Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa
File:                     D633730A5AD711EF8665FF81C4F9AE02.roa (raw, json)
Hash identifier:          +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=
Subject key identifier:   F4:58:2C:AC:06:CD:53:A3:3B:3F:99:F6:C6:04:6C:53:23:1F:90:91
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       01CC
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:22:27 +0000
ROA not before:           Wed 03 Sep 2025 04:52:06 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137527
IP address blocks:        2407:b140:ae5::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: Sep  3 04:52:06 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a41363-eb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:3e:5e:1f:a5:e4:97:6e:6f:db:13:c9:9a:
                    64:8b:3d:ac:06:1a:80:31:b2:6a:bc:78:45:67:9f:
                    c4:99:7a:0b:9d:55:66:d9:34:50:bd:9b:b4:b0:c9:
                    a4:c1:d0:79:ce:65:70:5e:23:04:69:1d:7d:79:76:
                    da:1f:e1:2b:6f:ec:74:aa:b3:58:d2:01:2b:60:55:
                    89:fe:d5:65:e8:f4:4b:ab:e9:28:b1:4d:3a:3e:dd:
                    09:49:97:98:07:bc:be:ba:09:43:cd:7f:52:77:1d:
                    66:ca:c5:0f:5f:9c:36:9c:ea:d6:eb:b4:14:bb:e7:
                    22:de:62:a1:d3:c8:18:a7:d2:53:42:d1:27:f0:5b:
                    a0:64:b5:f2:7d:e0:7d:9e:4c:cb:31:df:3c:a8:31:
                    cc:01:42:9c:45:53:09:3b:d9:15:33:85:17:75:8e:
                    e9:78:eb:c1:cf:30:d5:d7:e5:43:a4:8c:30:39:4e:
                    83:ec:8a:90:01:ef:da:bd:8f:e1:99:8a:70:26:6f:
                    e6:fc:fd:f2:44:b3:14:2f:47:46:38:79:d3:f9:56:
                    7b:68:7d:8f:db:94:d7:12:78:58:cb:c1:73:85:28:
                    21:25:48:fd:f2:3b:1b:85:cb:15:f2:27:b6:14:68:
                    58:86:2b:0f:6e:e7:5d:26:50:f2:7a:74:5e:f2:e3:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:58:2C:AC:06:CD:53:A3:3B:3F:99:F6:C6:04:6C:53:23:1F:90:91
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/D633730A5AD711EF8665FF81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b140:ae5::/64

    Signature Algorithm: sha256WithRSAEncryption
         55:58:d0:88:50:5c:58:8c:c8:29:a6:29:93:87:58:b7:d6:90:
         ca:f6:96:e7:7b:b6:15:15:b3:93:87:ae:db:cf:1f:d1:7b:0c:
         e2:c5:5b:e6:f8:5d:4e:75:da:65:82:ce:e6:d1:a9:37:96:3a:
         89:26:95:9c:fc:a1:a5:3c:ad:54:42:89:fe:b4:4e:27:2f:6f:
         ad:52:a1:46:de:9c:28:ba:95:c3:f1:f1:9d:74:49:a2:fc:31:
         57:73:b5:93:7d:bd:6d:27:62:89:78:86:0d:a8:a5:c9:80:74:
         9d:c0:df:14:ce:30:a1:f3:8f:87:ca:5e:97:84:7d:67:4d:9e:
         3a:26:5f:a5:2c:97:30:e2:8c:82:e1:c9:05:42:6b:a5:17:a1:
         45:12:d7:83:0b:c5:ac:59:52:b0:05:fd:11:e0:e1:7f:9a:44:
         54:76:50:b8:bc:5b:60:45:74:33:e5:e8:c6:bb:d3:d0:b1:1c:
         a1:46:3e:80:10:f2:d3:29:9d:f2:10:22:06:05:3a:6e:f2:ca:
         50:61:83:38:1e:43:fa:a8:73:18:54:0d:37:8f:c6:ca:e1:35:
         e6:24:a3:ff:d9:82:d0:3f:0f:c7:52:af:ec:85:6a:7f:ae:ad:
         58:09:0b:85:a9:19:5a:bd:96:d7:09:1e:0a:89:e5:04:ba:65:
         23:4c:f3:e8
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1
QTc0NDA5OUQwHhcNMjUwOTAzMDQ1MjA2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTM2My1lYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0RI+Xh+l5Jdub9sTyZpkiz2sBhqAMbJqvHhFZ5/EmXoLnVVm2TRQvZu0sMmk
wdB5zmVwXiMEaR19eXbaH+Erb+x0qrNY0gErYFWJ/tVl6PRLq+kosU06Pt0JSZeY
B7y+uglDzX9Sdx1mysUPX5w2nOrW67QUu+ci3mKh08gYp9JTQtEn8FugZLXyfeB9
nkzLMd88qDHMAUKcRVMJO9kVM4UXdY7peOvBzzDV1+VDpIwwOU6D7IqQAe/avY/h
mYpwJm/m/P3yRLMUL0dGOHnT+VZ7aH2P25TXEnhYy8FzhSghJUj98jsbhcsV8ie2
FGhYhisPbuddJlDyenRe8uMREwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFPRYLKwG
zVOjOz+Z9sYEbFMjH5CRMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3
MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTZEOEIvQjJGMjM1QjI2NzIwMTFFRUExNDZDMjJEQzRGOUFFMDIvRDYzMzczMEE1
QUQ3MTFFRjg2NjVGRjgxQzRGOUFFMDIucm9hMCQGCCsGAQUFBwEHAQH/BBUwEzAR
BAIAAjALAwkAJAexQArlAAAwDQYJKoZIhvcNAQELBQADggEBAFVY0IhQXFiMyCmm
KZOHWLfWkMr2lud7thUVs5OHrtvPH9F7DOLFW+b4XU512mWCzubRqTeWOokmlZz8
oaU8rVRCif60Ticvb61SoUbenCi6lcPx8Z10SaL8MVdztZN9vW0nYol4hg2opcmA
dJ3A3xTOMKHzj4fKXpeEfWdNnjomX6UslzDijILhyQVCa6UXoUUS14MLxaxZUrAF
/RHg4X+aRFR2ULi8W2BFdDPl6Ma709CxHKFGPoAQ8tMpnfIQIgYFOm7yylBhgzge
Q/qocxhUDTePxsrhNeYko//ZgtA/D8dSr+yFan+urVgJC4WpGVq9ltcJHgqJ5QS6
ZSNM8+g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:47 2026 by rpki-client