Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/FBE34DB8538011EFB6264579C4F9AE02.roa
File:                     FBE34DB8538011EFB6264579C4F9AE02.roa (raw, json)
Hash identifier:          gBOyi1bv9JZROlSSUh5zxb+6JgSI5ciGNfmC+EELzuM=
Subject key identifier:   1C:A0:E2:3B:46:55:1B:84:EF:37:E3:B2:5B:A4:69:C8:69:96:B2:B5
Certificate issuer:       /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial:       01F7
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/FBE34DB8538011EFB6264579C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:08:43 +0000
ROA not before:           Tue 07 Oct 2025 04:00:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        2401:fa00:8000::/34 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
        Validity
            Not Before: Oct  7 04:00:50 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4567a-f055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:f9:dd:6c:db:b4:e1:48:56:31:3c:8e:e8:
                    bb:df:90:29:9f:7f:f0:97:ed:1f:a7:c7:68:3f:fc:
                    b6:4f:33:45:59:9c:70:5f:f5:bb:d3:dc:4c:54:69:
                    66:25:6c:e2:f4:6d:d8:80:5d:b3:f6:f5:90:bb:11:
                    39:2a:65:b0:b1:74:2b:45:16:ad:38:7e:b8:d5:49:
                    cf:07:95:53:5e:14:32:de:03:85:e8:7c:8b:d1:7f:
                    54:06:d6:df:04:e6:47:b2:2e:d7:e1:a6:8a:b9:be:
                    14:69:90:da:3a:8c:ff:51:16:b1:d7:51:7b:ac:7d:
                    52:a9:b5:06:7b:09:a5:b7:f4:51:f5:0b:1c:8b:c0:
                    5e:14:16:05:8d:00:2f:bf:31:06:34:29:2e:28:b6:
                    95:9e:99:8e:26:d1:f6:be:05:6f:5b:9b:d7:b7:c4:
                    24:2a:f0:0d:2c:00:76:56:5d:0c:66:c5:27:cd:66:
                    6c:4f:93:e0:a6:66:25:59:bd:45:23:18:3a:6a:ed:
                    8c:19:33:60:98:b3:d5:5b:34:bb:dc:bd:b3:51:73:
                    2c:da:14:40:98:da:78:ea:f4:55:75:21:b9:0b:24:
                    4b:63:75:5a:92:40:d9:7b:e6:48:93:ce:1d:06:b5:
                    e8:f0:6e:51:e3:12:9d:9e:bc:11:db:e0:c9:79:18:
                    e8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A0:E2:3B:46:55:1B:84:EF:37:E3:B2:5B:A4:69:C8:69:96:B2:B5
            X509v3 Authority Key Identifier:
                keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/FBE34DB8538011EFB6264579C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:fa00:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:b3:d5:2b:6a:8e:d1:0f:8c:ae:40:d2:b9:29:83:ed:5e:65:
         03:2b:d5:7e:f3:ab:33:26:e6:d1:f9:dc:42:59:a5:09:fc:53:
         20:f2:12:a3:d1:57:3f:7c:64:06:13:e3:2c:95:b4:55:03:45:
         bd:52:7e:06:ec:23:c0:37:a6:4c:26:43:f2:be:7f:0b:dd:61:
         5e:aa:c4:32:91:05:8c:ca:ae:b0:fb:42:6f:bc:a3:aa:af:81:
         29:f2:41:86:cb:83:97:03:f6:ca:c0:fa:62:d5:fc:7f:5d:14:
         02:12:fa:6d:4c:cc:73:d2:97:e8:bf:21:01:b4:78:cf:e5:23:
         3b:6a:b5:f5:c4:39:90:e2:b4:d0:47:38:e4:42:84:e0:d9:ad:
         20:c9:51:9b:50:c9:59:45:ca:98:25:7d:54:10:96:ef:04:9f:
         01:1f:7c:67:4c:e1:2a:a8:0a:5d:2d:b1:0e:54:ea:d3:40:bb:
         c7:9b:51:7c:a4:7f:13:8f:c3:b1:95:d2:9e:97:13:89:06:52:
         f9:18:2e:b5:92:88:b1:20:6a:3b:89:2b:c9:87:d8:91:1a:95:
         25:0b:ab:78:36:b0:07:30:07:28:df:b6:da:9c:ae:54:05:c4:
         ed:99:57:da:b8:fa:56:e4:b2:7a:b4:3d:f0:dc:7d:26:29:1c:
         06:e2:8c:18
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE
RjAzRDcyNDcwHhcNMjUxMDA3MDQwMDUwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTY3YS1mMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw5T53WzbtOFIVjE8jui735Apn3/wl+0fp8doP/y2TzNFWZxwX/W709xMVGlm
JWzi9G3YgF2z9vWQuxE5KmWwsXQrRRatOH641UnPB5VTXhQy3gOF6HyL0X9UBtbf
BOZHsi7X4aaKub4UaZDaOoz/URax11F7rH1SqbUGewmlt/RR9Qsci8BeFBYFjQAv
vzEGNCkuKLaVnpmOJtH2vgVvW5vXt8QkKvANLAB2Vl0MZsUnzWZsT5PgpmYlWb1F
Ixg6au2MGTNgmLPVWzS73L2zUXMs2hRAmNp46vRVdSG5CyRLY3VakkDZe+ZIk84d
BrXo8G5R4xKdnrwR2+DJeRjoTQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFByg4jtG
VRuE7zfjslukachplrK1MB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw
MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEOTIvMzU3Nzk4QjA0MDJBMTFFRUE3MTYxODcyQzRGOUFFMDIvRkJFMzREQjg1
MzgwMTFFRkI2MjY0NTc5QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYGJAH6AIAwDQYJKoZIhvcNAQELBQADggEBAAuz1StqjtEPjK5A0rkp
g+1eZQMr1X7zqzMm5tH53EJZpQn8UyDyEqPRVz98ZAYT4yyVtFUDRb1SfgbsI8A3
pkwmQ/K+fwvdYV6qxDKRBYzKrrD7Qm+8o6qvgSnyQYbLg5cD9srA+mLV/H9dFAIS
+m1MzHPSl+i/IQG0eM/lIztqtfXEOZDitNBHOORChODZrSDJUZtQyVlFypglfVQQ
lu8EnwEffGdM4SqoCl0tsQ5U6tNAu8ebUXykfxOPw7GV0p6XE4kGUvkYLrWSiLEg
ajuJK8mH2JEalSULq3g2sAcwByjfttqcrlQFxO2ZV9q4+lbksnq0PfDcfSYpHAbi
jBg=
-----END CERTIFICATE-----
Generated at Thu Mar 19 13:29:16 2026 by rpki-client