Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
File:                     E69ABF78033911EFBE28FC1FC4F9AE02.roa (raw, json)
Hash identifier:          zhOnzcs35kb8T2BpNLHNFY38V0O9Fl5sK2LedfhbYBk=
Subject key identifier:   2F:86:70:D9:81:9A:3F:28:03:FF:14:D1:50:DF:DC:E8:96:CA:D9:7A
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       047F
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:01:17 +0000
ROA not before:           Tue 15 Apr 2025 00:35:49 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     151951
IP address blocks:        2400:5a60:2::/48 maxlen: 48
                          2400:5a60:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: Apr 15 00:35:49 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40e6c-f17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:67:d3:a5:7c:f8:62:57:c5:eb:39:2c:6c:9b:
                    41:8c:48:22:64:08:b9:07:e7:71:0a:38:55:2b:f8:
                    47:88:ca:84:a5:00:de:f5:54:04:5b:e6:94:b0:dd:
                    e6:7a:29:1f:5a:3c:b1:d9:60:e9:45:2f:67:42:e0:
                    0b:78:79:82:41:59:e4:2e:aa:f5:78:4e:6c:b3:04:
                    ba:8a:20:55:10:e1:30:b7:78:7a:dc:83:17:4b:89:
                    be:d0:d9:46:6a:ee:b6:31:1f:db:72:b3:13:54:cb:
                    05:1b:40:9f:a3:ae:74:cc:02:7c:29:27:c5:e0:22:
                    35:72:0d:22:9e:89:90:91:53:b2:0b:47:b4:16:7c:
                    af:09:78:af:61:14:b6:28:27:6a:85:c9:5a:c0:e5:
                    db:17:6e:e9:8f:e2:54:d4:b2:85:a5:41:cd:9b:08:
                    d8:12:a9:f5:65:a2:99:e4:6f:84:e7:8a:7a:8f:df:
                    64:11:ad:e6:45:7c:a3:0d:0a:ab:61:b8:3b:4e:16:
                    d5:38:2b:e8:f8:6d:80:60:97:0f:49:85:01:99:e4:
                    ec:6b:d6:09:26:56:0c:67:23:0c:7f:97:20:91:99:
                    c7:cc:e8:3f:9f:55:d0:06:49:33:d6:34:98:3f:b3:
                    b7:c8:f3:b2:20:92:47:0d:20:4e:60:61:1d:69:5d:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:70:D9:81:9A:3F:28:03:FF:14:D1:50:DF:DC:E8:96:CA:D9:7A
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5a60:2::/48
                  2400:5a60:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:6f:be:89:ce:e1:a4:e1:31:92:d0:70:3d:23:c0:81:31:
         35:ff:23:f2:5f:a7:84:c4:9c:5b:38:b1:2f:d9:6e:ea:bb:4a:
         ba:9c:07:d4:b2:27:0c:2b:c3:b7:53:07:44:bc:5b:54:7c:02:
         ce:b3:3d:8f:76:2a:33:4c:c2:43:87:2b:ad:b7:61:44:6c:a9:
         81:b4:91:36:81:3c:ba:2a:ca:6a:b8:ce:f0:5b:86:a9:1d:30:
         0e:36:4f:57:54:53:af:22:02:1e:d6:9b:69:37:e4:c6:92:15:
         2d:7a:24:09:4c:2d:bb:28:e4:a7:c4:80:20:40:3b:fa:11:b6:
         d0:91:03:77:a8:dd:3d:5f:90:25:9a:85:0e:95:3f:0f:eb:60:
         96:e7:49:26:2c:bc:ae:87:27:4a:71:e4:93:fa:14:c8:b2:54:
         94:8f:a4:dd:b3:83:72:41:74:b4:1e:7d:98:6f:79:f2:a3:ed:
         cd:3a:e7:fe:a6:26:b0:19:18:5f:6e:6f:4b:d3:b7:86:82:1b:
         98:dd:d2:cd:8c:d8:6a:0e:e4:b7:ef:a6:84:2a:a4:c5:05:0d:
         1e:43:67:55:22:9a:f0:ee:e6:63:cd:ad:84:8a:4c:4c:ea:db:
         af:14:1e:ad:22:7c:6e:f6:05:70:8b:90:31:8e:8f:06:78:14:
         51:c2:a3:2c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjEwMTgxMTAvBgNVBAUTKEFGRDA5NTVBN0REN0Y5QjBFQzJBNDRBMTFEOTM3MjA3
QzI3NTRBNjMwHhcNMjUwNDE1MDAzNTQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGU2Yy1mMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9WfTpXz4YlfF6zksbJtBjEgiZAi5B+dxCjhVK/hHiMqEpQDe9VQEW+aUsN3m
eikfWjyx2WDpRS9nQuALeHmCQVnkLqr1eE5sswS6iiBVEOEwt3h63IMXS4m+0NlG
au62MR/bcrMTVMsFG0Cfo650zAJ8KSfF4CI1cg0inomQkVOyC0e0FnyvCXivYRS2
KCdqhclawOXbF27pj+JU1LKFpUHNmwjYEqn1ZaKZ5G+E54p6j99kEa3mRXyjDQqr
Ybg7ThbVOCvo+G2AYJcPSYUBmeTsa9YJJlYMZyMMf5cgkZnHzOg/n1XQBkkz1jSY
P7O3yPOyIJJHDSBOYGEdaV06TwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFC+GcNmB
mj8oA/8U0VDf3OiWytl6MB8GA1UdIwQYMBaAFK/QlVp91/mw7CpEoR2TcgfCdUpj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAxOC84ODM2RkE2MDhE
NEMxMUVDOTg4QUU4NURDNEY5QUUwMi9yOUNWV24zWC1iRHNLa1NoSFpOeUI4SjFT
bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I5Q1ZXbjNYLWJEc0trU2hIWk55QjhKMVNtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjEwMTgvODgzNkZBNjA4RDRDMTFFQzk4OEFFODVEQzRGOUFFMDIvRTY5QUJGNzgw
MzM5MTFFRkJFMjhGQzFGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcAJABaYAACAwcAJABaYAEAMA0GCSqGSIb3DQEBCwUAA4IBAQB+hG++
ic7hpOExktBwPSPAgTE1/yPyX6eExJxbOLEv2W7qu0q6nAfUsicMK8O3UwdEvFtU
fALOsz2PdiozTMJDhyutt2FEbKmBtJE2gTy6KspquM7wW4apHTAONk9XVFOvIgIe
1ptpN+TGkhUteiQJTC27KOSnxIAgQDv6EbbQkQN3qN09X5AlmoUOlT8P62CW50km
LLyuhydKceST+hTIslSUj6Tds4NyQXS0Hn2Yb3nyo+3NOuf+piawGRhfbm9L07eG
ghuY3dLNjNhqDuS376aEKqTFBQ0eQ2dVIprw7uZjza2EikxM6tuvFB6tInxu9gVw
i5Axjo8GeBRRwqMs
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:28 2026 by rpki-client