Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EA1A8C6FD9211F086C79E7D5C6F56BC.roa
File:                     4EA1A8C6FD9211F086C79E7D5C6F56BC.roa (raw, json)
Hash identifier:          6A38jhFeGGrZVMwPbPqF6MQBYZg/73evDpy8vt3rRMM=
Subject key identifier:   7E:1F:54:6A:6D:1E:4E:BB:D4:6D:AA:21:FF:1C:D9:B1:D3:DF:30:C1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4F9E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EA1A8C6FD9211F086C79E7D5C6F56BC.roa
Signing time:             Fri 30 Jan 2026 04:15:27 +0000
ROA not before:           Fri 30 Jan 2026 04:15:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151905
IP address blocks:        2401:7be0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20382 (0x4f9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jan 30 04:15:27 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=697c305f-8962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:cc:ff:71:cb:54:1b:d7:bf:1a:ca:e3:8b:
                    fa:48:ec:6f:54:aa:5f:d5:ab:3d:1f:30:da:f7:8e:
                    2a:ff:e9:7d:bf:69:7f:f4:da:f5:02:44:04:d1:35:
                    c9:5e:42:d3:d0:52:ef:1d:f7:d9:89:ab:2d:75:bd:
                    46:1f:d0:c2:43:d2:a6:dc:99:68:41:91:25:e2:12:
                    0b:99:ec:4c:5b:86:6c:db:fa:a8:4e:46:34:a1:89:
                    64:62:c2:3f:b4:96:f4:ca:70:54:11:9c:82:00:88:
                    58:a3:27:51:d1:f4:c8:cc:ec:f3:6a:00:07:59:0a:
                    f3:0f:a6:c9:88:89:83:e9:28:57:8d:6e:75:b7:f2:
                    c2:aa:b4:3e:d8:51:aa:34:e4:73:46:2d:5a:e2:dc:
                    b5:2a:c2:f4:87:04:0e:ac:b4:ec:c9:9d:62:07:41:
                    07:a5:24:e9:d6:10:d4:12:de:d1:de:eb:eb:da:7e:
                    d5:90:19:f5:60:50:2a:b6:b6:4a:43:c7:2b:fc:12:
                    ae:a7:09:55:ae:e3:cd:b7:30:d7:12:f6:9b:97:da:
                    7d:09:91:e2:61:7d:1d:4d:50:8a:c1:d5:c7:04:37:
                    89:ee:88:aa:5c:39:ba:21:75:d5:e7:61:c0:3f:bf:
                    a5:19:d0:ca:12:b8:ed:46:1f:14:21:29:5f:52:9b:
                    c6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:54:6A:6D:1E:4E:BB:D4:6D:AA:21:FF:1C:D9:B1:D3:DF:30:C1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EA1A8C6FD9211F086C79E7D5C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7be0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:76:e4:df:97:e5:85:b9:b6:fd:96:33:c5:bc:41:59:d7:
         ff:6f:d7:93:4b:46:89:45:31:7e:55:87:68:db:5c:53:5d:e4:
         39:3d:56:3c:6a:b8:5c:0f:06:82:1e:ea:d6:81:8e:8e:3f:c1:
         26:70:77:c1:1d:58:79:8b:51:38:ce:dc:02:33:75:d4:ef:66:
         be:39:dc:b6:45:ab:c4:30:6b:f8:b5:77:04:86:07:7c:1a:97:
         62:bf:49:91:30:31:4e:58:13:d0:36:82:3a:0e:20:d2:48:c1:
         b0:6c:27:45:84:3c:76:34:90:d1:0d:5e:9a:c3:3e:78:57:a7:
         ac:57:84:ad:2e:e2:1c:44:15:ee:29:1e:a6:8b:55:07:a4:46:
         b3:6c:8e:73:46:a6:f3:49:ed:4b:da:99:1d:e2:a7:e6:94:3c:
         76:5f:62:a3:ed:11:6e:01:a6:31:63:fe:40:f7:56:71:76:ab:
         cd:90:10:f6:18:f3:87:78:1e:2d:28:89:8a:0a:e4:0f:01:e7:
         fa:17:80:a1:bc:3c:c6:55:0c:6b:dc:81:5f:43:69:4d:e4:bc:
         34:50:8b:93:95:92:f8:e4:47:9c:31:0b:1c:91:f1:57:5d:f3:
         b1:ee:c5:38:24:39:92:82:74:fc:2d:a0:29:c1:c3:22:2c:03:
         c2:4c:e8:00
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICT54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwMTMwMDQxNTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdjMzA1Zi04OTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtevM/3HLVBvXvxrK44v6SOxvVKpf1as9HzDa944q/+l9v2l/9Nr1AkQE0TXJ
XkLT0FLvHffZiastdb1GH9DCQ9Km3JloQZEl4hILmexMW4Zs2/qoTkY0oYlkYsI/
tJb0ynBUEZyCAIhYoydR0fTIzOzzagAHWQrzD6bJiImD6ShXjW51t/LCqrQ+2FGq
NORzRi1a4ty1KsL0hwQOrLTsyZ1iB0EHpSTp1hDUEt7R3uvr2n7VkBn1YFAqtrZK
Q8cr/BKupwlVruPNtzDXEvabl9p9CZHiYX0dTVCKwdXHBDeJ7oiqXDm6IXXV52HA
P7+lGdDKErjtRh8UISlfUpvGcwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFH4fVGpt
Hk671G2qIf8c2bHT3zDBMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEVBMUE4QzZG
RDkyMTFGMDg2Qzc5RTdENUM2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkAXvgAAAwDQYJKoZIhvcNAQELBQADggEBAE5qduTfl+WF
ubb9ljPFvEFZ1/9v15NLRolFMX5Vh2jbXFNd5Dk9VjxquFwPBoIe6taBjo4/wSZw
d8EdWHmLUTjO3AIzddTvZr453LZFq8Qwa/i1dwSGB3wal2K/SZEwMU5YE9A2gjoO
INJIwbBsJ0WEPHY0kNENXprDPnhXp6xXhK0u4hxEFe4pHqaLVQekRrNsjnNGpvNJ
7UvamR3ip+aUPHZfYqPtEW4BpjFj/kD3VnF2q82QEPYY84d4Hi0oiYoK5A8B5/oX
gKG8PMZVDGvcgV9DaU3kvDRQi5OVkvjkR5wxCxyR8Vdd87HuxTgkOZKCdPwtoCnB
wyIsA8JM6AA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:13 2026 by rpki-client