Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa
File:                     1EF20696EEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier:          C2HYiXqh9FrGOeUUq4VM0nBBKKmKPJMXcJIwTDA1cJw=
Subject key identifier:   05:FE:BF:B3:17:DA:62:3A:B3:32:73:E0:64:CF:FF:BE:1D:55:0C:FD
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       3B
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa
Signing time:             Mon 02 Mar 2026 11:27:41 +0000
ROA not before:           Sun 11 Jan 2026 08:18:34 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154313
IP address blocks:        2001:df6:3e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Jan 11 08:18:34 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5742d-07bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:62:85:4b:73:76:dc:ba:1c:16:ae:fe:80:
                    7a:b7:c4:e9:f4:38:87:b3:69:4a:50:33:50:4b:e4:
                    90:6e:9c:67:c7:d5:31:27:28:d0:a0:1b:9b:86:c9:
                    11:09:d1:1a:d2:ab:7a:f5:07:99:69:28:53:60:96:
                    94:c8:01:50:33:09:ce:0a:2d:55:a5:1a:cc:b8:87:
                    45:32:1b:7b:5d:40:b3:cc:99:9c:f2:72:10:f9:90:
                    d1:e8:69:9b:29:ca:88:0d:b1:a8:6c:76:58:4a:05:
                    82:11:3b:ad:17:f7:a6:e0:79:18:88:ab:d3:41:16:
                    0f:2d:50:f4:bd:96:4b:aa:05:95:61:0e:c6:f0:7d:
                    8b:68:74:15:ba:ed:05:af:36:71:43:b7:a0:48:3e:
                    2a:54:15:80:ed:67:02:f3:9d:1d:26:ae:23:65:44:
                    a8:d1:e7:23:7e:f9:de:61:fd:42:68:62:1b:5b:ee:
                    4e:96:56:96:e7:50:c1:b8:d3:01:fd:c2:33:43:61:
                    7e:9b:e1:35:96:5b:2e:5a:80:db:21:da:b1:61:28:
                    23:53:26:93:1a:12:3b:82:61:45:6b:3d:eb:ba:0c:
                    e8:4a:f2:0e:95:a9:55:f5:1e:40:9c:fc:eb:cb:c0:
                    60:ed:3a:59:61:1a:ad:1a:f3:b8:69:70:40:72:7f:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FE:BF:B3:17:DA:62:3A:B3:32:73:E0:64:CF:FF:BE:1D:55:0C:FD
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1EF20696EEC611F0B6553517716F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:90:4e:58:9b:2a:ef:65:93:a4:78:3c:8c:b1:57:00:5d:c4:
         cb:56:3a:33:ab:98:07:2e:cc:91:ba:5d:6d:d4:fa:0e:a2:35:
         84:a3:3e:82:8f:1c:bb:6c:d1:f7:f8:e8:cc:f0:b0:f4:8d:df:
         c0:ea:91:0e:55:04:ec:e4:b7:05:d5:14:31:27:d1:74:4f:47:
         3f:61:78:76:34:84:78:9d:4f:28:e4:c5:ae:2e:7a:f1:98:a9:
         7d:ec:f3:bd:42:c4:c6:dc:fc:21:73:f8:a7:d7:1a:ad:83:12:
         ec:aa:99:48:e6:81:78:ed:30:e4:8c:d1:54:51:d7:5f:53:c2:
         2a:d2:85:29:5b:ce:9a:88:7f:2d:48:a9:20:6c:fe:f1:d5:3a:
         f8:d9:ba:8e:47:cd:ec:f8:d4:c2:83:b0:8a:9c:ad:0e:99:da:
         3e:1e:ee:e7:14:c4:eb:55:b1:4c:8e:4a:82:b9:58:a6:4f:58:
         b5:81:29:7f:dd:03:af:33:a0:8c:67:89:8d:d7:08:89:0a:9c:
         2f:9e:a8:af:f6:8d:32:f7:f1:a9:18:2b:a1:49:5b:d3:96:cc:
         05:6e:ab:6a:b9:af:0c:a0:21:a7:3c:52:ed:88:b6:63:bc:56:
         db:12:c5:54:a9:06:15:b6:0e:e5:1a:7b:42:2a:0c:20:3a:65:
         fe:fa:66:56
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njk1QTExMC8GA1UEBRMoOTQxMTE2M0E3MzU3RUZEOEExMkQ2OUI2Qzk0NzY1NEY0
NURFNkUyQTAeFw0yNjAxMTEwODE4MzRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU3NDJkLTA3YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPaGKFS3N23LocFq7+gHq3xOn0OIezaUpQM1BL5JBunGfH1TEnKNCgG5uGyREJ
0RrSq3r1B5lpKFNglpTIAVAzCc4KLVWlGsy4h0UyG3tdQLPMmZzychD5kNHoaZsp
yogNsahsdlhKBYIRO60X96bgeRiIq9NBFg8tUPS9lkuqBZVhDsbwfYtodBW67QWv
NnFDt6BIPipUFYDtZwLznR0mriNlRKjR5yN++d5h/UJoYhtb7k6WVpbnUMG40wH9
wjNDYX6b4TWWWy5agNsh2rFhKCNTJpMaEjuCYUVrPeu6DOhK8g6VqVX1HkCc/OvL
wGDtOllhGq0a87hpcEByf+b7AgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUBf6/sxfa
YjqzMnPgZM//vh1VDP0wHwYDVR0jBBgwFoAUlBEWOnNX79ihLWm2yUdlT0Xebiow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzYzNTMwQ0ZFQzhG
MTExRjA4Rjk5Mzc3NkM0RjlBRTAyL2xCRVdPbk5YNzlpaExXbTJ5VWRsVDBYZWJp
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEJFV09uTlg3OWloTFdtMnlVZGxUMFhlYmlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Njk1QS82MzUzMENGRUM4RjExMUYwOEY5OTM3NzZDNEY5QUUwMi8xRUYyMDY5NkVF
QzYxMUYwQjY1NTM1MTc3MTZGNTZCQy5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ32PkAwDQYJKoZIhvcNAQELBQADggEBAA2QTlibKu9lk6R4PIyx
VwBdxMtWOjOrmAcuzJG6XW3U+g6iNYSjPoKPHLts0ff46MzwsPSN38DqkQ5VBOzk
twXVFDEn0XRPRz9heHY0hHidTyjkxa4uevGYqX3s871CxMbc/CFz+KfXGq2DEuyq
mUjmgXjtMOSM0VRR119TwirShSlbzpqIfy1IqSBs/vHVOvjZuo5Hzez41MKDsIqc
rQ6Z2j4e7ucUxOtVsUyOSoK5WKZPWLWBKX/dA68zoIxniY3XCIkKnC+eqK/2jTL3
8akYK6FJW9OWzAVuq2q5rwygIac8Uu2ItmO8VtsSxVSpBhW2DuUae0IqDCA6Zf76
ZlY=
-----END CERTIFICATE-----
Generated at Wed Mar 4 13:14:45 2026 by rpki-client