Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/DD8D4802932211EDBF466F52C4F9AE02.roa
File:                     DD8D4802932211EDBF466F52C4F9AE02.roa (raw, json)
Hash identifier:          L6DpKLFyryWWogDG5wVgqr7Rv6sOS8ilyfaVcgY1X1o=
Subject key identifier:   3C:41:CD:32:D6:38:AD:B1:84:7E:C6:AA:43:5F:18:47:0A:84:4C:43
Certificate issuer:       /CN=A9192D09/serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408
Certificate serial:       024E
Authority key identifier: 38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/DD8D4802932211EDBF466F52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:08:22 +0000
ROA not before:           Fri 31 Oct 2025 02:17:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     18227
IP address blocks:        2404:4300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl
                          rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192D09, serialNumber=384545D6F55F32B31FE8646F244A7C07BA695408
        Validity
            Not Before: Oct 31 02:17:14 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a41016-d940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:fb:cb:0c:f8:9b:23:64:fe:93:0b:1b:9d:
                    07:2b:82:c1:b0:c1:e3:9d:1d:f1:f8:4c:8c:8d:a6:
                    6a:9b:4b:69:2e:fa:b5:7d:6e:ca:59:78:8b:16:67:
                    4b:cb:0b:f2:10:34:6e:76:46:6f:2b:aa:bf:b2:ee:
                    85:3c:5b:4a:7a:18:fd:e6:b2:8c:0f:b9:1f:cd:bf:
                    0f:99:b6:9b:e9:ee:1f:4f:8b:16:1b:6b:ac:83:bf:
                    1e:00:98:64:42:1a:5b:b6:68:67:4b:1b:76:88:6f:
                    2e:20:04:30:f6:21:49:68:35:30:ae:ee:3e:a6:f2:
                    8b:7b:74:7e:be:3a:10:a8:b7:8e:b7:bf:37:a3:2f:
                    be:d9:0b:de:98:50:fb:3f:28:e2:ff:da:01:b3:bf:
                    22:61:83:dd:29:d3:46:8c:98:5d:01:c1:21:04:92:
                    7b:5f:35:5d:3b:c6:2e:c4:3c:fa:a8:58:ba:7f:4d:
                    38:ab:63:85:f9:bb:41:ad:a8:dd:f2:47:23:16:b4:
                    f2:87:a2:b1:53:7c:61:e3:32:a7:c4:ad:f4:b0:f9:
                    bd:2e:5f:22:4f:b8:18:96:ba:28:e2:e7:0b:3d:93:
                    fb:ba:bb:08:1b:78:9a:9a:4a:70:00:db:63:3b:21:
                    60:d4:64:a0:a5:49:dc:f3:c9:da:f4:58:84:d6:cf:
                    3a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:41:CD:32:D6:38:AD:B1:84:7E:C6:AA:43:5F:18:47:0A:84:4C:43
            X509v3 Authority Key Identifier:
                keyid:38:45:45:D6:F5:5F:32:B3:1F:E8:64:6F:24:4A:7C:07:BA:69:54:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/OEVF1vVfMrMf6GRvJEp8B7ppVAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEVF1vVfMrMf6GRvJEp8B7ppVAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192D09/F0F2EDB2931C11EDB9B79C49C4F9AE02/DD8D4802932211EDBF466F52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:aa:63:8a:ac:19:43:c6:57:82:60:8c:47:16:1f:06:1b:54:
         63:2d:2f:cc:c7:7f:3f:c3:25:a9:67:4d:6a:18:14:2d:99:3a:
         c8:17:5c:12:ed:71:89:f2:7e:15:47:fe:ce:b7:85:8d:24:7c:
         42:c2:d3:92:de:96:8e:93:80:b4:89:83:d8:d3:35:a5:6f:70:
         f0:b8:4b:18:6f:5d:d6:73:3a:b0:99:10:c9:82:d4:75:79:9d:
         da:84:4a:3f:1e:b7:b5:2b:e6:00:f1:84:4a:da:3c:1f:41:aa:
         47:5e:ec:ed:3c:dc:2b:e5:56:fb:26:6a:20:b6:9d:9c:2b:4f:
         14:34:2f:b9:c3:1f:29:cb:fe:0f:ee:d7:23:33:21:75:5e:f2:
         a9:f4:0e:74:fa:78:52:62:b1:16:57:44:85:e9:9c:5f:bc:c1:
         d6:cd:68:d8:04:1f:b9:9f:f2:74:5a:a1:46:d6:6c:4f:c7:bf:
         d9:c0:a6:e3:fe:40:42:85:69:35:93:06:23:25:78:ef:62:20:
         7f:7f:13:ad:c0:cc:ab:bb:bd:94:35:bc:ec:ef:2c:2b:00:38:
         b1:b8:e9:e1:e8:1d:0a:f3:5c:6e:7d:a5:ac:a7:18:2c:d8:b5:
         de:da:1e:96:84:8f:2f:2a:b7:da:c0:44:27:df:ef:74:c2:48:
         9a:0c:c6:d6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJEMDkxMTAvBgNVBAUTKDM4NDU0NUQ2RjU1RjMyQjMxRkU4NjQ2RjI0NEE3QzA3
QkE2OTU0MDgwHhcNMjUxMDMxMDIxNzE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTAxNi1kOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkf7ywz4myNk/pMLG50HK4LBsMHjnR3x+EyMjaZqm0tpLvq1fW7KWXiLFmdL
ywvyEDRudkZvK6q/su6FPFtKehj95rKMD7kfzb8Pmbab6e4fT4sWG2usg78eAJhk
QhpbtmhnSxt2iG8uIAQw9iFJaDUwru4+pvKLe3R+vjoQqLeOt783oy++2QvemFD7
Pyji/9oBs78iYYPdKdNGjJhdAcEhBJJ7XzVdO8YuxDz6qFi6f004q2OF+btBrajd
8kcjFrTyh6KxU3xh4zKnxK30sPm9Ll8iT7gYlroo4ucLPZP7ursIG3iamkpwANtj
OyFg1GSgpUnc88na9FiE1s86HwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFDxBzTLW
OK2xhH7GqkNfGEcKhExDMB8GA1UdIwQYMBaAFDhFRdb1XzKzH+hkbyRKfAe6aVQI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkQwOS9GMEYyRURCMjkz
MUMxMUVEQjlCNzlDNDlDNEY5QUUwMi9PRVZGMXZWZk1yTWY2R1J2SkVwOEI3cHBW
QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09FVkYxdlZmTXJNZjZHUnZKRXA4QjdwcFZBZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJEMDkvRjBGMkVEQjI5MzFDMTFFREI5Qjc5QzQ5QzRGOUFFMDIvREQ4RDQ4MDI5
MzIyMTFFREJGNDY2RjUyQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJARDADANBgkqhkiG9w0BAQsFAAOCAQEAn6pjiqwZQ8ZXgmCMRxYf
BhtUYy0vzMd/P8MlqWdNahgULZk6yBdcEu1xifJ+FUf+zreFjSR8QsLTkt6WjpOA
tImD2NM1pW9w8LhLGG9d1nM6sJkQyYLUdXmd2oRKPx63tSvmAPGESto8H0GqR17s
7TzcK+VW+yZqILadnCtPFDQvucMfKcv+D+7XIzMhdV7yqfQOdPp4UmKxFldEhemc
X7zB1s1o2AQfuZ/ydFqhRtZsT8e/2cCm4/5AQoVpNZMGIyV472Igf38TrcDMq7u9
lDW87O8sKwA4sbjp4egdCvNcbn2lrKcYLNi13toeloSPLyq32sBEJ9/vdMJImgzG
1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:54 2026 by rpki-client