Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
File:                     C2C37E56153A11EF9E378A14C4F9AE02.roa (raw, json)
Hash identifier:          dhXNyunI39nD/DT1e9lDchzlVmyAT8bbuHRUT42ciqQ=
Subject key identifier:   BE:1A:8B:6B:EF:E3:12:64:CC:C8:3F:77:41:38:5F:A4:E6:B5:D8:76
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       025E
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 03:33:12 +0000
ROA not before:           Fri 05 Jun 2026 03:33:12 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     201217
IP address blocks:        2401:5a0:ff10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 02:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun  5 03:33:12 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a224378-fab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:d7:47:3c:06:19:f3:cb:cc:f6:12:92:b3:
                    93:50:ad:c0:cf:fa:b3:7b:0c:d6:c1:26:5c:13:72:
                    5c:30:06:cd:a1:12:75:87:92:2f:34:2d:9f:b9:12:
                    4a:1b:27:9e:07:cb:dd:9a:27:4c:89:c9:66:56:91:
                    be:b2:12:52:9a:89:36:28:67:25:fd:9f:bc:78:11:
                    7e:20:8b:92:84:36:f4:c0:a7:04:77:31:96:15:82:
                    45:7c:35:fa:56:3f:8e:58:6f:9e:f2:0a:64:1e:77:
                    a4:7a:58:b8:40:e3:6e:c5:8c:3e:17:1f:07:2e:db:
                    a9:52:07:5b:19:cf:85:4e:a0:79:a5:90:dd:34:01:
                    27:be:47:22:2c:61:ba:bb:e3:50:9b:7a:d4:5e:d8:
                    b7:0b:2a:06:4a:bd:cb:ae:e1:3a:17:3a:e1:3f:b8:
                    a0:3c:77:24:cf:40:9a:51:a8:05:00:a2:12:01:8e:
                    3b:83:9a:63:a2:d4:07:5f:c3:55:ba:fe:08:a9:2e:
                    90:ae:b2:ec:07:3c:42:31:c6:c8:4a:61:2d:33:14:
                    f4:77:c3:45:ac:2e:df:36:93:ae:63:8c:3a:6b:49:
                    04:3c:80:81:7f:74:1c:a5:57:1c:0a:0e:8f:71:ff:
                    cb:9b:a9:87:cf:9f:03:68:28:98:df:3f:6a:3c:a6:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1A:8B:6B:EF:E3:12:64:CC:C8:3F:77:41:38:5F:A4:E6:B5:D8:76
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:ff10::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:65:78:e4:bb:4e:b7:dd:1e:66:a8:ac:9b:f5:0d:e7:3e:
         01:21:ae:2c:d6:83:b4:4a:70:c4:4b:1a:6f:e6:0b:72:c4:46:
         11:67:27:8a:22:0e:ad:d2:91:76:43:f5:2a:4f:f8:03:0e:f3:
         59:c6:96:ec:cc:96:b3:4a:0d:e6:89:b5:90:7c:3c:14:f9:d9:
         e7:46:0f:f9:9a:57:54:a3:67:25:5b:59:a9:e9:26:3c:ff:48:
         94:34:54:95:18:1f:81:0e:89:91:87:54:6d:30:8a:a3:60:b7:
         71:a6:9f:f4:7b:d1:56:d8:39:56:ee:ca:78:1a:56:11:67:c5:
         8c:89:d1:e0:b8:82:d4:18:2b:1c:dc:5c:ba:66:d1:74:c5:b9:
         c8:93:67:dd:52:53:ff:5a:83:9e:03:3e:a6:50:88:19:b9:05:
         bc:c7:18:4d:27:e6:b3:ec:e4:2e:4a:99:a3:d9:45:fb:f4:35:
         3c:36:41:e0:30:19:ca:6e:2f:05:82:a4:29:a7:38:8e:0e:a0:
         5b:be:29:d0:4f:44:04:f2:ff:a8:22:93:79:b4:c3:f6:33:33:
         8b:71:2f:75:af:d5:25:e5:24:38:f0:45:26:18:64:62:22:6e:
         85:27:45:92:8a:44:af:e0:3c:5f:64:38:20:47:0f:0f:9a:63:
         0e:98:88:49
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3
NDYxOTkzODMwHhcNMjYwNjA1MDMzMzEyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyNDM3OC1mYWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1b3XRzwGGfPLzPYSkrOTUK3Az/qzewzWwSZcE3JcMAbNoRJ1h5IvNC2fuRJK
GyeeB8vdmidMiclmVpG+shJSmok2KGcl/Z+8eBF+IIuShDb0wKcEdzGWFYJFfDX6
Vj+OWG+e8gpkHnekeli4QONuxYw+Fx8HLtupUgdbGc+FTqB5pZDdNAEnvkciLGG6
u+NQm3rUXti3CyoGSr3LruE6FzrhP7igPHckz0CaUagFAKISAY47g5pjotQHX8NV
uv4IqS6QrrLsBzxCMcbISmEtMxT0d8NFrC7fNpOuY4w6a0kEPICBf3QcpVccCg6P
cf/Lm6mHz58DaCiY3z9qPKahEQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFL4ai2vv
4xJkzMg/d0E4X6Tmtdh2MB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx
QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr
NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTcxMEUvQzkzRTE3OEEwMUI1MTFFRTg5RjZFQjc4QzRGOUFFMDIvQzJDMzdFNTYx
NTNBMTFFRjlFMzc4QTE0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAEFoP8QMA0GCSqGSIb3DQEBCwUAA4IBAQCD9WV45LtOt90eZqis
m/UN5z4BIa4s1oO0SnDESxpv5gtyxEYRZyeKIg6t0pF2Q/UqT/gDDvNZxpbszJaz
Sg3mibWQfDwU+dnnRg/5mldUo2clW1mp6SY8/0iUNFSVGB+BDomRh1RtMIqjYLdx
pp/0e9FW2DlW7sp4GlYRZ8WMidHguILUGCsc3Fy6ZtF0xbnIk2fdUlP/WoOeAz6m
UIgZuQW8xxhNJ+az7OQuSpmj2UX79DU8NkHgMBnKbi8FgqQppziODqBbvinQT0QE
8v+oIpN5tMP2MzOLcS91r9Ul5SQ48EUmGGRiIm6FJ0WSikSv4DxfZDggRw8PmmMO
mIhJ
-----END CERTIFICATE-----
Generated at Sun Jun 7 04:59:20 2026 by rpki-client