Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa
File:                     3524F8BCD75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier:          vtp4YKFz/A5Vi0zg64GLZs1k3ocvwIIzZCuiJxmejGs=
Subject key identifier:   66:9F:03:03:A1:76:80:07:29:B9:CE:10:49:30:E8:F1:F4:D1:27:1B
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       0779
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:57:43 +0000
ROA not before:           Wed 02 Jul 2025 22:31:57 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     138195
IP address blocks:        2401:e9e0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  2 22:31:57 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47e17-f640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:2e:ff:01:9a:17:23:0d:0d:d3:1d:07:a3:
                    8c:95:7f:ce:ce:9a:c6:5c:ab:31:ff:2d:0f:a7:e9:
                    a2:f9:a8:6a:a4:dc:ff:43:66:b9:93:b9:b1:cf:a8:
                    4c:15:6e:57:19:b3:50:60:97:17:1f:69:e6:fe:37:
                    fd:8f:24:09:98:92:3b:08:b0:74:24:4e:43:b2:8c:
                    e8:90:eb:d9:9d:2e:90:83:e0:b1:3f:80:fc:f1:61:
                    1e:f4:8d:7b:f5:bf:54:f3:e6:00:98:a1:87:a2:9e:
                    d6:a3:df:04:95:e3:0b:e6:08:ee:aa:6d:b9:76:0a:
                    5f:b0:61:82:45:cf:9f:c2:0f:0a:52:e1:5d:bc:06:
                    f0:c1:32:75:78:70:0e:98:0a:3a:63:a3:77:ed:16:
                    e5:cb:0f:b2:29:aa:f8:66:11:49:e4:4c:45:32:35:
                    32:8b:dc:fb:46:fe:19:46:a3:a7:32:f0:24:b6:6b:
                    cd:94:81:fc:0e:3c:f5:1d:27:fb:4c:f0:6e:40:f9:
                    1c:9d:31:f6:c1:e2:05:4e:78:d1:00:5a:1c:b3:b9:
                    db:c0:5e:9a:95:be:f7:09:bb:a0:27:33:a0:81:b5:
                    a6:42:a8:c6:3f:cf:a2:db:4a:42:d2:05:d4:42:f1:
                    16:44:81:79:bb:91:5d:0d:c1:62:0e:2b:e9:05:c6:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9F:03:03:A1:76:80:07:29:B9:CE:10:49:30:E8:F1:F4:D1:27:1B
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e9e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:df:f4:3d:bc:fc:27:8e:0e:6e:b6:96:6c:2f:04:a5:43:
         ee:be:8a:06:47:57:db:af:1e:1c:ee:6b:ca:d8:0a:1e:f1:aa:
         ee:5c:f7:6f:4e:03:9a:9b:5c:df:d4:e5:95:30:e9:bc:32:c7:
         e5:5d:d8:1e:8c:9c:9b:f4:5a:2b:bd:0a:8a:16:20:0c:6e:6c:
         fa:d5:88:c7:34:87:4c:6c:a7:b6:5c:7a:a9:65:f9:7b:d4:c6:
         a9:17:2c:18:64:63:9d:dc:35:47:fb:7b:5a:84:71:59:e6:b1:
         0d:09:5f:b4:ad:dd:83:1a:6b:96:a0:82:5f:1c:62:a7:65:fd:
         07:dd:49:55:0c:bf:36:d7:f9:48:70:fc:7c:87:c2:c1:fd:eb:
         e2:61:ab:94:c9:e3:74:6f:b6:9d:c9:e6:bf:37:a3:88:af:90:
         58:81:00:92:c4:3d:a6:34:d7:d7:f4:fe:43:de:bd:cb:e2:9b:
         dd:98:35:4b:72:d8:e6:d1:58:c7:74:de:a9:6e:0e:74:41:c7:
         6d:b5:42:da:b0:5a:4a:ed:32:fd:5d:8f:6e:df:cd:95:de:1d:
         47:64:c4:b4:a1:ce:41:73:af:9d:7b:51:bd:90:bd:50:43:93:
         c4:86:e0:39:85:42:b5:f5:65:94:08:c1:a3:d6:97:e5:69:2e:
         07:84:8a:4c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0
QzkxNTRGMjQwHhcNMjUwNzAyMjIzMTU3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2UxNy1mNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAobwu/wGaFyMNDdMdB6OMlX/OzprGXKsx/y0Pp+mi+ahqpNz/Q2a5k7mxz6hM
FW5XGbNQYJcXH2nm/jf9jyQJmJI7CLB0JE5DsozokOvZnS6Qg+CxP4D88WEe9I17
9b9U8+YAmKGHop7Wo98EleML5gjuqm25dgpfsGGCRc+fwg8KUuFdvAbwwTJ1eHAO
mAo6Y6N37Rblyw+yKar4ZhFJ5ExFMjUyi9z7Rv4ZRqOnMvAktmvNlIH8Djz1HSf7
TPBuQPkcnTH2weIFTnjRAFocs7nbwF6alb73CbugJzOggbWmQqjGP8+i20pC0gXU
QvEWRIF5u5FdDcFiDivpBcYGhQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFGafAwOh
doAHKbnOEEkw6PH00ScbMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1
MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvMzUyNEY4QkNE
NzU1MTFFRjgwRTY4QTM5QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAHp4CAwDQYJKoZIhvcNAQELBQADggEBACbE3/Q9vPwnjg5utpZs
LwSlQ+6+igZHV9uvHhzua8rYCh7xqu5c929OA5qbXN/U5ZUw6bwyx+Vd2B6MnJv0
Wiu9CooWIAxubPrViMc0h0xsp7Zceqll+XvUxqkXLBhkY53cNUf7e1qEcVnmsQ0J
X7St3YMaa5aggl8cYqdl/QfdSVUMvzbX+Uhw/HyHwsH96+Jhq5TJ43Rvtp3J5r83
o4ivkFiBAJLEPaY019f0/kPevcvim92YNUty2ObRWMd03qluDnRBx221QtqwWkrt
Mv1dj27fzZXeHUdkxLShzkFzr517Ub2QvVBDk8SG4DmFQrX1ZZQIwaPWl+VpLgeE
ikw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:56 2026 by rpki-client