Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/D035B7BE5BC711F097260D5EC4F9AE02.roa
File:                     D035B7BE5BC711F097260D5EC4F9AE02.roa (raw, json)
Hash identifier:          OCIfPT6csLAtAeWTDBTvsXbrYBJPIHeFKZh9yC7jO40=
Subject key identifier:   AF:43:5D:FA:6F:1C:06:F7:1D:8D:A5:90:C3:6A:D4:3D:2D:69:0F:5B
Certificate issuer:       /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Certificate serial:       018E
Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/D035B7BE5BC711F097260D5EC4F9AE02.roa
Signing time:             Fri 27 Feb 2026 04:23:35 +0000
ROA not before:           Fri 27 Feb 2026 04:23:35 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152469
IP address blocks:        2001:df3:73c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
        Validity
            Not Before: Feb 27 04:23:35 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a11c47-e738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:17:c3:81:14:7d:f4:c4:42:e8:e9:a4:0f:
                    47:08:16:32:09:cd:08:df:ec:71:97:f2:42:0b:91:
                    80:94:d6:4d:f4:52:ed:bd:07:be:63:e1:40:fa:8f:
                    8d:cc:4e:43:15:cd:f2:8c:87:76:4b:cd:4f:70:16:
                    99:5d:ce:2a:e3:63:60:4a:d6:84:7a:8c:74:6c:0a:
                    6b:7f:a2:e4:c6:59:8a:e4:2f:0f:52:db:6d:7f:62:
                    f4:bf:6e:cc:e7:75:58:93:d8:7c:14:fd:ab:75:13:
                    4c:fe:12:00:51:5d:eb:dd:ae:c6:1c:ae:3d:85:3e:
                    8b:91:ea:2d:29:4c:53:ca:02:2f:bc:28:ba:8f:a7:
                    5f:a9:fb:2b:26:97:33:8c:c2:19:87:d2:72:1a:2d:
                    3a:b8:89:f9:0a:c9:bc:ae:a7:31:dc:e7:f7:0a:6c:
                    52:24:4a:05:28:bd:48:b7:92:8d:01:04:38:4f:f4:
                    61:b3:c6:29:ad:01:40:3a:25:44:79:62:6c:e0:e4:
                    6e:3b:78:8d:e3:a4:1a:13:61:a4:fc:bd:b8:2f:ac:
                    3d:59:09:d8:ea:8c:8a:32:10:0c:9c:e2:be:58:8e:
                    cb:9a:92:a4:45:76:89:2f:73:70:3d:b9:5c:ae:38:
                    87:c2:91:ed:f5:08:76:2e:57:9e:34:ed:06:7b:b9:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:43:5D:FA:6F:1C:06:F7:1D:8D:A5:90:C3:6A:D4:3D:2D:69:0F:5B
            X509v3 Authority Key Identifier:
                keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/D035B7BE5BC711F097260D5EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:73c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:28:d3:bb:52:11:65:f2:44:8c:08:07:53:2d:e4:d3:e6:6a:
         d4:4f:64:a4:36:8d:85:0e:31:d6:ab:2d:37:6a:4d:32:22:83:
         a3:be:b4:3f:f3:51:a4:8f:7f:d8:b0:42:24:0d:0a:25:9d:74:
         ac:85:ab:54:b5:e8:08:c2:bd:8f:f1:11:b7:0d:66:46:fb:5b:
         4a:2c:eb:ef:8b:9c:6f:b4:71:67:ef:ec:90:e6:28:55:13:51:
         eb:db:df:2a:35:69:7e:15:8b:b2:f6:75:94:de:0b:95:6d:db:
         9e:5d:1c:2e:9d:7c:65:66:61:f9:6d:3d:37:5c:b2:31:7d:29:
         a5:b3:dc:75:78:31:84:48:69:b7:5c:23:7d:68:b1:5e:16:56:
         69:3b:3a:ce:09:68:ad:ff:c1:5d:ad:c4:b1:45:51:f4:e9:60:
         73:fd:a0:84:08:0e:02:fb:d9:2d:76:92:56:5c:9b:66:81:c2:
         de:e8:04:30:75:32:a9:fc:77:91:0b:ff:99:17:12:82:bf:07:
         da:9f:a5:72:05:62:c8:f0:d7:7a:db:00:b0:93:7b:be:91:32:
         e3:41:3b:dc:be:c1:22:7f:cc:12:78:01:16:4c:55:8e:9e:f1:
         86:bd:8c:f5:ca:c1:69:65:24:ec:0a:81:9c:05:d8:d8:4d:75:
         23:f2:64:d3
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0
MjhCQjE5NUQwHhcNMjYwMjI3MDQyMzM1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWExMWM0Ny1lNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+cXw4EUffTEQujppA9HCBYyCc0I3+xxl/JCC5GAlNZN9FLtvQe+Y+FA+o+N
zE5DFc3yjId2S81PcBaZXc4q42NgStaEeox0bAprf6LkxlmK5C8PUtttf2L0v27M
53VYk9h8FP2rdRNM/hIAUV3r3a7GHK49hT6LkeotKUxTygIvvCi6j6dfqfsrJpcz
jMIZh9JyGi06uIn5Csm8rqcx3Of3CmxSJEoFKL1It5KNAQQ4T/Rhs8YprQFAOiVE
eWJs4ORuO3iN46QaE2Gk/L24L6w9WQnY6oyKMhAMnOK+WI7LmpKkRXaJL3NwPblc
rjiHwpHt9Qh2LleeNO0Ge7msjwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFK9DXfpv
HAb3HY2lkMNq1D0taQ9bMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REU1MDAvNDlFNkZFNDZDNzJEMTFFRTlDN0MzNTFEQzRGOUFFMDIvRDAzNUI3QkU1
QkM3MTFGMDk3MjYwRDVFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN83PAMA0GCSqGSIb3DQEBCwUAA4IBAQAFKNO7UhFl8kSMCAdT
LeTT5mrUT2SkNo2FDjHWqy03ak0yIoOjvrQ/81Gkj3/YsEIkDQolnXSshatUtegI
wr2P8RG3DWZG+1tKLOvvi5xvtHFn7+yQ5ihVE1Hr298qNWl+FYuy9nWU3guVbdue
XRwunXxlZmH5bT03XLIxfSmls9x1eDGESGm3XCN9aLFeFlZpOzrOCWit/8FdrcSx
RVH06WBz/aCECA4C+9ktdpJWXJtmgcLe6AQwdTKp/HeRC/+ZFxKCvwfan6VyBWLI
8Nd62wCwk3u+kTLjQTvcvsEif8wSeAEWTFWOnvGGvYz1ysFpZSTsCoGcBdjYTXUj
8mTT
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:19 2026 by rpki-client