Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BE402F16707F11EDBD17DD28C4F9AE02.roa
File:                     BE402F16707F11EDBD17DD28C4F9AE02.roa (raw, json)
Hash identifier:          Pjz+08zpul92iEr/FyBypslQXBvHcPTKNW0fvBkPIWM=
Subject key identifier:   50:50:A1:00:94:0B:97:72:71:C7:50:42:16:C4:1F:97:06:D6:A2:98
Certificate issuer:       /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial:       2788
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BE402F16707F11EDBD17DD28C4F9AE02.roa
Signing time:             Mon 28 Sep 2026 16:23:31 +0000
ROA not before:           Mon 28 Sep 2026 16:23:31 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     396986
IP address blocks:        2404:8d04:2643::/48 maxlen: 48
                          2404:8d04:4642::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10120 (0x2788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
        Validity
            Not Before: Sep 28 16:23:31 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aba9483-bd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:b9:9e:e5:10:b7:91:b4:11:5a:ba:60:e7:
                    4d:87:22:0d:5f:e5:60:72:69:3b:5e:4a:92:e8:37:
                    3f:93:bb:83:9e:90:a0:44:4c:2b:b3:30:4d:06:94:
                    0a:2b:a0:af:d1:1f:14:a7:f4:e5:2f:57:77:76:19:
                    ba:c3:a5:8c:83:de:68:cb:62:fd:22:2e:07:ad:90:
                    6c:73:f2:cc:e0:56:b9:b4:77:9b:17:2d:9a:40:83:
                    6b:b7:c9:12:ce:b0:76:09:39:32:f2:3b:9c:8c:9c:
                    c2:91:5e:7e:61:4a:39:d6:c3:86:31:61:30:ca:1f:
                    46:47:4a:25:c7:5a:4a:87:d4:ff:7f:ff:23:b9:bf:
                    1d:33:b6:af:5f:e7:50:9e:b7:fc:39:b8:1b:d1:0b:
                    ab:1c:4b:5b:0a:42:0c:a4:02:94:32:a0:33:dd:2e:
                    d5:57:92:f0:c8:be:f4:42:d3:2b:6f:ac:87:0c:10:
                    88:9f:d4:27:b4:b4:9a:b4:f7:20:6d:85:90:4f:4a:
                    15:92:74:15:7a:4d:24:06:81:13:0f:03:7f:88:f6:
                    6d:c8:a6:cc:38:72:6f:a8:4c:bb:31:27:12:f4:ac:
                    b9:aa:cd:c4:dd:22:7a:a7:0b:24:15:5e:9a:b3:71:
                    7f:56:1a:e8:9f:4f:17:66:dd:31:1b:2e:f9:7b:09:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:50:A1:00:94:0B:97:72:71:C7:50:42:16:C4:1F:97:06:D6:A2:98
            X509v3 Authority Key Identifier:
                keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BE402F16707F11EDBD17DD28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8d04:2643::/48
                  2404:8d04:4642::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:13:01:e5:f1:76:28:c0:14:3e:15:f4:76:0c:45:55:2a:5b:
         f4:e2:1d:4b:6c:f8:a0:61:9b:b3:85:f6:3d:40:e0:09:a9:c2:
         89:c0:45:61:33:78:1e:48:d1:51:76:ea:85:7a:89:50:a6:9e:
         c7:4b:c6:66:1f:fe:ac:21:e5:45:2e:f9:af:0b:8b:c6:0c:39:
         b7:34:9d:8d:c6:a5:78:b1:64:6b:32:4e:ad:d3:62:ee:18:3d:
         c4:50:02:06:35:4e:1e:07:10:08:4d:f8:d8:32:02:cc:30:7a:
         23:6c:0b:3e:83:e2:29:52:17:88:d5:13:5f:3a:41:0e:11:30:
         f8:07:3e:ea:ff:45:42:63:76:1f:b0:f6:ba:86:54:6d:bb:c3:
         2d:2e:ef:c6:df:68:cd:38:77:eb:7e:f0:1c:85:57:3a:dc:0c:
         f4:d8:1a:94:37:08:7f:f3:83:ee:fa:dd:d4:74:6d:14:85:83:
         05:5d:2b:c2:df:bd:33:75:6d:cd:9d:7b:4d:d0:c8:4d:be:c2:
         e6:ac:86:31:ad:2d:9a:8a:cd:12:ba:d9:54:0f:52:56:da:3d:
         b7:eb:b8:6a:b5:e4:59:ed:17:28:77:fa:fd:8c:4c:e4:1b:e0:
         8e:36:36:50:56:fe:98:26:07:e8:fc:f9:84:01:dd:e5:95:20:
         31:ff:0f:4b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICJ4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB
RjE0ODkyNkMwHhcNMjYwOTI4MTYyMzMxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJhOTQ4My1iZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo1C5nuUQt5G0EVq6YOdNhyINX+Vgcmk7XkqS6Dc/k7uDnpCgREwrszBNBpQK
K6Cv0R8Up/TlL1d3dhm6w6WMg95oy2L9Ii4HrZBsc/LM4Fa5tHebFy2aQINrt8kS
zrB2CTky8jucjJzCkV5+YUo51sOGMWEwyh9GR0olx1pKh9T/f/8jub8dM7avX+dQ
nrf8Obgb0QurHEtbCkIMpAKUMqAz3S7VV5LwyL70QtMrb6yHDBCIn9QntLSatPcg
bYWQT0oVknQVek0kBoETDwN/iPZtyKbMOHJvqEy7MScS9Ky5qs3E3SJ6pwskFV6a
s3F/Vhron08XZt0xGy75ewl2yQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFBQoQCU
C5dyccdQQhbEH5cG1qKYMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx
NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQkU0MDJGMTY3
MDdGMTFFREJEMTdERDI4QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcAJASNBCZDAwcAJASNBEZCMA0GCSqGSIb3DQEBCwUAA4IBAQA3EwHl
8XYowBQ+FfR2DEVVKlv04h1LbPigYZuzhfY9QOAJqcKJwEVhM3geSNFRduqFeolQ
pp7HS8ZmH/6sIeVFLvmvC4vGDDm3NJ2NxqV4sWRrMk6t02LuGD3EUAIGNU4eBxAI
TfjYMgLMMHojbAs+g+IpUheI1RNfOkEOETD4Bz7q/0VCY3YfsPa6hlRtu8MtLu/G
32jNOHfrfvAchVc63Az02BqUNwh/84Pu+t3UdG0UhYMFXSvC370zdW3NnXtN0MhN
vsLmrIYxrS2ais0SutlUD1JW2j2367hqteRZ7Rcod/r9jEzkG+CONjZQVv6YJgfo
/PmEAd3llSAx/w9L
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:14:14 2026 by rpki-client