Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/2D89110A9A5311EE9CB13140C4F9AE02.roa
File:                     2D89110A9A5311EE9CB13140C4F9AE02.roa (raw, json)
Hash identifier:          QZjbtfF9rqWcwEKeKCXc4Cts65UXJUXS4gGeF40rhXA=
Subject key identifier:   CD:B4:C7:8C:53:CA:5F:15:C1:82:53:82:7A:51:73:71:FD:31:B4:A8
Certificate issuer:       /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial:       3583
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/2D89110A9A5311EE9CB13140C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:22:09 +0000
ROA not before:           Sat 20 Sep 2025 15:00:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     131203
IP address blocks:        2001:df2:a980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
                          rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13699 (0x3583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
        Validity
            Not Before: Sep 20 15:00:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a483d1-54ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:ca:48:97:77:04:0b:d7:f8:2f:33:68:dc:
                    81:50:77:ea:ad:4c:07:cb:ab:d6:8e:15:8a:0e:44:
                    38:78:b7:56:94:da:b9:41:a3:a8:62:1c:d8:e6:45:
                    39:3b:aa:0e:15:2d:93:84:f5:a1:77:4f:3e:ad:38:
                    8d:ec:5c:76:66:ae:97:3d:fc:2e:86:e5:1e:ca:fb:
                    19:6b:1f:99:96:6d:ba:7f:cc:6e:4d:88:0a:48:23:
                    7b:58:81:42:38:81:b7:71:19:51:b6:d4:d2:05:4c:
                    c3:93:4e:10:80:9e:3c:d3:b3:5e:a0:52:3e:d1:28:
                    98:c5:c3:d4:23:75:66:6c:f3:8e:c2:35:45:ff:f2:
                    ee:9d:b9:df:c9:a1:c5:cb:c0:ee:ac:4c:fd:71:01:
                    2a:33:9d:82:66:38:f8:1f:51:4c:5f:0b:81:7d:03:
                    a0:7d:a5:a8:97:5d:58:04:20:7a:fa:18:0b:de:d0:
                    61:0f:25:f5:2a:ec:fd:32:a8:3d:59:0b:6d:13:26:
                    4c:41:b3:59:fe:e8:b6:6f:42:b0:06:21:f0:62:3a:
                    0e:3e:f2:df:d6:2a:23:0c:90:85:2b:3d:81:16:66:
                    e4:69:7e:78:49:6f:d3:ae:97:30:3c:0a:2e:48:8a:
                    b9:d5:c4:9d:bb:ec:7e:72:60:75:f8:80:00:7c:93:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B4:C7:8C:53:CA:5F:15:C1:82:53:82:7A:51:73:71:FD:31:B4:A8
            X509v3 Authority Key Identifier:
                keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/2D89110A9A5311EE9CB13140C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:a980::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:a2:86:a5:f2:af:24:69:3e:ff:bc:f6:59:e1:88:cd:56:fb:
         93:81:ab:a4:9a:d9:12:ec:39:33:df:af:29:4d:e6:08:47:b5:
         3b:59:e0:61:f3:56:ca:e0:d0:1a:8a:41:7e:1a:14:98:a8:40:
         e8:ea:7f:cc:4c:8d:b4:ef:0d:7f:a5:c6:5b:25:3b:4c:51:03:
         a1:84:66:b9:3c:48:3f:85:d1:3f:3a:20:45:f7:61:ac:3b:77:
         ac:96:7a:08:b5:cb:09:aa:00:e1:14:26:7b:55:f5:c2:32:c5:
         bc:56:18:3b:5b:93:5b:6e:db:ad:00:e4:af:6e:d4:18:b8:cb:
         78:d6:cc:bc:aa:ea:c7:27:31:fd:72:3f:87:fb:1b:1d:04:d4:
         8b:2b:b3:0b:f1:77:49:a6:84:37:0e:09:27:30:75:f4:e3:d2:
         6c:e4:e9:c7:95:50:a2:9a:1c:b1:fa:f6:28:e3:e6:be:34:f0:
         94:3e:99:1d:18:23:a9:4c:75:03:05:00:2c:67:0e:89:e7:f5:
         80:37:b7:7d:c4:d3:6d:18:d2:09:88:ca:6a:cb:48:52:81:8a:
         0a:c7:6b:dc:43:dd:db:91:45:6c:42:80:75:c9:60:80:b9:97:
         7d:65:1d:6d:a5:1a:0c:0d:7e:d1:3b:e5:92:e4:cb:0e:9c:57:
         c5:8f:f0:de
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICNYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENBRTgxMTAvBgNVBAUTKEFBQjBFMkI2MkY2MzQzODk1NzMwQzA1NDg4RTdGQzRF
MjZDNTFBNkMwHhcNMjUwOTIwMTUwMDU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODNkMS01NGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzPKSJd3BAvX+C8zaNyBUHfqrUwHy6vWjhWKDkQ4eLdWlNq5QaOoYhzY5kU5
O6oOFS2ThPWhd08+rTiN7Fx2Zq6XPfwuhuUeyvsZax+Zlm26f8xuTYgKSCN7WIFC
OIG3cRlRttTSBUzDk04QgJ4807NeoFI+0SiYxcPUI3VmbPOOwjVF//LunbnfyaHF
y8DurEz9cQEqM52CZjj4H1FMXwuBfQOgfaWol11YBCB6+hgL3tBhDyX1Kuz9Mqg9
WQttEyZMQbNZ/ui2b0KwBiHwYjoOPvLf1iojDJCFKz2BFmbkaX54SW/TrpcwPAou
SIq51cSdu+x+cmB1+IAAfJM/7wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFM20x4xT
yl8VwYJTgnpRc3H9MbSoMB8GA1UdIwQYMBaAFKqw4rYvY0OJVzDAVIjn/E4mxRps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC84QjZBREUxNDFE
OTMxMUUyOTJDQjIzRjcwOEIwMkNEMi9xckRpdGk5alE0bFhNTUJVaU9mOFRpYkZH
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FyRGl0aTlqUTRsWE1NQlVpT2Y4VGliRkdtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RENBRTgvOEI2QURFMTQxRDkzMTFFMjkyQ0IyM0Y3MDhCMDJDRDIvMkQ4OTExMEE5
QTUzMTFFRTlDQjEzMTQwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8qmAMA0GCSqGSIb3DQEBCwUAA4IBAQBTooal8q8kaT7/vPZZ
4YjNVvuTgaukmtkS7Dkz368pTeYIR7U7WeBh81bK4NAaikF+GhSYqEDo6n/MTI20
7w1/pcZbJTtMUQOhhGa5PEg/hdE/OiBF92GsO3eslnoItcsJqgDhFCZ7VfXCMsW8
Vhg7W5NbbtutAOSvbtQYuMt41sy8qurHJzH9cj+H+xsdBNSLK7ML8XdJpoQ3Dgkn
MHX049Js5OnHlVCimhyx+vYo4+a+NPCUPpkdGCOpTHUDBQAsZw6J5/WAN7d9xNNt
GNIJiMpqy0hSgYoKx2vcQ93bkUVsQoB1yWCAuZd9ZR1tpRoMDX7RO+WS5MsOnFfF
j/De
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:55 2026 by rpki-client