Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa
File:                     0D83DBA8BE5811F0B151FF78C4F9AE02.roa (raw, json)
Hash identifier:          zRRASQfNY/IUyP28hDWRYbCWpGy8GvNHBf7/Zg6e0kQ=
Subject key identifier:   03:8C:6D:3C:85:19:AD:12:37:68:39:84:F5:CD:43:47:C8:41:15:29
Certificate issuer:       /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial:       B1
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 07:42:21 +0000
ROA not before:           Thu 09 Apr 2026 07:42:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401075
IP address blocks:        2402:1920:f800::/38 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
        Validity
            Not Before: Apr  9 07:42:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d7585d-d1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:b8:40:66:f2:5d:9b:57:b1:6c:23:b3:45:
                    6a:45:27:58:79:a0:72:9b:9f:58:6a:2c:00:15:f4:
                    0f:db:03:80:0c:6d:23:53:dc:61:bf:66:4f:0b:fa:
                    2e:8b:18:d3:78:58:cd:d9:b4:e5:ba:04:7d:ed:e5:
                    b8:e6:21:56:a3:8a:56:27:7a:d8:7a:c4:31:1c:31:
                    78:ac:6f:14:1d:82:ce:b3:dc:f2:5b:e4:b0:24:22:
                    b6:8a:97:cd:91:bc:99:f0:66:20:78:04:9a:87:b3:
                    8c:37:ed:3e:24:20:8c:53:64:26:a5:f8:3c:e9:23:
                    3c:9c:f9:e1:48:56:bc:8c:0f:0b:03:53:7a:78:65:
                    dd:3e:af:0c:1a:52:b9:0a:b1:62:dd:b7:5c:69:12:
                    d9:c8:dc:02:d3:e5:12:c4:d9:04:a3:54:8f:20:55:
                    6c:30:14:b8:14:b9:f8:ee:ad:37:b8:cb:26:c8:10:
                    5f:c1:24:7f:8b:32:41:c0:00:75:2d:f2:d6:0d:a0:
                    3f:c1:a9:f8:65:fd:9d:97:8a:1e:4d:96:f3:7a:d2:
                    8a:07:bc:75:ea:05:38:ad:47:62:30:9a:7f:14:2d:
                    50:0e:00:2c:82:b1:88:e9:64:cd:53:f7:03:13:d1:
                    8e:b7:bd:07:de:46:c0:25:48:77:17:5a:05:1e:53:
                    ec:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:6D:3C:85:19:AD:12:37:68:39:84:F5:CD:43:47:C8:41:15:29
            X509v3 Authority Key Identifier:
                keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/0D83DBA8BE5811F0B151FF78C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1920:f800::/38

    Signature Algorithm: sha256WithRSAEncryption
         29:27:7e:c7:56:cf:d3:0f:c8:85:a9:19:ee:19:88:dc:9b:62:
         0e:c9:f4:04:86:ba:e8:ab:c8:ba:8d:e8:ad:85:75:27:ac:26:
         e9:0b:34:63:c8:36:20:fe:c4:2e:8b:2b:26:b6:2a:7d:3b:d8:
         ca:9f:84:55:4b:6e:54:19:12:d0:7b:8a:e4:cc:09:d8:3a:d4:
         09:84:ae:a5:66:2c:2d:a3:69:35:77:cd:a9:66:e9:99:71:b4:
         5e:18:26:de:9c:18:ae:46:4f:a1:f8:9a:36:30:7f:3c:00:c5:
         d0:dd:00:2f:dd:0c:50:e8:fb:88:34:00:18:0b:29:ac:8d:7a:
         e5:fd:8a:dd:e2:af:aa:43:42:1f:65:3b:51:04:2c:22:52:48:
         13:ef:55:ee:c5:d3:7b:ed:c9:63:65:30:96:4c:da:65:6e:dd:
         d0:c5:83:bb:09:ec:8b:4a:c3:62:64:e9:c4:4c:2b:eb:7c:c5:
         a4:42:9a:ac:b6:40:20:7b:a4:07:d7:d8:93:eb:c5:58:ab:e1:
         e7:30:08:7b:fb:33:92:eb:93:5b:84:84:e3:68:b4:f3:9f:de:
         f7:0a:7f:52:b2:08:4f:3b:ca:ac:55:45:04:91:76:2d:97:bb:
         31:e6:be:bc:04:f5:f1:3c:ce:66:e3:8e:35:05:60:87:52:d8:
         4d:9b:34:d0
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM1QkMxMTAvBgNVBAUTKEExNDUyNDFEOTgzMEFGMjRBNzE1NjczNTEyNTVFQzhF
N0VENTNFRkUwHhcNMjYwNDA5MDc0MjIxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ3NTg1ZC1kMWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtuG4QGbyXZtXsWwjs0VqRSdYeaBym59YaiwAFfQP2wOADG0jU9xhv2ZPC/ou
ixjTeFjN2bTlugR97eW45iFWo4pWJ3rYesQxHDF4rG8UHYLOs9zyW+SwJCK2ipfN
kbyZ8GYgeASah7OMN+0+JCCMU2Qmpfg86SM8nPnhSFa8jA8LA1N6eGXdPq8MGlK5
CrFi3bdcaRLZyNwC0+USxNkEo1SPIFVsMBS4FLn47q03uMsmyBBfwSR/izJBwAB1
LfLWDaA/wan4Zf2dl4oeTZbzetKKB7x16gU4rUdiMJp/FC1QDgAsgrGI6WTNU/cD
E9GOt70H3kbAJUh3F1oFHlPsrQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFAOMbTyF
Ga0SN2g5hPXNQ0fIQRUpMB8GA1UdIwQYMBaAFKFFJB2YMK8kpxVnNRJV7I5+1T7+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzVCQy83MUU1RDhCRTU5
RjIxMUYwQjRGQUU5NUZDNEY5QUUwMi9vVVVrSFpnd3J5U25GV2MxRWxYc2puN1ZQ
djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUM1QkMvNzFFNUQ4QkU1OUYyMTFGMEI0RkFFOTVGQzRGOUFFMDIvMEQ4M0RCQThC
RTU4MTFGMEIxNTFGRjc4QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYCJAIZIPgwDQYJKoZIhvcNAQELBQADggEBACknfsdWz9MPyIWpGe4Z
iNybYg7J9ASGuuiryLqN6K2FdSesJukLNGPINiD+xC6LKya2Kn072MqfhFVLblQZ
EtB7iuTMCdg61AmErqVmLC2jaTV3zalm6ZlxtF4YJt6cGK5GT6H4mjYwfzwAxdDd
AC/dDFDo+4g0ABgLKayNeuX9it3ir6pDQh9lO1EELCJSSBPvVe7F03vtyWNlMJZM
2mVu3dDFg7sJ7ItKw2Jk6cRMK+t8xaRCmqy2QCB7pAfX2JPrxVir4ecwCHv7M5Lr
k1uEhONotPOf3vcKf1KyCE87yqxVRQSRdi2XuzHmvrwE9fE8zmbjjjUFYIdS2E2b
NNA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:43:34 2026 by rpki-client