f:64:
         54:5a:da:67:73:b9:3b:53:54:04:24:11:21:99:b8:df:30:c4:
         35:a4:1b:ed:d6:4c:7a:0c:85:80:55:d5:57:94:98:c6:9a:9c:
         43:76:33:94:b6:6d:d2:2c:fc:79:33:26:d1:eb:ae:d5:33:e1:
         63:96:c8:b5:ac:95:7b:ba:26:b7:b2:25:fa:d4:c4:8f:64:42:
         84:6a:0e:8d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyNDkxMTAvBgNVBAUTKEFDRTI4REFCRTUzNjQ5NjM3RkE2RTRFMzIxREUxQjYz
NDYzQjgzQ0YwHhcNMjYwMzMxMDQzNzAxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNiNGY2ZC01MjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuU+DXHnCJWVo6YPWR947qAWELQ8yrzWmn+7rKt6xoAX2aCeLe2GxCdYvt57R
DKJH/J2ZaGD2gSb71PDpa4hIt06O2GH+/acJflqbRgA3m9GQ1rfWVC6bD/aAP8MG
FOX2w3FNnuopF4ZK7cOvzgt5JNgkBJ66eYAagEdf8g8lvnbDP3f0ctXhst6OLt1N
4Dz5LrNKYKpCjHXsTu9TqqfBOAVKMds+Ow3DBwzrtvpOWGpUvyl27y7nwaCfNtes
SsaQclGgMM1dOe14at5Z1AXaBbc22UlhkW6PanaD8PTpqGyaKJEoq5o2CQmKn2lc
GPjKpM0UUbxdG0VTF55SDQGN7QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFI6siWf9
7UW0kDR0WM15dSgKFEkMMB8GA1UdIwQYMBaAFKzijavlNkljf6bk4yHeG2NGO4PP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS9BMUYyMzQzQ0Qx
NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9yT0tOcS1VMlNXTl9wdVRqSWQ0YlkwWTdn
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JPS05xLVUyU1dOX3B1VGpJZDRiWTBZN2c4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyNDkvQTFGMjM0M0NEMTcwMTFFRUE2MTUxQzREQzRGOUFFMDIvRTdGNkQxNUFE
MTc0MTFFRTg3RjczMjVEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN837AMA0GCSqGSIb3DQEBCwUAA4IBAQCmlRzJrpghfuhOzjWr
u3mihQxWQtpeCe91Q72VZoGlf1yxsJplVqA4HNLupP504ZWtCmB+pDJXiNw2szuK
MIJ88m7QfDY7aUo4O8Y3gznJmU3Y2/ZdaLKPoxxljQO7ffB9nJA0AUgICxbSZxS+
d5H02lh2s4uQ42VLeZ8bDF4o6pj0hFsa+agx5NwpgPLySiq5WTIImuteS/Jj1vPZ
36kCpxGVNvz0jNWGGCkB1CU4qdQHf2RUWtpnc7k7U1QEJBEhmbjfMMQ1pBvt1kx6
DIWAVdVXlJjGmpxDdjOUtm3SLPx5MybR667VM+Fjlsi1rJV7uia3siX61MSPZEKE
ag6N
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:55 2026 by rpki-client