Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
File:                     E1AB1F92430F11EAA60DB885C4F9AE02.roa (raw, json)
Hash identifier:          OCv24/16TkkF7CfAW+nV2T28WIs19rHh0mty8R6qkAI=
Subject key identifier:   51:35:92:D4:51:37:EC:D1:5E:54:57:F1:A4:69:68:48:72:D4:D0:6A
Certificate issuer:       /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
Certificate serial:       0C08
Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa
Signing time:             Mon 14 Sep 2026 19:38:25 +0000
ROA not before:           Mon 14 Sep 2026 19:38:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     24014
IP address blocks:        2001:df3:c600::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl
                          rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3080 (0xc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC
        Validity
            Not Before: Sep 14 19:38:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa84d31-c6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:31:ea:4a:b1:5c:f4:b1:82:fa:7f:60:b2:
                    13:bf:ef:81:59:ce:1b:51:1d:f3:34:f5:f0:bd:97:
                    fa:01:cb:ea:76:4a:b6:8f:2d:bb:0f:a1:49:6a:37:
                    df:ba:59:79:df:a2:08:db:3c:4b:1d:e0:06:f4:21:
                    bc:ea:3e:2a:9a:1e:b8:8e:a0:e8:63:14:1e:42:06:
                    87:b3:6c:2c:04:30:db:17:f9:4c:76:26:c5:20:ff:
                    4a:29:27:83:de:4b:33:3d:1d:67:6d:85:d3:6b:af:
                    a7:32:9a:cb:b6:91:5b:bc:5d:1e:0c:9e:e9:89:b5:
                    e4:7e:a0:1b:f6:74:ea:19:f1:f6:94:05:05:90:47:
                    de:28:80:40:3b:a9:51:b4:e7:79:44:5b:f6:0a:59:
                    6d:8c:49:e7:5e:eb:e8:bd:14:8d:ec:9b:70:50:3f:
                    96:90:07:4b:5b:52:6b:16:a2:56:7c:8f:4a:c0:69:
                    7c:6f:c6:3d:7d:f4:49:13:92:4b:52:82:f7:81:d8:
                    ad:6c:91:9a:0c:23:90:cb:be:f3:c4:33:b2:5d:0d:
                    d8:03:d3:40:82:1c:82:6e:4e:42:42:30:04:fc:10:
                    12:2a:af:70:1e:76:2d:93:c5:86:3e:bf:45:fa:d0:
                    d8:e7:99:36:5c:1f:77:ac:39:a1:6c:ce:99:d7:eb:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:92:D4:51:37:EC:D1:5E:54:57:F1:A4:69:68:48:72:D4:D0:6A
            X509v3 Authority Key Identifier:
                keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/E1AB1F92430F11EAA60DB885C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:c600::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:02:8d:4b:01:10:f2:d6:4f:6f:f5:7f:a3:ea:6c:36:96:
         47:90:6d:13:dc:f8:cf:56:9f:50:a1:fd:08:b5:23:c9:bf:54:
         2a:19:36:14:26:39:fd:8b:89:ce:fc:b3:70:be:1a:3e:3b:ca:
         2e:5e:35:29:05:f6:5e:46:5d:02:5c:82:b8:c8:8e:0c:bf:b0:
         ad:b2:aa:39:22:bc:b1:db:06:a6:73:bf:cb:9e:0f:bd:90:b5:
         11:fb:57:48:1e:94:fa:4a:81:2b:d4:cf:bc:90:75:cd:25:84:
         03:3b:c6:7c:a8:23:74:e8:f3:8c:d4:1e:be:d6:32:c2:9d:b9:
         8e:6d:6b:ef:76:f9:a9:a1:da:1c:15:e7:95:d8:c3:75:c7:41:
         3e:00:23:36:bb:97:a8:39:73:62:12:f6:00:0f:28:ba:9e:72:
         29:00:86:e4:be:a6:26:6d:ab:df:90:f5:f6:ea:25:ef:9c:88:
         a5:db:dc:2a:e7:bd:b9:34:43:23:96:a3:34:db:28:6c:c0:e1:
         91:3d:00:4d:65:1b:db:27:15:52:2f:e6:2c:01:9f:6e:0f:c8:
         41:75:c6:ce:7f:5b:03:27:56:87:42:88:22:fe:8e:f9:0b:27:
         3b:35:6f:a1:8f:3e:81:b2:7f:29:69:a6:56:22:dd:7e:7e:74:
         4e:de:68:e1
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB
Q0NGMjU4QkMwHhcNMjYwOTE0MTkzODI1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE4NGQzMS1jNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZcx6kqxXPSxgvp/YLITv++BWc4bUR3zNPXwvZf6Acvqdkq2jy27D6FJajff
ull536II2zxLHeAG9CG86j4qmh64jqDoYxQeQgaHs2wsBDDbF/lMdibFIP9KKSeD
3kszPR1nbYXTa6+nMprLtpFbvF0eDJ7pibXkfqAb9nTqGfH2lAUFkEfeKIBAO6lR
tOd5RFv2ClltjEnnXuvovRSN7JtwUD+WkAdLW1JrFqJWfI9KwGl8b8Y9ffRJE5JL
UoL3gditbJGaDCOQy77zxDOyXQ3YA9NAghyCbk5CQjAE/BASKq9wHnYtk8WGPr9F
+tDY55k2XB93rDmhbM6Z1+tLmQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFE1ktRR
N+zRXlRX8aRpaEhy1NBqMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz
MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDI0N0MvOTBGNjMyREE0MzBBMTFFQTg1OENEQzc2QzRGOUFFMDIvRTFBQjFGOTI0
MzBGMTFFQUE2MERCODg1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN88YAMA0GCSqGSIb3DQEBCwUAA4IBAQCX9wKNSwEQ8tZPb/V/
o+psNpZHkG0T3PjPVp9Qof0ItSPJv1QqGTYUJjn9i4nO/LNwvho+O8ouXjUpBfZe
Rl0CXIK4yI4Mv7Ctsqo5Iryx2wamc7/Lng+9kLUR+1dIHpT6SoEr1M+8kHXNJYQD
O8Z8qCN06POM1B6+1jLCnbmObWvvdvmpodocFeeV2MN1x0E+ACM2u5eoOXNiEvYA
Dyi6nnIpAIbkvqYmbavfkPX26iXvnIil29wq5725NEMjlqM02yhswOGRPQBNZRvb
JxVSL+YsAZ9uD8hBdcbOf1sDJ1aHQogi/o75Cyc7NW+hjz6Bsn8paaZWIt1+fnRO
3mjh
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:54 2026 by rpki-client