Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/61C842F4467A11F08609BD71C4F9AE02.roa
File:                     61C842F4467A11F08609BD71C4F9AE02.roa (raw, json)
Hash identifier:          K7iLZNjUBsTXkR+3cN67qQlcxW/qI+RTqNNea+kXaX8=
Subject key identifier:   3E:A2:F1:55:27:10:9A:DD:C5:17:3A:C3:01:79:C7:BA:15:06:18:34
Certificate issuer:       /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
Certificate serial:       06C1
Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/61C842F4467A11F08609BD71C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:47:00 +0000
ROA not before:           Wed 11 Jun 2025 04:13:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142024
IP address blocks:        2407:46c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl
                          rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0
        Validity
            Not Before: Jun 11 04:13:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a40b14-0ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:46:d1:4d:8f:e1:89:68:55:16:f5:68:c3:
                    66:81:87:ef:9d:34:b2:0f:06:a5:26:f7:18:6f:cc:
                    96:63:e4:a1:52:45:17:3e:8d:6d:8a:0b:89:f8:61:
                    1a:ff:ee:a4:de:dd:06:ff:61:e0:f2:b5:46:88:84:
                    b8:2a:9f:5b:ff:7b:26:5c:c9:e9:0a:73:33:71:2f:
                    49:20:b6:78:6e:c5:21:4d:35:fe:ca:30:0c:65:e8:
                    22:f8:cd:96:5a:7b:44:d9:37:45:6f:80:68:72:38:
                    b3:b4:83:3b:04:32:e0:c1:fd:1a:0b:09:72:1d:8c:
                    00:d5:a3:cb:8b:af:7f:68:da:fe:96:bd:dd:5d:1d:
                    b7:89:42:14:e0:62:62:c3:fb:2f:a7:c3:0c:10:9a:
                    b4:0b:1c:05:5c:43:95:d7:c3:77:96:54:f4:aa:fc:
                    81:b8:55:0a:eb:b0:0a:60:52:20:70:1e:06:4b:a9:
                    21:b8:52:3e:e8:f6:1f:21:d7:30:7d:6b:ea:ff:10:
                    af:58:3f:ed:cc:ec:10:2f:b2:5e:13:8b:e3:e7:94:
                    d3:19:02:90:6f:17:6c:16:4e:b8:9d:e2:d9:cb:b7:
                    3c:69:8a:4d:19:b0:1b:d9:75:7d:88:e3:fd:f7:65:
                    0c:ca:70:df:f3:99:c3:eb:5b:0d:4d:8d:4a:36:33:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A2:F1:55:27:10:9A:DD:C5:17:3A:C3:01:79:C7:BA:15:06:18:34
            X509v3 Authority Key Identifier:
                keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/61C842F4467A11F08609BD71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:46c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:af:94:03:54:48:80:29:f5:4b:5e:56:32:6d:e5:8e:ed:1c:
         d5:2b:71:a2:d3:a7:f8:18:4c:e6:9e:a0:c3:a2:1b:bb:9f:e5:
         cd:42:aa:b9:54:b8:33:06:c8:d4:e8:4e:e7:a0:20:a6:f7:59:
         9a:69:cd:e7:da:6a:45:08:e3:2a:01:43:4f:5d:e5:4b:ec:a8:
         a2:ec:2e:7c:14:19:ab:8d:67:fb:7a:30:f9:a2:97:19:8b:01:
         86:ef:3c:da:da:17:51:be:d5:f1:bf:a0:3d:23:93:a6:3b:ca:
         4e:1e:40:be:bc:39:18:6b:95:34:6c:36:12:3b:70:42:0d:06:
         0d:2e:61:e3:e5:44:41:84:51:5a:a5:e8:18:3b:96:12:17:99:
         eb:fd:8b:5f:36:7a:e6:0f:53:c2:c3:66:2f:06:1b:e4:8e:83:
         2d:0e:17:48:e7:92:48:4a:d6:e1:b3:a2:04:60:e1:14:bb:fa:
         8b:a4:a8:49:f4:29:2b:0a:67:28:1e:54:5d:64:85:aa:0e:e4:
         cf:b0:a8:5f:0e:71:55:e8:47:d5:dd:55:52:54:2a:19:37:2d:
         3c:ed:6e:28:7e:7e:d5:25:57:23:d8:fe:a3:b4:24:52:19:94:
         05:72:0b:0d:0a:3b:ce:c9:6e:9e:4e:6a:65:07:92:a2:9a:ff:
         22:d9:08:83
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz
NTVDRTYzQzAwHhcNMjUwNjExMDQxMzA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGIxNC0wZWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03VG0U2P4YloVRb1aMNmgYfvnTSyDwalJvcYb8yWY+ShUkUXPo1tiguJ+GEa
/+6k3t0G/2Hg8rVGiIS4Kp9b/3smXMnpCnMzcS9JILZ4bsUhTTX+yjAMZegi+M2W
WntE2TdFb4BocjiztIM7BDLgwf0aCwlyHYwA1aPLi69/aNr+lr3dXR23iUIU4GJi
w/svp8MMEJq0CxwFXEOV18N3llT0qvyBuFUK67AKYFIgcB4GS6khuFI+6PYfIdcw
fWvq/xCvWD/tzOwQL7JeE4vj55TTGQKQbxdsFk64neLZy7c8aYpNGbAb2XV9iOP9
92UMynDf85nD61sNTY1KNjOEowIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFD6i8VUn
EJrdxRc6wwF5x7oVBhg0MB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4
MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUI2RkMvODg5MkNDNEE5ODM5MTFFQkExNDA5OTYwQzRGOUFFMDIvNjFDODQyRjQ0
NjdBMTFGMDg2MDlCRDcxQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAdGwDANBgkqhkiG9w0BAQsFAAOCAQEAc6+UA1RIgCn1S15WMm3l
ju0c1StxotOn+BhM5p6gw6Ibu5/lzUKquVS4MwbI1OhO56AgpvdZmmnN59pqRQjj
KgFDT13lS+yoouwufBQZq41n+3ow+aKXGYsBhu882toXUb7V8b+gPSOTpjvKTh5A
vrw5GGuVNGw2EjtwQg0GDS5h4+VEQYRRWqXoGDuWEheZ6/2LXzZ65g9TwsNmLwYb
5I6DLQ4XSOeSSErW4bOiBGDhFLv6i6SoSfQpKwpnKB5UXWSFqg7kz7CoXw5xVehH
1d1VUlQqGTctPO1uKH5+1SVXI9j+o7QkUhmUBXILDQo7zslunk5qZQeSopr/ItkI
gw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:33 2026 by rpki-client