Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa
File:                     4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa (raw, json)
Hash identifier:          p+BwKAodmJqbLlqXyZtD+mJHN7NUdRLLCP8+RPEq8R4=
Subject key identifier:   0B:AA:B6:8D:80:9B:BF:8E:30:F4:30:12:40:66:D8:C3:B0:C8:D6:33
Certificate issuer:       /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial:       04F9
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa
Signing time:             Sun 01 Mar 2026 18:07:59 +0000
ROA not before:           Sat 21 Feb 2026 15:45:06 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     10753
IP address blocks:        2400:8a20:1b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
                          rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 23:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
        Validity
            Not Before: Feb 21 15:45:06 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4807f-de54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:87:5a:95:36:04:ee:39:74:42:a5:4d:41:
                    cf:d5:65:01:e4:f0:03:49:06:fd:c8:16:3d:11:8a:
                    44:38:9a:0d:ea:97:2a:ea:db:ac:25:5b:8d:3e:59:
                    e4:9e:7f:39:15:75:02:94:d3:72:c9:03:b0:1f:47:
                    f7:fa:cb:43:2c:66:8f:b9:b6:72:08:d8:15:20:e5:
                    36:86:52:4f:fa:01:4f:33:b2:0c:ca:4a:25:6d:e5:
                    1f:99:5c:53:47:a1:64:0a:bb:a1:68:8b:88:24:1a:
                    8a:e4:2a:59:2a:10:30:12:26:40:4a:d3:80:d3:17:
                    b9:65:68:cd:f0:cb:7c:da:6c:f0:8a:a7:83:67:6c:
                    b7:ee:ae:c8:4c:a2:7d:52:39:7a:f5:87:27:6d:3d:
                    74:0a:a8:82:cc:36:c9:a1:71:27:37:bc:d8:c6:f5:
                    d6:8d:f1:87:20:04:bf:c5:f9:b4:68:a0:fd:ee:8a:
                    05:aa:a1:11:15:3e:44:12:bc:93:31:94:48:fe:1c:
                    cb:35:e2:23:a0:ce:f2:7b:cf:fe:b3:37:b6:95:7e:
                    69:7a:5c:f7:9d:ef:ee:ed:62:03:f6:39:90:bf:db:
                    90:8e:3c:82:a4:78:68:65:e1:60:0e:96:1e:a7:5f:
                    c6:d1:4d:d8:1e:b6:92:a5:95:f7:89:61:dc:2a:d0:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:B6:8D:80:9B:BF:8E:30:F4:30:12:40:66:D8:C3:B0:C8:D6:33
            X509v3 Authority Key Identifier:
                keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/4B44D6EC0F3C11F1BF24A2AC1C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8a20:1b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:92:60:26:9b:f4:ea:f8:2e:dc:85:79:90:22:7b:29:cd:
         ab:35:e1:2b:8e:91:5f:16:46:e7:27:9b:e9:fe:2b:d2:b5:d1:
         0c:35:e8:14:4e:a5:b6:3b:fe:e5:ed:ca:fb:8b:94:6f:50:85:
         65:60:73:88:cf:8d:a7:34:eb:81:47:62:2c:f5:f0:5c:00:de:
         29:33:ef:79:6c:e0:9f:7a:31:53:04:63:60:71:39:a8:e1:42:
         e5:97:9a:2f:e9:26:49:64:5d:99:81:49:46:4f:0b:17:96:0a:
         03:cc:36:d4:92:60:ad:e6:23:9b:1f:a7:9c:2b:82:f2:14:f3:
         9e:1d:a3:da:f5:26:9b:ca:6f:88:93:aa:5a:57:67:1c:c1:7f:
         1f:36:98:93:f9:d9:3d:4d:7b:38:fe:66:47:fa:5c:4d:80:e9:
         bc:59:b9:a3:04:1b:4c:44:65:a4:df:41:3d:70:12:1e:29:01:
         92:15:c5:bf:af:48:98:50:ec:b0:4f:e5:6c:d2:01:79:fd:b4:
         92:2d:74:74:d5:59:37:10:4d:80:eb:9e:6d:0f:83:86:46:f7:
         17:55:f1:d2:a5:5f:1f:73:17:92:b5:9f:31:26:88:1d:68:3b:
         c2:f9:22:9c:54:e7:3e:ef:29:34:f7:42:d2:d2:d7:fb:fa:a0:
         24:7d:bd:94
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJEQjExMTAvBgNVBAUTKDIyRURGOUVCNjYwODdGRDBFOTgxN0FFNzM2QzAwMzlE
MTg4MDg4RDUwHhcNMjYwMjIxMTU0NTA2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODA3Zi1kZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3iHWpU2BO45dEKlTUHP1WUB5PADSQb9yBY9EYpEOJoN6pcq6tusJVuNPlnk
nn85FXUClNNyyQOwH0f3+stDLGaPubZyCNgVIOU2hlJP+gFPM7IMykolbeUfmVxT
R6FkCruhaIuIJBqK5CpZKhAwEiZAStOA0xe5ZWjN8Mt82mzwiqeDZ2y37q7ITKJ9
Ujl69YcnbT10CqiCzDbJoXEnN7zYxvXWjfGHIAS/xfm0aKD97ooFqqERFT5EEryT
MZRI/hzLNeIjoM7ye8/+sze2lX5pelz3ne/u7WID9jmQv9uQjjyCpHhoZeFgDpYe
p1/G0U3YHraSpZX3iWHcKtAfzwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFAuqto2A
m7+OMPQwEkBm2MOwyNYzMB8GA1UdIwQYMBaAFCLt+etmCH/Q6YF65zbAA50YgIjV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkRCMS8zRkE2OTIwMDgz
QzAxMUVDQjU0QjM5N0ZDNEY5QUUwMi9JdTM1NjJZSWY5RHBnWHJuTnNBRG5SaUFp
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l1MzU2MllJZjlEcGdYcm5Oc0FEblJpQWlOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTJEQjEvM0ZBNjkyMDA4M0MwMTFFQ0I1NEIzOTdGQzRGOUFFMDIvNEI0NEQ2RUMw
RjNDMTFGMUJGMjRBMkFDMUMzRDhDNjcucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJACKIAGwMA0GCSqGSIb3DQEBCwUAA4IBAQCMeZJgJpv06vgu3IV5
kCJ7Kc2rNeErjpFfFkbnJ5vp/ivStdEMNegUTqW2O/7l7cr7i5RvUIVlYHOIz42n
NOuBR2Is9fBcAN4pM+95bOCfejFTBGNgcTmo4ULll5ov6SZJZF2ZgUlGTwsXlgoD
zDbUkmCt5iObH6ecK4LyFPOeHaPa9Sabym+Ik6paV2ccwX8fNpiT+dk9TXs4/mZH
+lxNgOm8WbmjBBtMRGWk30E9cBIeKQGSFcW/r0iYUOywT+Vs0gF5/bSSLXR01Vk3
EE2A655tD4OGRvcXVfHSpV8fcxeStZ8xJogdaDvC+SKcVOc+7yk090LS0tf7+qAk
fb2U
-----END CERTIFICATE-----
Generated at Wed Mar 11 12:14:10 2026 by rpki-client