Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/6156C7F6A27311EFBF7D5E22C4F9AE02.roa
File:                     6156C7F6A27311EFBF7D5E22C4F9AE02.roa (raw, json)
Hash identifier:          vy7IODG07pz73pTj0pY/9n2zcuO8v2L2DLhKfTMR+yA=
Subject key identifier:   0B:34:CB:61:4A:65:10:1A:BE:22:F3:12:CB:4D:1D:95:43:85:94:14
Certificate issuer:       /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
Certificate serial:       F8
Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/6156C7F6A27311EFBF7D5E22C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:11:33 +0000
ROA not before:           Mon 29 Dec 2025 05:24:36 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153456
IP address blocks:        2001:df4:a040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7
        Validity
            Not Before: Dec 29 05:24:36 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41ee5-805b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:6d:68:31:4b:da:a6:c4:10:ea:8a:9b:26:
                    94:6e:51:a6:ad:ca:21:c7:26:5a:a7:91:71:79:07:
                    f7:fc:d1:fe:ec:fb:58:17:72:e2:9a:ba:44:2f:96:
                    23:a1:1b:99:e2:77:1e:38:f5:11:d3:83:e5:88:31:
                    1b:48:25:2c:68:83:a9:79:0f:d7:4f:4d:05:fa:b3:
                    1d:55:2f:27:32:66:96:e6:3c:5a:19:cd:5d:05:35:
                    0f:a2:0a:2a:a8:24:6f:7d:81:cb:6a:b3:4d:5a:9e:
                    6d:a8:71:8a:ef:b7:6b:6f:44:3f:e4:13:1d:79:07:
                    d2:b3:32:8c:a9:b4:59:54:62:1f:ef:c2:e4:8b:c8:
                    3d:76:ad:02:23:a0:7b:a8:74:69:60:f4:65:8a:8c:
                    48:8f:ef:b6:e8:e7:81:5e:e4:76:4e:a7:60:e2:2b:
                    37:e3:1e:84:d4:58:6e:61:6d:9d:47:7a:f7:6f:e5:
                    3d:d4:ab:aa:42:61:1e:66:e1:c0:75:98:8b:76:3d:
                    ce:17:a6:cb:26:03:8a:77:8d:72:52:73:f5:b0:86:
                    d2:31:f6:8d:3c:f0:af:a2:07:0a:ee:59:38:10:d2:
                    fe:9e:bd:cb:41:05:fc:7e:b3:61:d0:17:7a:b2:5f:
                    31:1b:30:da:9f:dc:06:0b:2d:da:a1:c7:de:fb:c1:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:34:CB:61:4A:65:10:1A:BE:22:F3:12:CB:4D:1D:95:43:85:94:14
            X509v3 Authority Key Identifier:
                keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/6156C7F6A27311EFBF7D5E22C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a040::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:b8:3d:f2:60:2f:62:17:23:af:68:70:8a:87:e0:f2:33:
         8d:e1:d2:38:68:1d:59:9e:28:d2:64:7c:57:db:6e:3c:62:38:
         aa:53:21:55:4c:3f:1d:4a:87:94:e0:ac:7f:8d:ca:ba:df:94:
         c5:9e:2a:43:0e:cb:4e:e6:53:c6:c7:bc:46:0f:c2:be:79:ae:
         1d:e5:76:61:66:b6:78:d9:3d:ec:62:d2:d3:f0:33:19:41:a3:
         38:26:43:c2:e2:7a:26:48:d5:1e:b7:69:b4:63:c8:c7:ab:08:
         07:ce:6a:14:5a:d7:f4:d5:33:a2:cd:a3:8a:07:87:eb:19:bb:
         10:7d:08:59:8f:eb:b3:92:03:ca:61:f7:13:df:77:13:ba:91:
         49:81:95:5e:f5:e5:ac:d4:8b:48:85:29:0d:c7:39:64:d5:8e:
         75:c8:f1:ee:42:45:85:0d:f7:f2:30:39:5e:82:79:9a:32:09:
         12:24:96:8c:da:c0:21:4a:e8:bb:95:e3:69:4e:aa:26:62:60:
         86:91:82:89:bf:56:b9:ff:cb:86:53:67:90:9f:86:96:0f:29:
         2f:c1:64:1f:f4:33:91:98:df:8a:87:b0:de:36:ef:24:5b:e8:
         a0:76:93:74:71:2b:f0:e9:98:91:c6:95:f3:b8:6a:44:0e:6d:
         c3:d5:5e:f7
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4
NEM3MkY0RTcwHhcNMjUxMjI5MDUyNDM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWVlNS04MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1dttaDFL2qbEEOqKmyaUblGmrcohxyZap5FxeQf3/NH+7PtYF3LimrpEL5Yj
oRuZ4nceOPUR04PliDEbSCUsaIOpeQ/XT00F+rMdVS8nMmaW5jxaGc1dBTUPogoq
qCRvfYHLarNNWp5tqHGK77drb0Q/5BMdeQfSszKMqbRZVGIf78Lki8g9dq0CI6B7
qHRpYPRlioxIj++26OeBXuR2Tqdg4is34x6E1FhuYW2dR3r3b+U91KuqQmEeZuHA
dZiLdj3OF6bLJgOKd41yUnP1sIbSMfaNPPCvogcK7lk4ENL+nr3LQQX8frNh0Bd6
sl8xGzDan9wGCy3aocfe+8EVPQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFAs0y2FK
ZRAaviLzEstNHZVDhZQUMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey
NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjc1MzcvODdERDU0OENBMjcxMTFFRkEzOTJGMDc5QzRGOUFFMDIvNjE1NkM3RjZB
MjczMTFFRkJGN0Q1RTIyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9KBAMA0GCSqGSIb3DQEBCwUAA4IBAQA9Qbg98mAvYhcjr2hw
iofg8jON4dI4aB1ZnijSZHxX2248YjiqUyFVTD8dSoeU4Kx/jcq635TFnipDDstO
5lPGx7xGD8K+ea4d5XZhZrZ42T3sYtLT8DMZQaM4JkPC4nomSNUet2m0Y8jHqwgH
zmoUWtf01TOizaOKB4frGbsQfQhZj+uzkgPKYfcT33cTupFJgZVe9eWs1ItIhSkN
xzlk1Y51yPHuQkWFDffyMDlegnmaMgkSJJaM2sAhSui7leNpTqomYmCGkYKJv1a5
/8uGU2eQn4aWDykvwWQf9DORmN+Kh7DeNu8kW+igdpN0cSvw6ZiRxpXzuGpEDm3D
1V73
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:09 2026 by rpki-client