Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa
File:                     9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (raw, json)
Hash identifier:          82mD0JjR/bNm83prcdoATdSn/DsYKFPqGV+BHwJAv5I=
Subject key identifier:   57:52:40:64:DC:29:C8:8B:BF:DD:3E:6B:03:28:E2:8E:64:68:A2:3C
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       0139
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa
Signing time:             Mon 27 Jul 2026 07:56:27 +0000
ROA not before:           Mon 27 Jul 2026 07:56:27 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        2401:c2e0::/40 maxlen: 48
                          2401:c2e0:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Jul 27 07:56:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a670f2b-2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:4e:ac:6b:2e:ec:b2:b1:0e:e6:ee:9d:09:
                    f5:75:b1:ae:d8:60:cb:4a:87:59:31:d1:94:ce:f2:
                    25:29:95:05:21:f8:12:63:8d:76:1e:56:73:cf:3f:
                    f5:90:b7:54:9a:e8:58:24:28:68:8a:da:77:79:a5:
                    ac:51:16:8c:59:1e:c8:7c:0f:28:6a:9e:c1:d6:21:
                    63:06:1e:fe:c6:b6:c8:77:11:94:d9:b9:98:42:bd:
                    81:bf:b8:45:08:d9:31:f4:cd:a0:64:59:07:e4:e5:
                    6e:04:5b:95:e9:1a:ae:ec:64:70:42:6c:1a:16:9e:
                    2c:0f:9e:79:26:b7:87:5f:6f:64:b0:33:ba:20:c6:
                    72:62:30:6c:55:9f:32:7b:e1:3c:7c:f4:98:c2:69:
                    d1:53:2f:bc:b5:cf:f2:4c:52:05:1d:2d:68:a6:6c:
                    99:c9:26:46:76:60:7d:bf:f3:58:8a:fe:94:cd:1e:
                    be:69:33:a8:70:22:b9:85:52:96:7d:86:87:9c:99:
                    c5:e9:7f:b8:d1:86:5b:76:8e:5a:2e:77:d1:96:58:
                    dd:a9:b3:14:1d:35:a0:a4:d7:90:e0:a5:8e:d9:9e:
                    b3:d6:08:58:30:7e:22:75:5b:45:26:3d:ab:4d:4a:
                    58:44:26:d1:2d:3c:3e:2d:b5:65:d0:bd:e2:ff:1b:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:52:40:64:DC:29:C8:8B:BF:DD:3E:6B:03:28:E2:8E:64:68:A2:3C
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c2e0::/40
                  2401:c2e0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:a5:7d:8d:95:1f:fd:01:b5:f6:d9:79:39:53:9d:46:ac:
         05:58:61:dd:5a:2b:65:2e:a4:56:71:01:73:c7:f6:8d:79:7a:
         18:58:87:b4:ec:e4:86:4f:a4:2a:88:81:a1:f6:5e:7a:c7:f0:
         a9:0b:66:42:56:52:db:83:d5:cc:19:98:4e:34:0e:f2:ab:36:
         60:44:5e:9c:d6:37:9a:8c:69:3e:70:92:ff:73:b5:48:74:16:
         89:e5:13:5e:c9:30:c5:fd:01:f8:d9:b0:46:95:cd:80:ba:4c:
         46:e2:98:b7:e5:89:6b:c1:26:4f:00:e0:a6:ef:59:67:6c:aa:
         8e:e2:b1:cb:ec:98:e1:70:04:9e:47:57:c2:cc:94:d5:62:94:
         eb:ba:3a:0f:b5:3a:cb:42:cb:d0:b1:e1:6d:39:75:2e:cf:9e:
         63:57:67:b9:7c:a3:4d:6d:5e:d4:6b:1c:e0:fe:98:21:1b:13:
         eb:7c:df:84:3c:24:84:f2:9b:17:2c:97:f7:8d:55:96:11:b8:
         08:d3:ea:cf:3e:15:ae:8d:01:89:48:bc:ba:78:7f:92:04:34:
         bb:fd:5b:24:2b:38:e6:c0:48:02:1d:67:ee:4b:1b:cc:99:d4:
         fe:36:cf:ae:b9:a8:16:53:79:7c:0d:fe:bc:f8:3c:13:8e:e8:
         ba:46:3c:24
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA1OUUxMTAvBgNVBAUTKDcyNThERkQ1NkZBNUE0ODdGMEQ0QUNDNjlDQURCMUJF
QUMyRjk3MEUwHhcNMjYwNzI3MDc1NjI3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY3MGYyYi0yODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2lZOrGsu7LKxDubunQn1dbGu2GDLSodZMdGUzvIlKZUFIfgSY412HlZzzz/1
kLdUmuhYJChoitp3eaWsURaMWR7IfA8oap7B1iFjBh7+xrbIdxGU2bmYQr2Bv7hF
CNkx9M2gZFkH5OVuBFuV6Rqu7GRwQmwaFp4sD555JreHX29ksDO6IMZyYjBsVZ8y
e+E8fPSYwmnRUy+8tc/yTFIFHS1opmyZySZGdmB9v/NYiv6UzR6+aTOocCK5hVKW
fYaHnJnF6X+40YZbdo5aLnfRlljdqbMUHTWgpNeQ4KWO2Z6z1ghYMH4idVtFJj2r
TUpYRCbRLTw+LbVl0L3i/xuZiQIDAQABo4ICajCCAmYwHQYDVR0OBBYEFFdSQGTc
KciLv90+awMo4o5kaKI8MB8GA1UdIwQYMBaAFHJY39VvpaSH8NSsxpytsb6sL5cO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU5RS81NTY2NkI1NkQ5
RDAxMUVGOThCODVFNkRDNEY5QUUwMi9jbGpmMVctbHBJZncxS3pHbksyeHZxd3Zs
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA1OUUvNTU2NjZCNTZEOUQwMTFFRjk4Qjg1RTZEQzRGOUFFMDIvOUExRDI2RThE
QTJDMTFFRkFDNTM4ODJFQzRGOUFFMDIucm9hMCkGCCsGAQUFBwEHAQH/BBowGDAW
BAIAAjAQAwYAJAHC4AADBgAkAcLgwDANBgkqhkiG9w0BAQsFAAOCAQEAaAylfY2V
H/0BtfbZeTlTnUasBVhh3VorZS6kVnEBc8f2jXl6GFiHtOzkhk+kKoiBofZeesfw
qQtmQlZS24PVzBmYTjQO8qs2YERenNY3moxpPnCS/3O1SHQWieUTXskwxf0B+Nmw
RpXNgLpMRuKYt+WJa8EmTwDgpu9ZZ2yqjuKxy+yY4XAEnkdXwsyU1WKU67o6D7U6
y0LL0LHhbTl1Ls+eY1dnuXyjTW1e1Gsc4P6YIRsT63zfhDwkhPKbFyyX941VlhG4
CNPqzz4Vro0BiUi8unh/kgQ0u/1bJCs45sBIAh1n7ksbzJnU/jbPrrmoFlN5fA3+
vPg8E47oukY8JA==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:12:20 2026 by rpki-client