Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa
File:                     35A4EFE0D75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier:          hn072ZUt0QkiLvSmGaoI0bZ5eHexJ3APJASDMCiyA2M=
Subject key identifier:   8B:71:EE:1C:B2:B4:0A:21:2F:E8:30:B7:D2:16:12:A4:FE:9F:03:E0
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       077A
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:57:44 +0000
ROA not before:           Wed 02 Jul 2025 22:31:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4785
IP address blocks:        2401:e9e0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  2 22:31:58 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47e18-3064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:95:1f:a0:15:af:b3:2b:e5:2c:d4:49:c8:82:
                    ef:66:f9:15:d0:6b:0b:38:d3:4f:6b:35:24:b8:3b:
                    87:17:fe:3a:88:6e:f5:75:ce:cd:bd:7e:bc:ea:9d:
                    8d:c5:55:3c:dd:70:39:53:b8:a2:14:71:26:07:a5:
                    15:f0:e8:d6:4d:9c:1c:e5:e6:52:7f:14:b5:f8:dd:
                    3b:60:37:a4:42:d0:90:29:9b:d2:66:a6:67:c5:87:
                    05:d5:82:4c:1c:c4:4f:9d:bd:0d:b2:d6:b2:5c:c9:
                    cf:96:cc:7d:54:8d:6d:7a:24:bc:1c:4a:da:55:d3:
                    f8:be:48:a6:fc:94:44:4c:29:f2:d2:81:d3:5a:99:
                    db:b9:98:80:ba:6f:fa:73:b2:b4:d9:3a:45:ae:74:
                    ca:8f:49:90:b8:b8:d4:c7:85:42:33:89:8e:3c:0a:
                    7f:b2:1a:c3:5a:d6:b7:e2:45:f7:bd:12:81:bd:78:
                    ef:8c:e4:5d:7b:92:ad:f1:ef:b1:9c:0e:65:5e:2e:
                    91:f8:4d:26:79:71:8a:a0:df:e4:71:03:79:98:a8:
                    c9:e7:a9:f0:91:2e:07:81:d6:f9:8e:f5:04:16:e3:
                    b6:f8:1d:cf:90:3f:a5:88:a9:5d:92:8c:9a:8f:2c:
                    3b:04:c6:03:b4:cd:06:61:eb:87:7b:e8:92:59:e4:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:71:EE:1C:B2:B4:0A:21:2F:E8:30:B7:D2:16:12:A4:FE:9F:03:E0
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/35A4EFE0D75511EF80E68A39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e9e0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c9:b9:37:9b:c0:01:41:12:8e:1c:ff:ef:48:9b:0f:23:b7:3f:
         d3:30:eb:d9:77:91:99:ea:3f:fb:06:e2:83:b2:80:7c:a1:60:
         59:79:f0:41:aa:a7:d7:3d:81:ce:34:3d:5d:41:bb:8b:45:ba:
         8c:84:71:b2:95:76:27:a1:a1:d9:c5:4a:14:33:78:52:98:cd:
         25:e6:31:9d:d9:93:9a:8f:ad:f6:ef:3e:24:5f:10:7b:71:78:
         22:5a:4f:d4:c6:58:2d:a0:0a:8d:7e:86:3f:46:40:a6:5f:89:
         43:77:c6:d3:1f:18:1b:91:91:58:45:36:bd:56:5b:be:76:e9:
         62:af:45:ad:59:d5:20:fc:8e:b0:0d:e3:c2:53:a7:22:ad:7d:
         c8:4a:22:50:3d:2e:b4:f6:2b:9d:62:d3:13:60:bf:09:c8:7c:
         9d:b0:9b:6c:7a:da:5f:a3:59:9f:9d:89:96:56:20:59:87:25:
         2e:35:27:a0:33:05:7d:78:88:cd:91:d9:33:ae:7e:c8:42:be:
         f6:6b:0d:15:52:3e:2e:de:fe:59:ed:3c:d5:64:82:2e:24:8c:
         7f:f3:b4:92:a3:45:d5:51:3a:a9:f3:03:fe:62:38:2a:7f:ca:
         46:0f:a3:0b:1b:80:13:0b:95:9d:c1:63:56:8b:fe:c4:22:fa:
         db:47:c0:2e
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0
QzkxNTRGMjQwHhcNMjUwNzAyMjIzMTU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2UxOC0zMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA45UfoBWvsyvlLNRJyILvZvkV0GsLONNPazUkuDuHF/46iG71dc7NvX686p2N
xVU83XA5U7iiFHEmB6UV8OjWTZwc5eZSfxS1+N07YDekQtCQKZvSZqZnxYcF1YJM
HMRPnb0NstayXMnPlsx9VI1teiS8HEraVdP4vkim/JRETCny0oHTWpnbuZiAum/6
c7K02TpFrnTKj0mQuLjUx4VCM4mOPAp/shrDWta34kX3vRKBvXjvjORde5Kt8e+x
nA5lXi6R+E0meXGKoN/kcQN5mKjJ56nwkS4Hgdb5jvUEFuO2+B3PkD+liKldkoya
jyw7BMYDtM0GYeuHe+iSWeTLXQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFItx7hyy
tAohL+gwt9IWEqT+nwPgMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1
MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvMzVBNEVGRTBE
NzU1MTFFRjgwRTY4QTM5QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAHp4DAwDQYJKoZIhvcNAQELBQADggEBAMm5N5vAAUESjhz/70ib
DyO3P9Mw69l3kZnqP/sG4oOygHyhYFl58EGqp9c9gc40PV1Bu4tFuoyEcbKVdieh
odnFShQzeFKYzSXmMZ3Zk5qPrfbvPiRfEHtxeCJaT9TGWC2gCo1+hj9GQKZfiUN3
xtMfGBuRkVhFNr1WW7526WKvRa1Z1SD8jrAN48JTpyKtfchKIlA9LrT2K51i0xNg
vwnIfJ2wm2x62l+jWZ+diZZWIFmHJS41J6AzBX14iM2R2TOufshCvvZrDRVSPi7e
/lntPNVkgi4kjH/ztJKjRdVROqnzA/5iOCp/ykYPowsbgBMLlZ3BY1aL/sQi+ttH
wC4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:03:04 2026 by rpki-client