Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa
File:                     B245BA601C4311F08254DE40C4F9AE02.roa (raw, json)
Hash identifier:          n3MECtqyIeVIYxx7KfugvEie6UFrFK3k/vbfWKNUAZM=
Subject key identifier:   2F:F3:BF:1B:3E:56:B7:9E:63:00:03:D1:E5:DA:38:DE:5E:DB:4A:9E
Certificate issuer:       /CN=A91DF856/serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D
Certificate serial:       9C
Authority key identifier: 5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa
Signing time:             Tue 03 Feb 2026 06:29:32 +0000
ROA not before:           Tue 03 Feb 2026 06:29:32 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140096
IP address blocks:        2400:cca0:2101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl
                          rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF856, serialNumber=5F699186A2EBCD45B1FF6A0A4AF60606F3B3D08D
        Validity
            Not Before: Feb  3 06:29:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=698195cc-98a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:48:4c:08:e4:53:c9:f0:39:87:08:d6:c3:
                    c9:18:97:c0:5f:2d:f1:3f:4a:e3:ff:b5:30:41:f5:
                    23:2b:25:f9:c8:ba:57:6c:3a:be:8b:9a:3a:f3:33:
                    b4:4b:c2:77:37:f0:22:14:ad:66:b2:a7:06:26:05:
                    c7:7f:46:40:b6:2f:d3:3d:6f:2e:6a:76:07:77:f5:
                    bb:66:58:73:0b:7c:f2:11:cd:5f:67:be:e7:1d:56:
                    82:e7:32:59:ff:ea:0c:0c:1e:7e:b0:81:cf:66:3d:
                    86:a9:76:83:00:aa:37:a1:7a:c4:ed:b7:d9:16:9c:
                    e4:65:19:00:00:01:a2:b4:17:a8:70:ed:14:bb:6e:
                    fe:32:d6:c3:1b:93:cb:e1:0d:c3:9e:fd:e9:7d:f7:
                    f2:39:33:9a:43:70:5e:86:bd:ec:19:f0:d3:0b:33:
                    9c:ef:6a:ac:cf:fc:2f:7e:6a:21:f2:a7:46:a5:cd:
                    5f:a4:cb:f6:74:ac:5b:d8:9e:92:45:fb:6e:88:1a:
                    c9:0a:da:1a:fc:a1:9c:42:f5:2a:d2:e3:48:3e:15:
                    4e:0d:22:a8:7c:dc:69:61:c4:e4:97:03:bd:b1:ef:
                    86:7b:01:fb:e3:bb:d9:62:e5:69:37:cf:91:4d:ff:
                    07:bb:d6:a9:14:34:62:75:cf:67:7e:ad:5b:3c:46:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:BF:1B:3E:56:B7:9E:63:00:03:D1:E5:DA:38:DE:5E:DB:4A:9E
            X509v3 Authority Key Identifier:
                keyid:5F:69:91:86:A2:EB:CD:45:B1:FF:6A:0A:4A:F6:06:06:F3:B3:D0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/X2mRhqLrzUWx_2oKSvYGBvOz0I0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mRhqLrzUWx_2oKSvYGBvOz0I0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF856/EFF2A0A01C4111F0A9821F3EC4F9AE02/B245BA601C4311F08254DE40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:cca0:2101::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:89:ad:ec:8e:6d:89:48:dd:08:9c:51:78:72:c5:d3:d8:81:
         7e:ac:95:35:19:93:9f:f8:40:75:ae:a3:43:bf:28:b4:8d:64:
         88:4d:b7:8a:d7:52:e9:e6:44:87:23:0f:3a:ad:5e:28:c5:17:
         f6:65:b7:6c:83:b2:84:7a:f3:62:3e:80:99:d4:9c:15:d7:35:
         13:d9:06:d8:a1:57:04:87:0c:7c:27:19:5f:19:87:31:36:67:
         75:b1:64:cc:65:f9:81:e2:91:10:17:a0:b9:8d:5b:92:ce:85:
         f3:63:46:ce:6a:b5:f7:a4:8b:cc:92:cb:46:38:e8:44:ec:9a:
         c2:f9:31:49:c4:af:9d:86:d1:b1:c3:6b:af:79:21:9c:f0:7a:
         b6:e7:90:60:3e:b7:81:91:84:f8:f6:8a:09:b0:5b:dd:ca:c7:
         90:37:fd:01:97:5f:36:09:cf:f9:00:f9:1c:02:7e:94:34:08:
         33:bf:9d:82:89:d7:35:7e:6f:d5:c5:4e:d5:19:9f:59:cb:9c:
         0c:7e:0e:28:14:94:ed:c9:f3:38:7b:a7:79:81:45:c1:68:f3:
         ea:4d:87:b2:3f:48:3a:05:fc:7e:4d:73:bd:09:02:af:bc:9b:
         a1:72:fa:58:a8:7b:38:c4:2a:15:e5:ec:f9:bb:55:c1:16:2b:
         35:48:4e:ad
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
REY4NTYxMTAvBgNVBAUTKDVGNjk5MTg2QTJFQkNENDVCMUZGNkEwQTRBRjYwNjA2
RjNCM0QwOEQwHhcNMjYwMjAzMDYyOTMyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxOTVjYy05OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+JITAjkU8nwOYcI1sPJGJfAXy3xP0rj/7UwQfUjKyX5yLpXbDq+i5o68zO0
S8J3N/AiFK1msqcGJgXHf0ZAti/TPW8uanYHd/W7ZlhzC3zyEc1fZ77nHVaC5zJZ
/+oMDB5+sIHPZj2GqXaDAKo3oXrE7bfZFpzkZRkAAAGitBeocO0Uu27+MtbDG5PL
4Q3Dnv3pfffyOTOaQ3Behr3sGfDTCzOc72qsz/wvfmoh8qdGpc1fpMv2dKxb2J6S
RftuiBrJCtoa/KGcQvUq0uNIPhVODSKofNxpYcTklwO9se+GewH747vZYuVpN8+R
Tf8Hu9apFDRidc9nfq1bPEYzlwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFC/zvxs+
VreeYwAD0eXaON5e20qeMB8GA1UdIwQYMBaAFF9pkYai681Fsf9qCkr2Bgbzs9CN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1Ni9FRkYyQTBBMDFD
NDExMUYwQTk4MjFGM0VDNEY5QUUwMi9YMm1SaHFMcnpVV3hfMm9LU3ZZR0J2T3ow
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gybVJocUxyelVXeF8yb0tTdllHQnZPejBJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY4NTYvRUZGMkEwQTAxQzQxMTFGMEE5ODIxRjNFQzRGOUFFMDIvQjI0NUJBNjAx
QzQzMTFGMDgyNTRERTQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkAMygIQEwDQYJKoZIhvcNAQELBQADggEBABCJreyObYlI
3QicUXhyxdPYgX6slTUZk5/4QHWuo0O/KLSNZIhNt4rXUunmRIcjDzqtXijFF/Zl
t2yDsoR682I+gJnUnBXXNRPZBtihVwSHDHwnGV8ZhzE2Z3WxZMxl+YHikRAXoLmN
W5LOhfNjRs5qtfeki8ySy0Y46ETsmsL5MUnEr52G0bHDa695IZzwerbnkGA+t4GR
hPj2igmwW93Kx5A3/QGXXzYJz/kA+RwCfpQ0CDO/nYKJ1zV+b9XFTtUZn1nLnAx+
DigUlO3J8zh7p3mBRcFo8+pNh7I/SDoF/H5Nc70JAq+8m6Fy+lioezjEKhXl7Pm7
VcEWKzVITq0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:55 2026 by rpki-client