Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/E7D03568F89011ECB5F98148C4F9AE02.roa
File:                     E7D03568F89011ECB5F98148C4F9AE02.roa (raw, json)
Hash identifier:          /GgklwwSBikULn43rGtHG5wL0AHIDwWQqbAtpZ3bJj4=
Subject key identifier:   1E:FE:EF:4D:C8:F8:C9:50:6F:D2:E4:F4:BC:83:C5:F7:01:60:56:98
Certificate issuer:       /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial:       0358
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/E7D03568F89011ECB5F98148C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:04:17 +0000
ROA not before:           Sat 05 Jul 2025 02:09:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149993
IP address blocks:        2001:df0:e940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
                          rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
        Validity
            Not Before: Jul  5 02:09:45 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a42b41-ca7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:21:d2:6e:8d:e0:82:4f:73:fa:e1:14:bb:
                    3a:7c:af:8b:02:6a:f0:ed:c5:7a:d2:f4:b5:72:79:
                    ae:a2:de:2b:b4:30:82:b5:f9:92:aa:77:45:46:0b:
                    2a:18:80:ce:d2:66:4b:80:6b:41:32:4d:93:3b:f1:
                    77:c8:24:4b:09:83:6f:02:44:92:17:68:6a:f0:bc:
                    e8:ca:97:db:d9:22:02:4b:db:a5:08:dc:78:49:5a:
                    89:0f:ae:55:ed:4e:b3:42:23:c3:ae:80:e3:a2:67:
                    96:95:55:1c:36:b1:c6:45:16:21:ad:b0:6c:90:2e:
                    e0:cd:f7:6c:94:78:9f:ce:1e:eb:54:cb:2d:f4:f3:
                    bc:85:a5:d8:87:48:66:f5:26:60:3f:bc:ad:ef:35:
                    72:c2:be:df:f6:1f:02:62:86:74:24:46:9e:71:a0:
                    a4:71:00:03:cb:26:b0:cd:10:be:c2:44:94:61:3b:
                    13:a5:85:dc:91:8e:42:11:20:db:df:51:dd:bc:c2:
                    bb:c6:0b:0a:7a:37:3e:3f:b6:ae:14:ac:e7:a3:9c:
                    e4:bb:6f:4d:80:ce:ec:ad:50:ce:8d:c1:39:43:de:
                    aa:5c:4a:9c:a4:9c:bf:0f:de:18:54:5c:5f:5f:f3:
                    aa:1a:7f:44:9f:a2:59:94:85:e5:7c:0e:02:86:4a:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FE:EF:4D:C8:F8:C9:50:6F:D2:E4:F4:BC:83:C5:F7:01:60:56:98
            X509v3 Authority Key Identifier:
                keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/E7D03568F89011ECB5F98148C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:dd:94:77:14:36:f0:87:7e:91:16:f8:69:31:7c:22:bf:
         c5:5d:ae:27:e4:5f:a2:0b:e4:1d:6a:40:54:07:b5:e1:d8:4f:
         48:96:0b:6e:43:29:d8:fe:65:88:2d:ed:8e:f4:74:67:6d:d4:
         00:b1:27:05:9f:be:20:1b:e8:72:3a:fb:82:e2:d2:5a:6a:08:
         a5:a4:1b:3c:df:fb:7c:58:a9:04:e1:b7:da:32:1d:06:89:d4:
         5f:80:93:06:32:04:a5:ec:bd:10:f9:81:c2:2e:ee:2b:44:0d:
         1e:83:90:8e:aa:15:b1:eb:cd:d8:84:be:f6:bb:7b:94:e5:a5:
         59:5a:08:11:36:52:dc:79:ba:c8:8b:96:7f:8b:94:e1:1f:2e:
         3b:f0:2a:eb:3a:fc:1a:d6:33:85:ed:f3:c7:23:cd:4a:82:5e:
         31:6d:20:b8:6c:9f:d2:62:fc:fb:a0:0e:2a:af:05:99:82:c7:
         13:39:7e:a3:12:90:e8:b2:0e:fc:e5:94:ea:7d:b7:1f:62:87:
         54:b6:42:9b:f2:4f:0b:46:b1:28:ce:8a:7e:3a:a5:d6:2f:43:
         a0:d5:1f:08:88:89:bf:c0:07:88:f3:77:20:48:29:5b:73:a7:
         ce:0e:5d:fd:35:d4:48:bc:ab:6e:b3:98:b2:db:28:46:aa:bb:
         e6:43:28:fe
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5
Q0RCODFEQ0UwHhcNMjUwNzA1MDIwOTQ1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmI0MS1jYTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlV4h0m6N4IJPc/rhFLs6fK+LAmrw7cV60vS1cnmuot4rtDCCtfmSqndFRgsq
GIDO0mZLgGtBMk2TO/F3yCRLCYNvAkSSF2hq8Lzoypfb2SICS9ulCNx4SVqJD65V
7U6zQiPDroDjomeWlVUcNrHGRRYhrbBskC7gzfdslHifzh7rVMst9PO8haXYh0hm
9SZgP7yt7zVywr7f9h8CYoZ0JEaecaCkcQADyyawzRC+wkSUYTsTpYXckY5CESDb
31HdvMK7xgsKejc+P7auFKzno5zku29NgM7srVDOjcE5Q96qXEqcpJy/D94YVFxf
X/OqGn9En6JZlIXlfA4Chkq2UQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFB7+703I
+MlQb9Lk9LyDxfcBYFaYMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4
OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkEwMEEvM0FBOTRCMzZGODhCMTFFQzlFQ0JFMjNEQzRGOUFFMDIvRTdEMDM1NjhG
ODkwMTFFQ0I1Rjk4MTQ4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8OlAMA0GCSqGSIb3DQEBCwUAA4IBAQAlq92UdxQ28Id+kRb4
aTF8Ir/FXa4n5F+iC+QdakBUB7Xh2E9IlgtuQynY/mWILe2O9HRnbdQAsScFn74g
G+hyOvuC4tJaagilpBs83/t8WKkE4bfaMh0GidRfgJMGMgSl7L0Q+YHCLu4rRA0e
g5COqhWx683YhL72u3uU5aVZWggRNlLcebrIi5Z/i5ThHy478CrrOvwa1jOF7fPH
I81Kgl4xbSC4bJ/SYvz7oA4qrwWZgscTOX6jEpDosg785ZTqfbcfYodUtkKb8k8L
RrEozop+OqXWL0Og1R8IiIm/wAeI83cgSClbc6fODl39NdRIvKtus5iy2yhGqrvm
Qyj+
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:36 2026 by rpki-client