Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa
File:                     6DAFB1EAEA7E11EF93A91726C4F9AE02.roa (raw, json)
Hash identifier:          R/A26YpYyRkyxcMhqlO+0e6c4yWzwg0UkoqcC9MSJ/Y=
Subject key identifier:   6E:C8:11:DD:FE:0C:52:B4:47:E0:E6:DD:1B:AF:BC:31:4A:E9:4E:23
Certificate issuer:       /CN=A912F62D/serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
Certificate serial:       0129
Authority key identifier: 54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa
Signing time:             Mon 31 Aug 2026 02:24:38 +0000
ROA not before:           Mon 31 Aug 2026 02:24:38 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        203.31.96.0/24 maxlen: 24
                          2001:df4:32c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl
                          rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 05:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F62D, serialNumber=5492462105CEB052DBA9DAE8BB635F05F777161D
        Validity
            Not Before: Aug 31 02:24:38 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a94e5e6-ae7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:f7:b7:75:1c:a3:e4:f6:40:ee:fe:15:ed:
                    d3:df:94:16:87:88:92:dc:5a:5a:f4:e9:71:14:b9:
                    d3:d3:e6:e8:ec:8e:54:4f:49:a4:89:e1:74:f4:99:
                    8e:47:ca:75:b4:1e:d5:49:ae:85:e3:c0:7c:bf:ba:
                    f1:6a:d2:af:22:7f:f8:48:df:d1:58:50:0d:ab:90:
                    e5:b6:71:08:31:a2:53:7a:03:db:15:76:41:d1:75:
                    9f:d6:b9:ff:59:5b:b5:cb:70:d1:d7:b1:d0:09:a0:
                    2d:66:65:9a:93:1d:c4:86:e8:7a:a7:f1:30:4e:93:
                    e3:48:e9:9c:ac:b0:f2:e5:77:af:44:63:45:dc:c1:
                    ea:e8:6f:6b:0a:11:50:f6:3c:35:cc:7c:7c:75:c5:
                    5a:f6:51:57:b6:3c:5e:8d:1b:40:82:28:6a:60:47:
                    e9:cf:f7:1e:ad:ba:f9:13:03:70:44:d0:ed:31:f2:
                    b6:2c:01:85:43:ba:5e:49:2e:a7:d7:ff:c3:82:1e:
                    5c:5f:f8:17:d2:e5:13:74:e2:9f:f1:36:69:75:bb:
                    07:ef:13:d7:78:e2:b5:5a:9a:53:0c:7a:f3:ea:64:
                    19:2a:02:ae:7b:72:37:77:74:12:e4:28:48:94:e2:
                    bb:54:fa:50:f4:d1:2e:77:27:63:b0:43:bf:3b:0b:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C8:11:DD:FE:0C:52:B4:47:E0:E6:DD:1B:AF:BC:31:4A:E9:4E:23
            X509v3 Authority Key Identifier:
                keyid:54:92:46:21:05:CE:B0:52:DB:A9:DA:E8:BB:63:5F:05:F7:77:16:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/VJJGIQXOsFLbqdrou2NfBfd3Fh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJJGIQXOsFLbqdrou2NfBfd3Fh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F62D/2DA57C3CEA7011EF8154C36BC4F9AE02/6DAFB1EAEA7E11EF93A91726C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.31.96.0/24
                IPv6:
                  2001:df4:32c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:dd:62:e7:9c:9b:cc:95:50:d1:d5:84:11:cb:ed:8f:1d:
         99:19:df:cf:62:bb:65:1d:ad:46:69:76:40:70:83:ea:58:92:
         b3:2a:16:de:37:60:0e:a2:00:a9:96:1e:90:93:56:a8:38:f2:
         69:79:70:b9:25:b6:b6:be:71:94:e8:c6:c5:6c:c8:5a:46:f1:
         01:93:7a:1e:27:f6:b5:5b:5b:05:78:81:fe:0d:fa:7b:b7:5a:
         d1:a6:6f:9d:18:03:69:a6:37:85:bb:b3:d8:f9:48:45:d7:4c:
         9e:0b:4a:29:58:39:4d:f0:40:cc:34:3c:b1:fa:3c:ab:ca:89:
         1a:6b:f9:f7:5c:ce:e4:88:ce:ee:e7:05:f3:fc:5d:57:5f:50:
         54:87:18:e2:e5:80:a7:7f:e7:88:e4:9c:ab:54:dd:63:78:b3:
         10:ee:b9:36:e2:9b:57:4d:a3:65:fa:3b:df:86:bd:c5:c0:34:
         c3:b4:81:54:9b:3f:fc:51:5a:54:a7:7b:8a:e6:f0:1c:82:96:
         bd:d2:82:3f:26:d0:b8:08:36:2f:89:13:26:24:62:cb:29:67:
         7a:a2:8d:4d:f1:5e:e8:8a:cb:ff:bf:5a:9e:67:91:48:35:aa:
         cc:4e:8b:8e:6a:87:5a:61:b0:cd:5f:b0:73:11:e6:fa:3f:d3:
         2e:79:3e:f2
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY2MkQxMTAvBgNVBAUTKDU0OTI0NjIxMDVDRUIwNTJEQkE5REFFOEJCNjM1RjA1
Rjc3NzE2MUQwHhcNMjYwODMxMDIyNDM4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0ZTVlNi1hZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvCX3t3Uco+T2QO7+Fe3T35QWh4iS3Fpa9OlxFLnT0+bo7I5UT0mkieF09JmO
R8p1tB7VSa6F48B8v7rxatKvIn/4SN/RWFANq5DltnEIMaJTegPbFXZB0XWf1rn/
WVu1y3DR17HQCaAtZmWakx3Ehuh6p/EwTpPjSOmcrLDy5XevRGNF3MHq6G9rChFQ
9jw1zHx8dcVa9lFXtjxejRtAgihqYEfpz/cerbr5EwNwRNDtMfK2LAGFQ7peSS6n
1//Dgh5cX/gX0uUTdOKf8TZpdbsH7xPXeOK1WppTDHrz6mQZKgKue3I3d3QS5ChI
lOK7VPpQ9NEudydjsEO/OwunfQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFG7IEd3+
DFK0R+Dm3RuvvDFK6U4jMB8GA1UdIwQYMBaAFFSSRiEFzrBS26na6LtjXwX3dxYd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjYyRC8yREE1N0MzQ0VB
NzAxMUVGODE1NEMzNkJDNEY5QUUwMi9WSkpHSVFYT3NGTGJxZHJvdTJOZkJmZDNG
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZKSkdJUVhPc0ZMYnFkcm91Mk5mQmZkM0ZoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY2MkQvMkRBNTdDM0NFQTcwMTFFRjgxNTRDMzZCQzRGOUFFMDIvNkRBRkIxRUFF
QTdFMTFFRjkzQTkxNzI2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAyx9gMA8EAgACMAkDBwAgAQ30MsAwDQYJKoZIhvcNAQELBQADggEB
AD9d3WLnnJvMlVDR1YQRy+2PHZkZ389iu2UdrUZpdkBwg+pYkrMqFt43YA6iAKmW
HpCTVqg48ml5cLkltra+cZToxsVsyFpG8QGTeh4n9rVbWwV4gf4N+nu3WtGmb50Y
A2mmN4W7s9j5SEXXTJ4LSilYOU3wQMw0PLH6PKvKiRpr+fdczuSIzu7nBfP8XVdf
UFSHGOLlgKd/54jknKtU3WN4sxDuuTbim1dNo2X6O9+GvcXANMO0gVSbP/xRWlSn
e4rm8ByClr3Sgj8m0LgINi+JEyYkYsspZ3qijU3xXuiKy/+/Wp5nkUg1qsxOi45q
h1phsM1fsHMR5vo/0y55PvI=
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:00:53 2026 by rpki-client