Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa
File:                     11CCFCD8DB0B11F0BC36350982D3641D.roa (raw, json)
Hash identifier:          iqoDOOCu/fngDkkSni/oqHyjislrgnbGvgYBpgWoetA=
Subject key identifier:   CE:64:9A:C5:B5:5E:54:DB:DD:C2:A0:8E:84:82:9D:57:94:64:52:BC
Certificate issuer:       /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial:       63
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa
Signing time:             Sun 01 Mar 2026 15:16:51 +0000
ROA not before:           Wed 31 Dec 2025 07:24:42 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        2001:df5:f042::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
                          rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
        Validity
            Not Before: Dec 31 07:24:42 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a45863-0260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:a3:94:46:33:63:16:75:3c:e6:01:bf:e9:
                    11:c0:70:30:73:c1:83:e2:ff:a6:ec:f0:cd:0d:7c:
                    d8:99:08:6e:b6:5d:ee:d4:a4:d5:41:16:df:bb:d4:
                    31:f6:40:a4:15:c7:94:b8:24:76:04:aa:2d:b5:a8:
                    ee:6f:36:63:0c:6b:db:79:57:9c:f0:1c:43:2b:1e:
                    2b:50:7e:92:71:b9:fc:e8:c3:ae:90:d8:97:26:0f:
                    5d:69:6b:20:b5:be:8a:6d:ea:f8:9b:18:bc:b5:a4:
                    4a:f7:39:de:d1:56:64:75:a4:25:a8:39:50:1b:2d:
                    d0:ef:f3:02:ff:fb:7e:24:38:e5:99:80:97:37:54:
                    7b:2f:f0:88:9e:fc:43:72:87:d9:f7:d5:bd:6b:81:
                    d7:f7:68:fd:83:8b:11:74:8d:96:3c:b0:3e:18:a6:
                    85:63:1c:f8:cf:b8:f2:07:6d:dc:9c:75:3b:d6:a3:
                    f7:fc:9f:2c:6c:f0:16:b5:c3:85:69:3b:30:25:0a:
                    dc:2b:18:bc:95:cd:f6:92:14:7d:a7:fd:e9:ef:cf:
                    90:f2:91:b6:82:f5:fc:0f:f3:3b:82:ed:7c:d0:9b:
                    9b:d6:dc:46:b4:3c:54:59:a7:71:5d:6a:94:56:da:
                    7a:5d:73:fd:32:2b:fc:0c:85:3c:a1:2f:20:7f:3b:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:9A:C5:B5:5E:54:DB:DD:C2:A0:8E:84:82:9D:57:94:64:52:BC
            X509v3 Authority Key Identifier:
                keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/11CCFCD8DB0B11F0BC36350982D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f042::/47

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:02:95:2c:1d:05:a8:b0:4a:6f:9c:16:8c:eb:ce:3c:df:
         76:a0:71:7b:29:ce:15:ed:68:37:bb:d6:89:a2:d4:47:8e:8d:
         bc:3f:6f:b4:3e:cf:83:15:df:6f:3b:99:1a:ca:98:12:0a:6c:
         b0:8e:87:29:f8:7b:62:0c:43:28:2c:d1:29:67:7b:75:f8:a9:
         f1:64:ed:ad:d0:79:36:df:72:2c:eb:16:5f:d0:97:18:c3:d0:
         0a:2f:f5:9b:d8:71:b2:ca:14:08:7c:57:bd:94:fc:57:5b:df:
         83:6b:e0:f3:19:b6:2b:b4:a6:2c:5a:93:39:b2:00:48:4e:2b:
         a1:33:23:76:57:5c:61:2b:b6:77:f2:14:1a:f1:38:67:93:a1:
         57:a8:28:21:19:58:2b:79:91:30:70:20:d3:c5:15:e8:1b:ac:
         4d:f8:0e:b0:de:10:fa:0a:ae:d4:2d:0c:ac:d2:f2:d2:14:4f:
         22:3a:a4:7f:fb:d0:27:7a:1a:77:3b:95:8b:5f:f6:a3:46:b2:
         7f:cc:35:31:df:6b:c9:20:ef:26:d9:55:c0:36:72:be:78:b7:
         7c:43:f6:33:ad:f3:f6:55:f2:7f:2c:bd:4b:5d:3b:e3:96:df:
         65:67:ab:14:dc:13:cf:2d:28:04:16:12:7f:39:6c:5c:c7:b3:
         ed:c8:c8:b7
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4
NkU1RDhENTAeFw0yNTEyMzEwNzI0NDJaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTQ1ODYzLTAyNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2JKOURjNjFnU85gG/6RHAcDBzwYPi/6bs8M0NfNiZCG62Xe7UpNVBFt+71DH2
QKQVx5S4JHYEqi21qO5vNmMMa9t5V5zwHEMrHitQfpJxufzow66Q2JcmD11payC1
vopt6vibGLy1pEr3Od7RVmR1pCWoOVAbLdDv8wL/+34kOOWZgJc3VHsv8Iie/ENy
h9n31b1rgdf3aP2DixF0jZY8sD4YpoVjHPjPuPIHbdycdTvWo/f8nyxs8Ba1w4Vp
OzAlCtwrGLyVzfaSFH2n/envz5DykbaC9fwP8zuC7XzQm5vW3Ea0PFRZp3FdapRW
2npdc/0yK/wMhTyhLyB/O14VAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUzmSaxbVe
VNvdwqCOhIKdV5RkUrwwHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4
QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjE5NS83NEMxOEY3MDkzOEExMUYwQkJENjIzODVDNEY5QUUwMi8xMUNDRkNEOERC
MEIxMUYwQkMzNjM1MDk4MkQzNjQxRC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwEgAQ318EIwDQYJKoZIhvcNAQELBQADggEBAHarApUsHQWosEpvnBaM
684833agcXspzhXtaDe71omi1EeOjbw/b7Q+z4MV3287mRrKmBIKbLCOhyn4e2IM
Qygs0Slne3X4qfFk7a3QeTbfcizrFl/QlxjD0Aov9ZvYcbLKFAh8V72U/Fdb34Nr
4PMZtiu0pixakzmyAEhOK6EzI3ZXXGErtnfyFBrxOGeToVeoKCEZWCt5kTBwINPF
FegbrE34DrDeEPoKrtQtDKzS8tIUTyI6pH/70Cd6Gnc7lYtf9qNGsn/MNTHfa8kg
7ybZVcA2cr54t3xD9jOt8/ZV8n8svUtdO+OW32VnqxTcE88tKAQWEn85bFzHs+3I
yLc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:28 2026 by rpki-client