Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa
File:                     616435103F3E11EE81024074C4F9AE02.roa (raw, json)
Hash identifier:          RPBpq6pUKXuiXspqzFcOxMTbzxPwV16I7ZgS65QCiX0=
Subject key identifier:   4C:A3:FE:86:E1:EA:93:F8:D5:23:32:9C:74:A9:70:C7:F9:7C:ED:D3
Certificate issuer:       /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial:       04BF
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa
Signing time:             Thu 12 Feb 2026 23:20:13 +0000
ROA not before:           Thu 12 Feb 2026 23:20:13 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     9312
IP address blocks:        2400:8d60:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
        Validity
            Not Before: Feb 12 23:20:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698e602d-5eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:3a:6c:a6:8a:92:54:7e:0c:36:82:9b:0c:
                    94:66:5e:12:1a:7c:67:2a:21:7c:75:69:9c:17:18:
                    2c:a8:57:a0:6f:27:36:60:7e:e4:75:e7:1e:1c:81:
                    36:31:84:8f:2d:02:bd:d9:f2:8b:c8:0b:c3:be:f5:
                    b9:a9:d1:3e:a1:29:50:56:89:4a:ba:5f:bc:9a:b3:
                    d8:32:4a:94:38:f6:e9:1c:5d:16:c5:cd:93:6f:fc:
                    75:02:55:36:a9:25:1b:c4:40:ed:b9:df:71:a6:b8:
                    2f:dc:7c:d0:e0:17:7b:74:44:99:6f:47:7a:5f:c6:
                    37:55:69:0b:8d:05:d6:3b:f9:c6:1f:d4:48:63:46:
                    1e:54:36:09:a4:32:9e:84:79:19:c5:5c:66:ce:bd:
                    21:0e:90:b2:a7:33:14:c1:7b:d8:22:94:4a:3e:2d:
                    d8:68:59:c6:9c:50:9b:22:92:30:7f:e3:b7:6b:2e:
                    5a:69:e6:3f:73:59:0e:1a:0d:75:d7:3b:e1:27:af:
                    5a:a5:60:5a:9a:7c:fd:e9:58:94:9f:88:cc:f5:6a:
                    ca:ea:09:89:e0:0d:34:3d:8a:12:c8:b6:d4:37:eb:
                    90:ee:69:f4:9f:7a:e2:e3:65:e7:00:4a:9d:a4:90:
                    17:20:1f:ee:e1:49:84:40:ae:c2:6f:b7:48:d3:6d:
                    18:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A3:FE:86:E1:EA:93:F8:D5:23:32:9C:74:A9:70:C7:F9:7C:ED:D3
            X509v3 Authority Key Identifier:
                keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8d60:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:78:aa:9c:99:42:17:11:a0:db:b2:0e:ab:8b:d7:5e:c6:d2:
         dd:e5:99:29:4c:bc:c1:f7:67:14:94:dd:c9:af:62:30:62:82:
         ab:90:57:04:bc:06:a4:ef:0b:e5:52:54:f6:79:e5:8c:3d:a4:
         2a:de:21:60:a7:24:ed:e4:db:98:6b:c8:0c:1d:0a:f4:97:88:
         41:d6:3a:b5:96:41:ce:33:97:c0:6b:13:b5:e0:9f:7c:f6:d3:
         c7:05:d8:b6:1f:b8:5c:a7:75:1b:49:19:b4:fa:79:01:b2:b1:
         cd:43:2b:7d:17:69:05:25:43:80:d4:37:32:c9:66:21:33:46:
         a8:40:2d:74:a1:75:c6:e8:08:c1:0f:cb:07:cd:ea:d9:22:cb:
         be:36:8f:9a:4c:47:d6:9c:37:72:bc:db:92:7e:22:4c:52:2c:
         74:88:4e:03:bc:6b:ec:ad:79:94:50:05:32:dc:e2:a4:a6:d3:
         b1:9c:ff:71:c7:41:82:6b:e4:72:e1:0b:0b:bb:db:87:12:65:
         a2:70:5e:f2:c0:5c:96:4a:9a:85:1b:4a:a5:42:b2:aa:69:26:
         72:05:08:78:c9:95:cd:7c:ef:79:e5:68:ac:4c:25:19:40:da:
         50:59:68:54:eb:b7:91:a2:c7:76:8d:af:1a:c1:7d:1e:39:a1:
         26:46:2d:8d
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RkRBRDQxMTAvBgNVBAUTKDU0MzBBNDE0QUEwNUI2NzMxREMyRDY0QTcwQzYxOUM2
NjkzNDZBMEUwHhcNMjYwMjEyMjMyMDEzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OThlNjAyZC01ZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDg6bKaKklR+DDaCmwyUZl4SGnxnKiF8dWmcFxgsqFegbyc2YH7kdeceHIE2
MYSPLQK92fKLyAvDvvW5qdE+oSlQVolKul+8mrPYMkqUOPbpHF0Wxc2Tb/x1AlU2
qSUbxEDtud9xprgv3HzQ4Bd7dESZb0d6X8Y3VWkLjQXWO/nGH9RIY0YeVDYJpDKe
hHkZxVxmzr0hDpCypzMUwXvYIpRKPi3YaFnGnFCbIpIwf+O3ay5aaeY/c1kOGg11
1zvhJ69apWBamnz96ViUn4jM9WrK6gmJ4A00PYoSyLbUN+uQ7mn0n3ri42XnAEqd
pJAXIB/u4UmEQK7Cb7dI020YrQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFEyj/obh
6pP41SMynHSpcMf5fO3TMB8GA1UdIwQYMBaAFFQwpBSqBbZzHcLWSnDGGcZpNGoO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREFENC9DNDIzMTgzMDc3
QjUxMUVDQTVCQ0UwNUZDNEY5QUUwMi9WRENrRktvRnRuTWR3dFpLY01ZWnhtazBh
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZEQ2tGS29GdG5NZHd0WktjTVlaeG1rMGFnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkRBRDQvQzQyMzE4MzA3N0I1MTFFQ0E1QkNFMDVGQzRGOUFFMDIvNjE2NDM1MTAz
RjNFMTFFRTgxMDI0MDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAkAI1gAAYwDQYJKoZIhvcNAQELBQADggEBAIZ4qpyZQhcR
oNuyDquL117G0t3lmSlMvMH3ZxSU3cmvYjBigquQVwS8BqTvC+VSVPZ55Yw9pCre
IWCnJO3k25hryAwdCvSXiEHWOrWWQc4zl8BrE7Xgn3z208cF2LYfuFyndRtJGbT6
eQGysc1DK30XaQUlQ4DUNzLJZiEzRqhALXShdcboCMEPywfN6tkiy742j5pMR9ac
N3K825J+IkxSLHSITgO8a+yteZRQBTLc4qSm07Gc/3HHQYJr5HLhCwu724cSZaJw
XvLAXJZKmoUbSqVCsqppJnIFCHjJlc1873nlaKxMJRlA2lBZaFTrt5Gix3aNrxrB
fR45oSZGLY0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:39 2026 by rpki-client