Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/84D40CCC8BC211F19A8217C56C11F970.roa
File:                     84D40CCC8BC211F19A8217C56C11F970.roa (raw, json)
Hash identifier:          kVTmugesJPhb77pfF6FXBrJrEBcGm4sTpsJbN+PuYF0=
Subject key identifier:   C2:A3:6A:D0:78:31:D9:A4:E8:A8:FE:47:CE:A1:0D:BE:76:8E:35:1B
Certificate issuer:       /CN=A9139D67/serialNumber=3FE8A25506F3220C82A968E2A7DE68FBEFBF77F5
Certificate serial:       02
Authority key identifier: 3F:E8:A2:55:06:F3:22:0C:82:A9:68:E2:A7:DE:68:FB:EF:BF:77:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-iiVQbzIgyCqWjip95o---_d_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/84D40CCC8BC211F19A8217C56C11F970.roa
Signing time:             Thu 30 Jul 2026 02:58:19 +0000
ROA not before:           Thu 30 Jul 2026 02:58:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140322
IP address blocks:        2001:df7:4940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/P-iiVQbzIgyCqWjip95o---_d_U.crl
                          rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/P-iiVQbzIgyCqWjip95o---_d_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-iiVQbzIgyCqWjip95o---_d_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D67, serialNumber=3FE8A25506F3220C82A968E2A7DE68FBEFBF77F5
        Validity
            Not Before: Jul 30 02:58:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6abdcb-9458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:ee:49:85:6d:6a:47:7a:35:5d:64:dd:95:
                    2b:45:dc:5b:49:4f:b0:13:09:a1:08:5e:8d:59:20:
                    98:2b:89:65:9e:3d:2e:e0:62:b5:2b:67:26:bd:d8:
                    b0:c0:45:07:31:22:08:03:94:a4:61:7f:0d:b2:06:
                    08:46:0a:d2:9c:f5:3c:00:ef:71:37:35:e5:08:5a:
                    3a:6c:21:ab:2a:8b:1d:ee:9a:64:81:3a:d0:00:a1:
                    4b:f4:11:c9:08:99:f9:fd:79:1e:aa:92:5a:be:f7:
                    d4:16:d1:cd:06:31:3a:0a:7c:c5:39:8e:76:b1:27:
                    63:80:2a:80:1d:b9:1d:d4:de:1b:ad:fb:4d:01:ab:
                    7f:bf:30:1e:5e:f6:0c:ac:11:09:0f:2b:79:38:c8:
                    ab:cc:71:44:e5:5b:59:29:2d:a4:71:a9:05:ae:5d:
                    6c:0b:e3:86:79:64:16:64:e3:cd:1c:f1:73:9c:de:
                    6f:7a:0e:73:7f:4a:5f:a2:b4:63:4e:2e:d2:ed:d1:
                    04:b4:af:43:3f:ad:3d:90:8f:c3:ba:1f:51:81:ed:
                    f1:c5:12:fc:54:b3:da:bc:5b:bb:e3:ea:15:9d:c0:
                    eb:73:d5:23:b7:58:7c:0d:9f:1c:1c:b5:03:41:f7:
                    80:71:38:06:61:1e:91:60:9e:5a:83:77:b3:42:0e:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A3:6A:D0:78:31:D9:A4:E8:A8:FE:47:CE:A1:0D:BE:76:8E:35:1B
            X509v3 Authority Key Identifier:
                keyid:3F:E8:A2:55:06:F3:22:0C:82:A9:68:E2:A7:DE:68:FB:EF:BF:77:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/P-iiVQbzIgyCqWjip95o---_d_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-iiVQbzIgyCqWjip95o---_d_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D67/9BB78B5E8BC111F1A5204D886C11F970/84D40CCC8BC211F19A8217C56C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:4940::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:14:2f:7c:6b:56:04:95:dd:0a:ca:24:03:64:c1:21:29:8c:
         f8:59:2b:3b:2a:4e:66:c9:76:ac:e0:6e:7d:ba:2c:5d:10:6e:
         32:2c:97:72:cc:ce:22:98:a4:80:89:a4:76:fb:be:66:fe:66:
         8e:55:16:4a:02:d1:40:34:c6:78:54:66:93:0a:ef:fb:85:de:
         cc:0d:cd:b9:01:c5:d2:21:7a:35:9c:d6:7e:b2:d1:8a:46:40:
         54:43:f5:44:00:7e:6f:f8:ce:00:45:f0:79:18:2f:08:5f:e2:
         b2:81:d7:32:ba:fb:db:df:09:1e:c5:1b:84:12:ab:16:38:86:
         86:b0:b0:a0:07:9c:b2:4c:92:e9:bb:c7:18:40:de:cd:e8:b0:
         f5:3c:8c:c3:a1:0c:be:41:20:1e:bd:29:69:cf:91:73:10:14:
         25:29:d2:98:85:37:c6:ca:52:04:e7:95:33:1e:89:b6:34:9c:
         c4:58:a4:51:e3:dd:fc:01:89:fe:d5:27:e4:dd:20:30:f1:a3:
         01:e8:9b:ce:3a:a1:16:0c:ca:67:83:e4:87:19:3d:09:56:48:
         e3:77:f5:1f:01:02:ce:6a:f2:7a:27:0e:48:d8:6e:95:df:a2:
         4b:56:8e:ee:b0:92:8e:1a:e0:98:2a:6a:c1:8e:b6:0f:43:a2:
         ea:1f:1b:0b
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
OUQ2NzExMC8GA1UEBRMoM0ZFOEEyNTUwNkYzMjIwQzgyQTk2OEUyQTdERTY4RkJF
RkJGNzdGNTAeFw0yNjA3MzAwMjU4MTlaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNmFiZGNiLTk0NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmde5JhW1qR3o1XWTdlStF3FtJT7ATCaEIXo1ZIJgriWWePS7gYrUrZya92LDA
RQcxIggDlKRhfw2yBghGCtKc9TwA73E3NeUIWjpsIasqix3ummSBOtAAoUv0EckI
mfn9eR6qklq+99QW0c0GMToKfMU5jnaxJ2OAKoAduR3U3hut+00Bq3+/MB5e9gys
EQkPK3k4yKvMcUTlW1kpLaRxqQWuXWwL44Z5ZBZk480c8XOc3m96DnN/Sl+itGNO
LtLt0QS0r0M/rT2Qj8O6H1GB7fHFEvxUs9q8W7vj6hWdwOtz1SO3WHwNnxwctQNB
94BxOAZhHpFgnlqDd7NCDrGbAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUwqNq0Hgx
2aToqP5HzqENvnaONRswHwYDVR0jBBgwFoAUP+iiVQbzIgyCqWjip95o+++/d/Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RDY3LzlCQjc4QjVFOEJD
MTExRjFBNTIwNEQ4ODZDMTFGOTcwL1AtaWlWUWJ6SWd5Q3FXamlwOTVvLS0tX2Rf
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUC1paVZRYnpJZ3lDcVdqaXA5NW8tLS1fZF9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OUQ2Ny85QkI3OEI1RThCQzExMUYxQTUyMDREODg2QzExRjk3MC84NEQ0MENDQzhC
QzIxMUYxOUE4MjE3QzU2QzExRjk3MC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ33SUAwDQYJKoZIhvcNAQELBQADggEBAIIUL3xrVgSV3QrKJANk
wSEpjPhZKzsqTmbJdqzgbn26LF0QbjIsl3LMziKYpICJpHb7vmb+Zo5VFkoC0UA0
xnhUZpMK7/uF3swNzbkBxdIhejWc1n6y0YpGQFRD9UQAfm/4zgBF8HkYLwhf4rKB
1zK6+9vfCR7FG4QSqxY4hoawsKAHnLJMkum7xxhA3s3osPU8jMOhDL5BIB69KWnP
kXMQFCUp0piFN8bKUgTnlTMeibY0nMRYpFHj3fwBif7VJ+TdIDDxowHom846oRYM
ymeD5IcZPQlWSON39R8BAs5q8nonDkjYbpXfoktWju6wko4a4JgqasGOtg9Douof
Gws=
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:32 2026 by rpki-client