Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/2851C57C88FF11F1BFED971F4A11F970.roa
File:                     2851C57C88FF11F1BFED971F4A11F970.roa (raw, json)
Hash identifier:          eSRwvGiAt/3oDdwVqUKijtcqc/uEjbLSCEwTPyQp47s=
Subject key identifier:   32:63:92:88:DB:E0:AB:18:2F:67:08:8C:1E:EC:07:FB:7E:22:72:16
Certificate issuer:       /CN=A91FC19D/serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677
Certificate serial:       03
Authority key identifier: 64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/2851C57C88FF11F1BFED971F4A11F970.roa
Signing time:             Sun 26 Jul 2026 14:34:50 +0000
ROA not before:           Sun 26 Jul 2026 14:34:50 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149438
IP address blocks:        2001:df7:3e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl
                          rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC19D, serialNumber=64B88BF5F6AA9BB1E911766C8DF95AE80F880677
        Validity
            Not Before: Jul 26 14:34:50 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a661b0a-a5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:66:76:ed:5c:f4:ab:a0:b1:8b:ab:b2:72:
                    6e:48:b2:c0:02:fe:90:3b:88:c2:92:3d:85:dc:12:
                    5a:a4:55:ac:2b:4f:50:89:ff:5b:99:aa:c4:8e:16:
                    36:be:f6:73:14:7f:0b:bb:e8:04:69:90:ae:87:67:
                    e6:7d:b2:9f:6b:67:78:b3:6f:e7:19:62:e4:13:43:
                    1a:e9:56:d5:81:52:ba:37:43:c0:04:3c:c9:80:3b:
                    ce:0b:2e:cf:d7:00:dc:ef:78:38:92:da:dd:cb:d4:
                    2a:71:60:a3:03:d4:11:61:51:11:fe:5d:f4:de:bd:
                    2d:61:4d:1d:1e:c5:ee:4e:a9:6d:1c:1d:ec:b5:fa:
                    62:ea:43:98:3d:69:44:29:8c:c8:0f:e7:87:5b:78:
                    c5:b7:0e:3d:b6:68:35:b3:b1:f5:07:27:d5:b9:3d:
                    66:4c:7e:62:a0:72:5e:88:0a:7f:58:36:e7:7e:e7:
                    09:06:8b:b1:0d:ed:e0:ed:47:a8:c1:cf:a7:db:b0:
                    02:1d:75:38:d1:61:8f:25:9f:29:15:be:16:9e:f0:
                    54:1b:9f:ab:fc:93:9c:47:43:12:ca:65:91:11:c3:
                    cd:1a:14:57:d5:a0:f3:a6:b3:72:fe:8d:fe:b5:23:
                    69:73:4d:77:aa:40:54:57:c4:a7:70:ae:a4:8a:25:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:63:92:88:DB:E0:AB:18:2F:67:08:8C:1E:EC:07:FB:7E:22:72:16
            X509v3 Authority Key Identifier:
                keyid:64:B8:8B:F5:F6:AA:9B:B1:E9:11:76:6C:8D:F9:5A:E8:0F:88:06:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/ZLiL9faqm7HpEXZsjfla6A-IBnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLiL9faqm7HpEXZsjfla6A-IBnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC19D/FCEA661A88F811F1B019AE114711F970/2851C57C88FF11F1BFED971F4A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:3e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:0b:49:5c:4d:4c:9b:31:cb:79:9d:49:28:af:b3:be:ef:
         64:8f:06:1c:9d:28:71:93:38:fb:86:47:41:ba:48:bb:5b:e7:
         6d:c3:84:88:1b:3b:37:73:4e:1c:68:6c:1d:09:f0:40:3a:63:
         3a:e6:d0:f4:74:db:a2:6f:d3:1f:a6:80:03:5c:1b:5a:35:8f:
         e7:c4:6a:92:71:1c:d4:f6:c2:51:ec:5a:58:1a:fd:c5:d4:72:
         f5:52:08:9f:7a:e9:48:c7:54:d0:49:61:df:c5:8d:5f:fc:c6:
         25:2a:86:f2:5a:c2:15:5a:59:6a:8a:19:90:55:48:3c:72:af:
         c7:54:4c:36:eb:e3:dc:df:00:6f:7e:0f:66:3f:79:79:0c:be:
         48:7c:52:21:f2:eb:bf:77:ce:f8:d8:34:6a:8d:a7:e6:ea:95:
         10:c8:47:59:1a:38:d1:c7:65:5f:8d:b5:8d:97:7f:a6:c8:14:
         9e:c8:42:4c:7a:e6:d0:59:bb:b0:43:33:6c:e9:0a:99:44:a3:
         09:6d:91:44:c4:26:25:dd:08:42:df:84:46:c5:ab:95:ae:8b:
         4a:50:70:55:c2:01:0a:20:1e:c3:57:e8:36:e4:c1:a2:95:1d:
         ea:a4:4f:cf:34:ed:b2:b5:b9:79:0f:e8:3a:03:a0:33:78:0c:
         92:5f:f4:29
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QzE5RDExMC8GA1UEBRMoNjRCODhCRjVGNkFBOUJCMUU5MTE3NjZDOERGOTVBRTgw
Rjg4MDY3NzAeFw0yNjA3MjYxNDM0NTBaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjYxYjBhLWE1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYLWZ27Vz0q6Cxi6uycm5IssAC/pA7iMKSPYXcElqkVawrT1CJ/1uZqsSOFja+
9nMUfwu76ARpkK6HZ+Z9sp9rZ3izb+cZYuQTQxrpVtWBUro3Q8AEPMmAO84LLs/X
ANzveDiS2t3L1CpxYKMD1BFhURH+XfTevS1hTR0exe5OqW0cHey1+mLqQ5g9aUQp
jMgP54dbeMW3Dj22aDWzsfUHJ9W5PWZMfmKgcl6ICn9YNud+5wkGi7EN7eDtR6jB
z6fbsAIddTjRYY8lnykVvhae8FQbn6v8k5xHQxLKZZERw80aFFfVoPOms3L+jf61
I2lzTXeqQFRXxKdwrqSKJY71AgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUMmOSiNvg
qxgvZwiMHuwH+34ichYwHwYDVR0jBBgwFoAUZLiL9faqm7HpEXZsjfla6A+IBncw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMTlEL0ZDRUE2NjFBODhG
ODExRjFCMDE5QUUxMTQ3MTFGOTcwL1pMaUw5ZmFxbTdIcEVYWnNqZmxhNkEtSUJu
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWkxpTDlmYXFtN0hwRVhac2pmbGE2QS1JQm5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzE5RC9GQ0VBNjYxQTg4RjgxMUYxQjAxOUFFMTE0NzExRjk3MC8yODUxQzU3Qzg4
RkYxMUYxQkZFRDk3MUY0QTExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ33PkAwDQYJKoZIhvcNAQELBQADggEBAE/bC0lcTUybMct5nUko
r7O+72SPBhydKHGTOPuGR0G6SLtb523DhIgbOzdzThxobB0J8EA6Yzrm0PR026Jv
0x+mgANcG1o1j+fEapJxHNT2wlHsWlga/cXUcvVSCJ966UjHVNBJYd/FjV/8xiUq
hvJawhVaWWqKGZBVSDxyr8dUTDbr49zfAG9+D2Y/eXkMvkh8UiHy6793zvjYNGqN
p+bqlRDIR1kaONHHZV+NtY2Xf6bIFJ7IQkx65tBZu7BDM2zpCplEowltkUTEJiXd
CELfhEbFq5Wui0pQcFXCAQogHsNX6DbkwaKVHeqkT8807bK1uXkP6DoDoDN4DJJf
9Ck=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:47:46 2026 by rpki-client