Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/F88F98EA55A211F0978C8774C4F9AE02.roa
File:                     F88F98EA55A211F0978C8774C4F9AE02.roa (raw, json)
Hash identifier:          1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=
Subject key identifier:   5E:7E:4C:C1:2E:52:5B:9E:D8:CB:8F:A3:87:F4:3E:5C:AC:5B:7E:45
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       0275
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/F88F98EA55A211F0978C8774C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:53:12 +0000
ROA not before:           Mon 03 Nov 2025 03:48:09 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     399916
IP address blocks:        2402:be0:fefb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Nov  3 03:48:09 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47d08-af6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:3a:95:a4:21:49:bb:ab:6c:08:d9:96:84:
                    b5:6d:f4:90:f7:20:2f:64:c6:c5:22:10:8a:09:b2:
                    9a:71:2a:b2:cc:69:23:94:f7:82:85:9d:81:03:55:
                    9f:18:36:eb:41:48:73:ba:3e:27:bb:97:da:bf:46:
                    dd:7a:d3:5f:86:12:cf:5d:cf:6a:58:47:f5:31:56:
                    8c:68:bd:45:a0:ef:ee:5c:70:75:12:5a:63:b5:fb:
                    bc:e1:23:e1:de:f4:38:34:83:45:46:e7:5b:fc:aa:
                    40:a8:76:d9:13:20:f7:ba:29:a9:49:dc:3b:ea:9d:
                    2c:98:46:d3:c5:d5:b7:fd:bc:6d:4d:2e:d6:9c:7a:
                    9f:96:ea:d7:c1:4b:d4:e2:a7:0e:18:57:37:2c:f9:
                    2c:1d:a9:90:00:44:6b:e2:82:38:5f:4f:a8:86:65:
                    0a:17:56:41:f5:18:d9:2e:8d:80:69:82:ac:e4:32:
                    7c:3a:77:aa:bd:8b:17:f3:6f:6c:c9:bc:16:d3:21:
                    35:3b:b4:9f:a5:af:e7:ba:49:27:67:76:42:05:e4:
                    27:7c:93:18:4c:f0:2f:c0:0c:0f:21:c7:81:7d:0b:
                    fc:10:01:c0:56:e7:73:c8:b5:bc:45:42:b6:e6:16:
                    06:73:df:0d:ff:41:98:3d:40:ec:93:8b:b1:2e:d6:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7E:4C:C1:2E:52:5B:9E:D8:CB:8F:A3:87:F4:3E:5C:AC:5B:7E:45
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/F88F98EA55A211F0978C8774C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:fefb::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:85:cc:69:a3:de:2a:cd:54:42:1f:48:33:58:f9:09:a7:d6:
         01:09:9d:1e:36:51:fe:d2:21:22:bc:aa:80:52:4b:26:67:7b:
         12:71:92:24:18:1a:86:f3:5a:b1:f1:1a:ca:d4:7a:28:09:4b:
         77:0f:b6:20:1c:4a:88:e2:97:ac:af:c0:85:99:92:cd:9e:58:
         e4:dd:1e:c7:d4:c9:9b:f6:27:e7:c6:9d:cc:7f:88:e3:b8:5d:
         4b:bb:39:45:87:de:08:2e:2e:fc:c6:18:84:3c:04:d3:ae:a9:
         3c:cf:c5:fc:31:7e:08:f5:76:d9:cc:2d:a1:e0:40:34:81:6c:
         c1:aa:73:f4:6e:30:8d:b5:0b:54:80:8b:32:5a:85:df:cc:98:
         6a:93:d7:0d:5d:0f:eb:55:41:fb:22:46:0a:25:f9:ef:e3:26:
         a4:37:24:55:2f:7b:3b:6b:63:53:14:4b:75:87:63:90:c9:0c:
         de:b5:f0:8e:ee:43:c2:b3:a6:e7:1d:44:3f:63:f3:95:1a:b3:
         c4:e0:93:6b:eb:a0:fc:d9:e3:48:b2:3d:3d:27:80:0e:04:a6:
         80:a4:d7:48:e5:a2:62:48:6a:dc:f3:31:7d:71:bb:c0:ed:01:
         ea:c2:67:73:0d:ff:e4:71:ad:f7:b4:4d:63:24:de:ac:0f:18:
         d9:e4:08:f8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjUxMTAzMDM0ODA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2QwOC1hZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsz86laQhSburbAjZloS1bfSQ9yAvZMbFIhCKCbKacSqyzGkjlPeChZ2BA1Wf
GDbrQUhzuj4nu5fav0bdetNfhhLPXc9qWEf1MVaMaL1FoO/uXHB1Elpjtfu84SPh
3vQ4NINFRudb/KpAqHbZEyD3uimpSdw76p0smEbTxdW3/bxtTS7WnHqflurXwUvU
4qcOGFc3LPksHamQAERr4oI4X0+ohmUKF1ZB9RjZLo2AaYKs5DJ8OneqvYsX829s
ybwW0yE1O7Sfpa/nukknZ3ZCBeQnfJMYTPAvwAwPIceBfQv8EAHAVudzyLW8RUK2
5hYGc98N/0GYPUDsk4uxLtapJwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFF5+TMEu
Ulue2MuPo4f0PlysW35FMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvRjg4Rjk4RUE1
NUEyMTFGMDk3OEM4Nzc0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAIL4P77MA0GCSqGSIb3DQEBCwUAA4IBAQCDhcxpo94qzVRCH0gz
WPkJp9YBCZ0eNlH+0iEivKqAUksmZ3sScZIkGBqG81qx8RrK1HooCUt3D7YgHEqI
4pesr8CFmZLNnljk3R7H1Mmb9ifnxp3Mf4jjuF1LuzlFh94ILi78xhiEPATTrqk8
z8X8MX4I9XbZzC2h4EA0gWzBqnP0bjCNtQtUgIsyWoXfzJhqk9cNXQ/rVUH7IkYK
Jfnv4yakNyRVL3s7a2NTFEt1h2OQyQzetfCO7kPCs6bnHUQ/Y/OVGrPE4JNr66D8
2eNIsj09J4AOBKaApNdI5aJiSGrc8zF9cbvA7QHqwmdzDf/kca33tE1jJN6sDxjZ
5Aj4
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:27 2026 by rpki-client