Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D1BB843283EF11F19876B2478FA30FBC.roa
File:                     D1BB843283EF11F19876B2478FA30FBC.roa (raw, json)
Hash identifier:          Iqko61/IVZXFY/QdiuIQoq258CHY4Co+rBS9CebY9pA=
Subject key identifier:   78:2F:8D:70:7F:A6:A3:8A:38:69:E7:D8:3C:DE:4C:1B:1E:77:00:93
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C4C
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D1BB843283EF11F19876B2478FA30FBC.roa
Signing time:             Mon 20 Jul 2026 04:02:26 +0000
ROA not before:           Mon 20 Jul 2026 04:02:26 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     396986
IP address blocks:        2001:fb0:1056::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15436 (0x3c4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 20 04:02:26 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5d9dd2-5baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:02:b2:de:5f:b3:6e:79:0f:a0:5b:7a:5b:52:
                    2a:ae:31:c0:2e:9d:33:d4:0c:c0:4b:37:2f:7d:a1:
                    ab:60:17:5c:60:9c:09:31:40:46:9d:bd:3d:92:9e:
                    c2:98:ef:da:26:a3:0b:8c:98:b9:94:93:63:53:23:
                    87:d4:27:16:80:ee:6c:b6:e6:e0:3e:c3:12:09:6f:
                    5d:bb:04:01:96:0d:76:02:07:a6:80:f2:9c:c4:19:
                    61:0f:43:05:74:52:e8:1d:de:45:bf:89:20:3e:8d:
                    47:78:eb:91:22:ba:8a:3c:06:13:cf:0c:0f:69:56:
                    f7:03:06:ee:a5:3b:e9:fc:99:de:1a:30:28:5f:11:
                    11:c4:35:f8:b5:e6:6d:ad:fe:e5:87:f7:0b:a9:34:
                    9c:92:0f:6e:4b:f9:5b:4c:b8:36:20:b7:c3:72:36:
                    f2:1d:f1:73:91:e9:52:40:7a:d9:3c:d4:1a:63:eb:
                    e7:2c:a2:1b:3f:79:c1:b1:b1:c5:94:90:41:24:8f:
                    a5:8c:d2:4f:69:c3:a1:d1:ea:e1:b3:ee:5f:34:20:
                    6d:94:da:5e:31:4c:ae:7b:ca:de:a6:cf:37:d5:3f:
                    a4:43:01:4c:c2:92:89:b6:d2:7a:57:34:c3:40:6c:
                    36:c3:46:84:ac:ef:4b:78:69:b4:e7:10:58:7d:f6:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2F:8D:70:7F:A6:A3:8A:38:69:E7:D8:3C:DE:4C:1B:1E:77:00:93
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D1BB843283EF11F19876B2478FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fb0:1056::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:90:91:d0:49:88:84:0c:b5:22:44:d8:8d:6d:82:d0:05:d5:
         45:7c:50:d2:4b:fd:ea:ac:86:37:ce:ea:3d:77:35:b5:a7:d2:
         5b:38:15:90:03:3f:66:c0:20:8f:f2:f9:be:a7:a2:7c:08:93:
         d7:1d:e3:a3:11:7f:84:96:db:9a:7a:75:14:0a:30:20:17:2f:
         86:4f:9b:73:99:01:42:a4:0a:fc:2e:bf:dd:f1:dd:8c:90:44:
         a7:5a:3f:a5:09:6d:da:a1:79:7a:ec:46:79:df:95:bb:72:40:
         a6:5c:a9:a6:fd:72:21:20:4b:4a:b6:db:3a:1a:61:f5:5f:83:
         64:4e:86:6b:34:47:21:7c:a8:0d:15:65:2f:8a:0d:aa:b4:3c:
         5c:9a:f2:7e:d3:c8:99:30:3f:37:92:62:a2:b0:ac:34:ac:68:
         6d:0b:10:9e:39:11:94:4a:ae:b8:31:7e:e7:0b:02:58:8e:96:
         78:07:ba:2d:ed:c5:51:d6:0a:0c:35:aa:26:c2:87:96:b6:23:
         01:f3:6b:c4:93:54:be:6a:ad:1c:87:c7:3d:87:29:3e:dc:ec:
         7b:db:1c:8f:b1:75:8f:2c:d5:00:a8:9c:23:ed:51:9c:ff:dc:
         89:14:28:05:37:f4:4e:e1:76:c2:56:92:4e:a7:c6:ac:4a:87:
         6d:c2:aa:13
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICPEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzIwMDQwMjI2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVkOWRkMi01YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7wKy3l+zbnkPoFt6W1IqrjHALp0z1AzASzcvfaGrYBdcYJwJMUBGnb09kp7C
mO/aJqMLjJi5lJNjUyOH1CcWgO5stubgPsMSCW9duwQBlg12AgemgPKcxBlhD0MF
dFLoHd5Fv4kgPo1HeOuRIrqKPAYTzwwPaVb3AwbupTvp/JneGjAoXxERxDX4teZt
rf7lh/cLqTSckg9uS/lbTLg2ILfDcjbyHfFzkelSQHrZPNQaY+vnLKIbP3nBsbHF
lJBBJI+ljNJPacOh0erhs+5fNCBtlNpeMUyue8reps831T+kQwFMwpKJttJ6VzTD
QGw2w0aErO9LeGm05xBYffYNmwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHgvjXB/
pqOKOGnn2DzeTBsedwCTMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRDFCQjg0MzI4
M0VGMTFGMTk4NzZCMjQ3OEZBMzBGQkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEPsBBWMA0GCSqGSIb3DQEBCwUAA4IBAQBXkJHQSYiEDLUiRNiN
bYLQBdVFfFDSS/3qrIY3zuo9dzW1p9JbOBWQAz9mwCCP8vm+p6J8CJPXHeOjEX+E
ltuaenUUCjAgFy+GT5tzmQFCpAr8Lr/d8d2MkESnWj+lCW3aoXl67EZ535W7ckCm
XKmm/XIhIEtKtts6GmH1X4NkToZrNEchfKgNFWUvig2qtDxcmvJ+08iZMD83kmKi
sKw0rGhtCxCeORGUSq64MX7nCwJYjpZ4B7ot7cVR1goMNaomwoeWtiMB82vEk1S+
aq0ch8c9hyk+3Ox72xyPsXWPLNUAqJwj7VGc/9yJFCgFN/RO4XbCVpJOp8asSodt
wqoT
-----END CERTIFICATE-----
Generated at Wed Jul 22 21:17:20 2026 by rpki-client