Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/1A7632424DA111ECA1180F87C4F9AE02.roa
File:                     1A7632424DA111ECA1180F87C4F9AE02.roa (raw, json)
Hash identifier:          PWpc1YrCi7YtcELVVhl8DbjOytPByeC79d1ZomEe97A=
Subject key identifier:   3E:B6:93:B8:22:85:34:71:B6:CC:3D:83:73:C9:88:F3:74:7E:DE:E1
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       09A7
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/1A7632424DA111ECA1180F87C4F9AE02.roa
Signing time:             Fri 12 Jun 2026 20:23:57 +0000
ROA not before:           Fri 12 Jun 2026 20:23:57 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149030
IP address blocks:        2404:c140:210::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2471 (0x9a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: Jun 12 20:23:57 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2c6add-ec1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f4:15:2d:0e:0f:8f:f8:54:10:a3:62:ef:fd:
                    ef:f5:57:3d:7b:e4:1b:a5:4b:74:b2:5e:76:84:65:
                    09:b0:d7:84:2c:8c:22:c8:7d:fc:15:ec:b2:c8:ae:
                    7b:07:1d:8c:7a:c1:44:bd:70:57:b2:d1:da:37:d8:
                    40:b1:26:57:32:01:ca:12:ea:b0:d1:dc:1a:05:17:
                    0d:2d:b6:87:43:0c:8d:d0:4f:3c:d7:9d:32:77:ff:
                    fb:73:11:9c:e3:f9:a6:85:0e:07:b2:8b:5c:72:52:
                    bb:8d:d4:3a:92:78:5d:ff:f0:f1:f3:68:1e:04:2b:
                    b2:3f:9a:e5:76:00:5a:52:29:b1:c9:5d:5d:d7:e8:
                    2a:ed:b6:e3:51:f0:c7:87:6b:52:8e:cd:29:b3:d6:
                    0a:1c:19:6b:bd:fb:d9:99:af:72:87:f8:43:78:24:
                    79:3f:74:7c:bc:f1:62:f0:4d:dd:62:15:47:80:cb:
                    f6:6a:85:1e:b7:65:c2:85:87:eb:b6:40:d0:98:e8:
                    cd:b5:46:5f:7b:79:06:00:f1:09:1c:4c:e3:16:56:
                    52:87:83:bd:e9:e9:b6:25:a8:6b:7f:a5:96:ac:98:
                    93:7e:49:92:4e:92:02:f2:1f:1e:e4:6f:6f:d7:ff:
                    8a:01:0a:26:74:3c:29:e5:5c:87:94:41:11:d3:5c:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B6:93:B8:22:85:34:71:B6:CC:3D:83:73:C9:88:F3:74:7E:DE:E1
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/1A7632424DA111ECA1180F87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c140:210::/44

    Signature Algorithm: sha256WithRSAEncryption
         a5:bb:c6:2a:30:eb:88:aa:8b:aa:fa:71:c5:e4:c4:5c:7b:4b:
         da:b5:89:2e:80:36:4f:70:58:39:6a:d3:76:95:0e:6e:5a:e9:
         5a:e3:4c:d5:be:d4:8d:1b:8b:ea:e4:8f:b5:49:5d:63:11:cd:
         e7:eb:67:b0:6d:b8:e6:d8:c3:e7:36:ee:f0:ab:97:3d:b9:bd:
         7f:b5:ff:7c:0a:41:aa:b9:fa:4d:b4:6a:dc:15:4a:c1:69:89:
         54:6c:e7:9c:87:c4:c5:b6:cd:69:32:af:27:9a:8f:1c:24:04:
         b4:c5:45:e2:2d:f1:a7:6f:17:f3:81:e0:3f:4a:a9:c6:be:2d:
         58:90:ba:d2:bf:d3:ab:3b:2a:2f:4b:03:e5:e7:c5:ba:85:b6:
         8d:48:b1:96:90:ef:a3:e1:fd:c9:3c:6e:13:53:5d:12:9f:30:
         bd:02:bc:63:39:c5:08:1f:7c:b5:8f:99:b2:c7:61:25:9a:5c:
         d7:cd:b6:80:ea:34:b1:8f:6b:7b:79:55:9a:b0:69:5e:60:65:
         2d:61:2d:71:2f:e5:bd:b9:7e:44:f4:3c:68:77:48:8b:f3:81:
         a9:94:8b:ab:57:a8:c5:b0:f8:95:8b:7b:4c:bf:7d:78:c3:cd:
         91:5d:92:e0:07:a7:60:c7:69:a1:49:38:b1:ec:4b:70:fb:e1:
         65:d5:f8:fb
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD
NTU5MDlEODUwHhcNMjYwNjEyMjAyMzU3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJjNmFkZC1lYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhPQVLQ4Pj/hUEKNi7/3v9Vc9e+QbpUt0sl52hGUJsNeELIwiyH38FeyyyK57
Bx2MesFEvXBXstHaN9hAsSZXMgHKEuqw0dwaBRcNLbaHQwyN0E88150yd//7cxGc
4/mmhQ4HsotcclK7jdQ6knhd//Dx82geBCuyP5rldgBaUimxyV1d1+gq7bbjUfDH
h2tSjs0ps9YKHBlrvfvZma9yh/hDeCR5P3R8vPFi8E3dYhVHgMv2aoUet2XChYfr
tkDQmOjNtUZfe3kGAPEJHEzjFlZSh4O96em2Jahrf6WWrJiTfkmSTpIC8h8e5G9v
1/+KAQomdDwp5VyHlEER01wRSwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFD62k7gi
hTRxtsw9g3PJiPN0ft7hMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD
ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu
WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVERkQvNTQ1MzZCM0VCQzg4MTFFQTg4RUYzRDQ5QzRGOUFFMDIvMUE3NjMyNDI0
REExMTFFQ0ExMTgwRjg3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJATBQAIQMA0GCSqGSIb3DQEBCwUAA4IBAQClu8YqMOuIqouq+nHF
5MRce0vatYkugDZPcFg5atN2lQ5uWula40zVvtSNG4vq5I+1SV1jEc3n62ewbbjm
2MPnNu7wq5c9ub1/tf98CkGqufpNtGrcFUrBaYlUbOech8TFts1pMq8nmo8cJAS0
xUXiLfGnbxfzgeA/SqnGvi1YkLrSv9OrOyovSwPl58W6hbaNSLGWkO+j4f3JPG4T
U10SnzC9ArxjOcUIH3y1j5myx2ElmlzXzbaA6jSxj2t7eVWasGleYGUtYS1xL+W9
uX5E9Dxod0iL84GplIurV6jFsPiVi3tMv314w82RXZLgB6dgx2mhSTix7Etw++Fl
1fj7
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:54 2026 by rpki-client