Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa
File:                     5E4EF73E409011F0986B1F68C4F9AE02.roa (raw, json)
Hash identifier:          lbwk8mNKjMeoW18suzzRQjcBAL5Bd/eKgngvQTadOm8=
Subject key identifier:   85:B3:E7:8E:6D:12:5C:92:C9:00:BE:B0:80:95:E5:DF:7C:81:4A:83
Certificate issuer:       /CN=A91A7B36/serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
Certificate serial:       8F
Authority key identifier: 34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:07:34 +0000
ROA not before:           Fri 13 Jun 2025 03:36:18 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153908
IP address blocks:        2402:ce0::/32 maxlen: 32
                          2402:ce0::/36 maxlen: 36
                          2402:ce0:1000::/36 maxlen: 36
                          2402:ce0:2000::/36 maxlen: 36
                          2402:ce0:3000::/36 maxlen: 36
                          2402:ce0:4000::/36 maxlen: 36
                          2402:ce0:5000::/36 maxlen: 36
                          2402:ce0:6000::/36 maxlen: 36
                          2402:ce0:7000::/36 maxlen: 36
                          2402:ce0:8000::/36 maxlen: 36
                          2402:ce0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B36, serialNumber=34F0F8CD87B88C4F520E46FB95D2DB84FA043362
        Validity
            Not Before: Jun 13 03:36:18 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3e5b6-5634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:4d:1a:11:ef:e4:b6:17:07:80:c7:3d:3d:
                    dd:f6:03:46:7a:9b:76:17:43:28:b8:69:16:b1:56:
                    74:42:3d:8a:79:70:aa:c7:4d:06:74:f0:d6:04:f8:
                    b4:18:15:ff:a3:44:39:28:be:1e:09:f6:29:fc:0b:
                    a0:49:2b:7b:64:41:08:a1:88:2f:97:fb:4a:71:73:
                    5f:a5:0a:84:31:35:21:91:88:a4:06:15:99:ac:32:
                    a4:6d:23:64:4a:1a:64:c9:51:2d:8f:44:40:c4:07:
                    29:12:69:f0:bc:07:5b:0f:69:92:80:0f:c9:47:2f:
                    48:d7:11:16:f8:2b:81:76:b2:03:7e:88:ae:db:0b:
                    e1:d2:9a:e5:d9:82:9b:49:2a:a6:b2:ac:2f:46:19:
                    7c:55:4b:c1:b0:75:29:30:db:51:a3:85:84:46:32:
                    86:ef:ff:c1:5a:dc:f6:f7:cd:28:03:f6:e4:41:ee:
                    12:7e:45:05:b0:5d:9c:3f:fd:8a:a6:5d:de:4a:d8:
                    7e:0d:d4:49:36:fb:87:8d:fe:49:8a:e5:db:43:f6:
                    a2:2d:ca:87:43:23:a8:63:48:73:30:04:bd:b0:79:
                    d7:71:ee:93:f0:7c:b0:73:4b:9d:62:5b:ab:06:41:
                    0f:1d:d0:79:32:55:bc:a6:a6:9c:ea:f6:c5:c1:db:
                    02:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B3:E7:8E:6D:12:5C:92:C9:00:BE:B0:80:95:E5:DF:7C:81:4A:83
            X509v3 Authority Key Identifier:
                keyid:34:F0:F8:CD:87:B8:8C:4F:52:0E:46:FB:95:D2:DB:84:FA:04:33:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/NPD4zYe4jE9SDkb7ldLbhPoEM2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPD4zYe4jE9SDkb7ldLbhPoEM2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/72E6FA26408F11F0B34AEF47C4F9AE02/5E4EF73E409011F0986B1F68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:16:7b:16:c1:07:05:f1:a0:8c:e9:99:96:99:a1:ea:a5:b7:
         0f:59:01:4c:c3:67:f7:a8:36:88:9b:91:1e:97:5c:17:46:41:
         3e:ec:ef:9f:c9:78:9b:d9:b7:04:ce:6e:6b:5a:ba:36:bd:61:
         a8:d8:a9:30:d8:f2:0f:1d:ef:f5:39:f2:73:5a:c1:7d:9b:22:
         2d:f4:e2:d5:37:cf:63:18:7f:e5:35:a3:60:63:3b:9c:33:f1:
         c3:c4:7a:af:c3:81:6c:67:0f:00:c8:7f:70:c3:28:e3:3f:ab:
         af:4b:59:83:48:6f:e6:ac:7c:c7:f1:61:6c:d4:a7:27:6c:9f:
         ae:b9:23:75:b2:55:0a:95:0f:c0:7c:79:89:0b:9e:f2:a3:ff:
         a9:c8:98:e6:da:6a:a0:10:48:62:1b:1f:64:e8:11:9e:64:8b:
         37:74:fd:3d:49:53:8f:94:0e:c6:85:8f:9a:75:87:14:e7:2b:
         2e:21:00:60:3a:d2:25:b3:b6:e7:bc:a9:18:41:94:2c:a9:fd:
         8c:58:b1:24:a6:ef:22:55:12:e3:57:d2:2a:77:6e:b2:d5:52:
         d0:6c:fa:39:77:2d:65:38:3f:62:2b:2b:e1:5c:13:23:18:c0:
         69:84:51:02:5b:3b:93:68:1b:80:2f:b3:3c:19:10:36:bd:8f:
         d8:80:d0:4e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdCMzYxMTAvBgNVBAUTKDM0RjBGOENEODdCODhDNEY1MjBFNDZGQjk1RDJEQjg0
RkEwNDMzNjIwHhcNMjUwNjEzMDMzNjE4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTViNi01NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9JNGhHv5LYXB4DHPT3d9gNGept2F0MouGkWsVZ0Qj2KeXCqx00GdPDWBPi0
GBX/o0Q5KL4eCfYp/AugSSt7ZEEIoYgvl/tKcXNfpQqEMTUhkYikBhWZrDKkbSNk
ShpkyVEtj0RAxAcpEmnwvAdbD2mSgA/JRy9I1xEW+CuBdrIDfoiu2wvh0prl2YKb
SSqmsqwvRhl8VUvBsHUpMNtRo4WERjKG7//BWtz2980oA/bkQe4SfkUFsF2cP/2K
pl3eSth+DdRJNvuHjf5JiuXbQ/aiLcqHQyOoY0hzMAS9sHnXce6T8Hywc0udYlur
BkEPHdB5MlW8pqac6vbFwdsCzQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFIWz545t
ElySyQC+sICV5d98gUqDMB8GA1UdIwQYMBaAFDTw+M2HuIxPUg5G+5XS24T6BDNi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0IzNi83MkU2RkEyNjQw
OEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9OUEQ0elllNGpFOVNEa2I3bGRMYmhQb0VN
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05QRDR6WWU0akU5U0RrYjdsZExiaFBvRU0ySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTdCMzYvNzJFNkZBMjY0MDhGMTFGMEIzNEFFRjQ3QzRGOUFFMDIvNUU0RUY3M0U0
MDkwMTFGMDk4NkIxRjY4QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAIM4DANBgkqhkiG9w0BAQsFAAOCAQEAMxZ7FsEHBfGgjOmZlpmh
6qW3D1kBTMNn96g2iJuRHpdcF0ZBPuzvn8l4m9m3BM5ua1q6Nr1hqNipMNjyDx3v
9Tnyc1rBfZsiLfTi1TfPYxh/5TWjYGM7nDPxw8R6r8OBbGcPAMh/cMMo4z+rr0tZ
g0hv5qx8x/FhbNSnJ2yfrrkjdbJVCpUPwHx5iQue8qP/qciY5tpqoBBIYhsfZOgR
nmSLN3T9PUlTj5QOxoWPmnWHFOcrLiEAYDrSJbO257ypGEGULKn9jFixJKbvIlUS
41fSKndustVS0Gz6OXctZTg/Yisr4VwTIxjAaYRRAls7k2gbgC+zPBkQNr2P2IDQ
Tg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:18 2026 by rpki-client