Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F6614AC07FB111F19D00DEEB7BA30FBC.roa
File:                     F6614AC07FB111F19D00DEEB7BA30FBC.roa (raw, json)
Hash identifier:          6zY2IeIzcfv9Kbu03NvmhkQ4iVBl8UBWE4QD85FsWvQ=
Subject key identifier:   B5:6B:A8:8D:07:53:54:69:A9:FF:5A:97:03:18:45:FF:85:33:6D:36
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2C5D
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F6614AC07FB111F19D00DEEB7BA30FBC.roa
Signing time:             Tue 14 Jul 2026 18:29:34 +0000
ROA not before:           Tue 14 Jul 2026 18:29:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154324
IP address blocks:        2405:9800:ca12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11357 (0x2c5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jul 14 18:29:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a56800e-3f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a3:0a:68:93:39:07:41:15:44:42:a1:53:e1:
                    db:65:bc:1f:08:ce:be:35:c5:f0:3e:31:0d:2b:1b:
                    2c:09:ad:a0:aa:ff:00:be:11:82:69:07:50:d6:ad:
                    3f:0e:ba:36:f5:91:35:50:10:41:ad:90:93:2b:0e:
                    01:a1:25:c1:8a:8b:66:64:96:b1:4f:80:eb:55:62:
                    6c:46:e6:a1:2d:e0:b1:66:e3:26:dc:50:be:74:d2:
                    93:27:4a:74:3a:d1:d5:94:a8:51:81:db:ca:a6:3d:
                    e1:f9:4d:6d:8a:ad:2e:6b:b1:90:92:05:a8:33:a5:
                    e7:06:47:21:d4:2d:8e:df:c5:46:47:63:b9:34:93:
                    ce:09:dd:e3:a2:69:f9:41:2a:1f:d3:d7:ea:10:5e:
                    65:36:a6:74:fa:f6:fc:ab:3b:b6:9c:ca:db:6a:78:
                    da:08:e6:cc:a5:4a:47:53:e2:d8:1e:0d:ee:83:7c:
                    3f:59:00:a7:d4:f0:13:a5:46:a4:cc:dd:50:d4:ce:
                    df:cb:96:67:87:4e:ba:38:4f:58:a9:cd:f1:bd:ea:
                    9d:ec:33:a7:67:7b:eb:fa:61:61:6c:b9:92:86:aa:
                    de:6d:57:00:d6:67:fe:b2:16:21:53:57:42:5e:b9:
                    82:26:a8:94:90:57:eb:18:e0:da:ed:b2:97:e2:cb:
                    d9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:A8:8D:07:53:54:69:A9:FF:5A:97:03:18:45:FF:85:33:6D:36
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/F6614AC07FB111F19D00DEEB7BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9800:ca12::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:72:ac:f5:1c:f4:11:85:d8:47:e8:c2:46:e8:2b:65:3a:87:
         e6:bd:92:77:54:73:fe:b8:2a:f6:45:de:5b:8c:ce:15:0d:37:
         0c:3f:bf:ce:4c:64:59:dd:26:1a:98:d9:ac:be:be:e4:e6:93:
         a6:1e:5c:60:ec:bc:a4:5f:87:f2:a5:05:c0:34:f0:d8:3b:90:
         9b:44:18:da:d2:78:f7:29:59:64:fd:5a:5f:f2:ec:d0:fa:06:
         ed:61:4a:e7:e0:a8:a2:f2:47:c9:70:cd:41:9b:70:41:53:71:
         07:d0:a1:df:96:0d:56:42:1a:97:c7:a5:76:79:84:cd:ec:01:
         04:56:ee:e6:03:36:34:d0:60:4c:0c:3c:ba:8b:1c:50:f4:83:
         33:b2:b2:30:b5:94:97:75:d8:ea:74:69:0c:1d:9d:ef:86:8d:
         33:87:a6:04:3a:a9:fc:4d:d6:d6:73:d4:1a:be:57:2d:3e:63:
         41:82:95:4a:6b:40:4c:f8:1c:92:a2:6a:4c:87:76:82:4a:2c:
         7d:b7:1d:a6:f5:c5:7f:02:9f:f0:f9:ff:27:62:77:0a:c6:29:
         5d:58:80:b8:0f:47:f9:6b:a8:f7:05:40:82:3c:02:55:9e:27:
         d7:dd:fe:c6:b6:e2:2d:13:24:18:4e:80:9d:15:ec:16:75:4b:
         e8:a4:6e:20
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICLF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwNzE0MTgyOTM0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU2ODAwZS0zZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6aMKaJM5B0EVREKhU+HbZbwfCM6+NcXwPjENKxssCa2gqv8AvhGCaQdQ1q0/
Dro29ZE1UBBBrZCTKw4BoSXBiotmZJaxT4DrVWJsRuahLeCxZuMm3FC+dNKTJ0p0
OtHVlKhRgdvKpj3h+U1tiq0ua7GQkgWoM6XnBkch1C2O38VGR2O5NJPOCd3jomn5
QSof09fqEF5lNqZ0+vb8qzu2nMrbanjaCObMpUpHU+LYHg3ug3w/WQCn1PATpUak
zN1Q1M7fy5Znh066OE9Yqc3xveqd7DOnZ3vr+mFhbLmShqrebVcA1mf+shYhU1dC
XrmCJqiUkFfrGODa7bKX4svZlQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFLVrqI0H
U1Rpqf9alwMYRf+FM202MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRjY2MTRBQzA3
RkIxMTFGMTlEMDBERUVCN0JBMzBGQkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAWYAMoSMA0GCSqGSIb3DQEBCwUAA4IBAQDAcqz1HPQRhdhH6MJG
6CtlOofmvZJ3VHP+uCr2Rd5bjM4VDTcMP7/OTGRZ3SYamNmsvr7k5pOmHlxg7Lyk
X4fypQXANPDYO5CbRBja0nj3KVlk/Vpf8uzQ+gbtYUrn4Kii8kfJcM1Bm3BBU3EH
0KHflg1WQhqXx6V2eYTN7AEEVu7mAzY00GBMDDy6ixxQ9IMzsrIwtZSXddjqdGkM
HZ3vho0zh6YEOqn8TdbWc9QavlctPmNBgpVKa0BM+BySompMh3aCSix9tx2m9cV/
Ap/w+f8nYncKxildWIC4D0f5a6j3BUCCPAJVnifX3f7GtuItEyQYToCdFewWdUvo
pG4g
-----END CERTIFICATE-----
Generated at Tue Jul 21 16:40:19 2026 by rpki-client