Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/B370AF6CD18411EF960DE726C4F9AE02.roa
File:                     B370AF6CD18411EF960DE726C4F9AE02.roa (raw, json)
Hash identifier:          2AnN5j8uUwGyLBzvvDALzRxORjAI1M3q+WMdIffTK/E=
Subject key identifier:   CC:0A:DE:0C:10:00:1A:6B:3E:98:53:CB:C7:E0:FA:64:F9:2A:C6:40
Certificate issuer:       /CN=A91E3B1D/serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
Certificate serial:       0388
Authority key identifier: 5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/B370AF6CD18411EF960DE726C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:03:13 +0000
ROA not before:           Sat 05 Jul 2025 02:09:25 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     149857
IP address blocks:        2400:83e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl
                          rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904 (0x388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3B1D, serialNumber=5A99B0276719D3A83770FAAE14D7575CC666488D
        Validity
            Not Before: Jul  5 02:09:25 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a42b00-8541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:c1:4b:e0:d5:53:ec:67:fe:73:fb:32:9f:
                    e8:75:6c:57:32:b9:b9:20:1c:03:ff:41:c0:b3:02:
                    f0:14:fa:69:b1:59:3b:61:e6:41:cb:9b:ff:23:71:
                    4c:ef:b1:17:1d:aa:19:29:10:91:02:95:24:30:1f:
                    f4:9f:d6:12:70:c8:6a:e9:5f:a9:b7:c9:8d:eb:6c:
                    e2:74:e2:ac:a1:33:88:dc:c0:41:27:53:97:f5:50:
                    5b:83:95:18:01:49:39:9f:87:61:4d:48:c3:d5:4c:
                    a7:90:21:34:8b:a8:af:00:e3:80:92:11:53:4a:08:
                    1d:11:98:5d:de:58:60:e8:27:25:55:00:e4:6d:3d:
                    de:70:c5:9d:3e:47:84:70:d5:f6:90:c2:d9:ac:b4:
                    27:16:60:24:50:c7:5a:9c:01:94:6e:79:f4:c0:b5:
                    e1:78:89:35:d2:63:ee:d1:31:57:ca:9a:67:de:0e:
                    3d:f4:1d:d4:ca:2b:df:cb:8c:96:9f:f0:40:b9:95:
                    51:88:88:99:88:6e:6d:b7:36:6a:c2:0e:f6:9b:43:
                    4c:9a:8b:33:dd:f0:e6:6a:51:7e:5f:12:75:f4:0e:
                    80:54:d3:b4:32:20:f0:40:15:31:a7:05:63:4d:fa:
                    82:a9:f3:e4:38:da:a0:71:29:da:c1:c5:47:f1:6e:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0A:DE:0C:10:00:1A:6B:3E:98:53:CB:C7:E0:FA:64:F9:2A:C6:40
            X509v3 Authority Key Identifier:
                keyid:5A:99:B0:27:67:19:D3:A8:37:70:FA:AE:14:D7:57:5C:C6:66:48:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/WpmwJ2cZ06g3cPquFNdXXMZmSI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpmwJ2cZ06g3cPquFNdXXMZmSI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B1D/BA64D066E33711EC9730EB3DC4F9AE02/B370AF6CD18411EF960DE726C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:83e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:f8:03:93:cf:7b:93:6d:62:49:96:05:86:50:6b:60:6e:a5:
         eb:d8:d1:f8:cf:fe:40:aa:6e:26:df:f0:b2:88:04:db:ee:6f:
         3d:cd:61:b1:72:bd:c2:72:79:c6:b2:54:ff:ca:9c:97:16:8d:
         5a:cf:e3:5e:83:30:07:03:e1:c4:9a:12:42:86:1f:90:ac:1d:
         49:0e:25:d5:a5:e4:d0:8b:4a:53:97:b2:e2:91:e5:bf:07:68:
         fe:e6:1f:a1:07:79:de:25:cd:fc:53:a6:77:ef:c4:ab:dd:7c:
         62:40:f5:ce:27:20:15:3b:21:72:06:77:3c:47:ae:7d:b5:95:
         76:0f:14:45:99:ac:ed:28:4b:59:bd:db:4c:86:84:d3:e2:08:
         4d:18:86:ff:80:14:f2:23:89:69:04:39:94:20:48:d6:c3:51:
         fa:be:93:d5:18:db:50:56:5a:32:62:28:11:bc:0a:2b:83:78:
         85:f8:04:d0:10:d0:2f:4d:47:5e:3b:dc:b0:fe:24:3a:7c:08:
         7b:f0:89:bc:b8:c2:60:6e:92:f9:b7:00:3d:23:1a:54:54:8b:
         55:6f:b8:c3:46:70:04:fd:74:dd:50:72:2f:c3:b0:e0:a4:18:
         09:31:fc:88:04:c8:d0:ba:3b:40:23:62:15:35:e0:6f:97:ec:
         13:7f:6e:30
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNCMUQxMTAvBgNVBAUTKDVBOTlCMDI3NjcxOUQzQTgzNzcwRkFBRTE0RDc1NzVD
QzY2NjQ4OEQwHhcNMjUwNzA1MDIwOTI1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmIwMC04NTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyTBS+DVU+xn/nP7Mp/odWxXMrm5IBwD/0HAswLwFPppsVk7YeZBy5v/I3FM
77EXHaoZKRCRApUkMB/0n9YScMhq6V+pt8mN62zidOKsoTOI3MBBJ1OX9VBbg5UY
AUk5n4dhTUjD1UynkCE0i6ivAOOAkhFTSggdEZhd3lhg6CclVQDkbT3ecMWdPkeE
cNX2kMLZrLQnFmAkUMdanAGUbnn0wLXheIk10mPu0TFXyppn3g499B3Uyivfy4yW
n/BAuZVRiIiZiG5ttzZqwg72m0NMmosz3fDmalF+XxJ19A6AVNO0MiDwQBUxpwVj
TfqCqfPkONqgcSnawcVH8W6E4wIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFMwK3gwQ
ABprPphTy8fg+mT5KsZAMB8GA1UdIwQYMBaAFFqZsCdnGdOoN3D6rhTXV1zGZkiN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IxRC9CQTY0RDA2NkUz
MzcxMUVDOTczMEVCM0RDNEY5QUUwMi9XcG13SjJjWjA2ZzNjUHF1Rk5kWFhNWm1T
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dwbXdKMmNaMDZnM2NQcXVGTmRYWE1abVNJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTNCMUQvQkE2NEQwNjZFMzM3MTFFQzk3MzBFQjNEQzRGOUFFMDIvQjM3MEFGNkNE
MTg0MTFFRjk2MERFNzI2QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJACD4DANBgkqhkiG9w0BAQsFAAOCAQEAEPgDk897k21iSZYFhlBr
YG6l69jR+M/+QKpuJt/wsogE2+5vPc1hsXK9wnJ5xrJU/8qclxaNWs/jXoMwBwPh
xJoSQoYfkKwdSQ4l1aXk0ItKU5ey4pHlvwdo/uYfoQd53iXN/FOmd+/Eq918YkD1
zicgFTshcgZ3PEeufbWVdg8URZms7ShLWb3bTIaE0+IITRiG/4AU8iOJaQQ5lCBI
1sNR+r6T1RjbUFZaMmIoEbwKK4N4hfgE0BDQL01HXjvcsP4kOnwIe/CJvLjCYG6S
+bcAPSMaVFSLVW+4w0ZwBP103VByL8Ow4KQYCTH8iATI0Lo7QCNiFTXgb5fsE39u
MA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:05 2026 by rpki-client