Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/647957DCC82D11F193F012BE3411F970.roa
File:                     647957DCC82D11F193F012BE3411F970.roa (raw, json)
Hash identifier:          b5Pw+XKCPvC338qj/Kpd4B45sozhm8DMByhBTob4K00=
Subject key identifier:   50:FC:BE:0C:49:3E:77:1E:95:C9:93:B1:84:C7:76:28:27:F3:76:53
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3EC3
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/647957DCC82D11F193F012BE3411F970.roa
Signing time:             Thu 15 Oct 2026 00:14:32 +0000
ROA not before:           Thu 15 Oct 2026 00:14:31 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     10052
IP address blocks:        2407:c000:c025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16067 (0x3ec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Oct 15 00:14:31 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6ad01ae7-3b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:c4:4f:17:5d:5f:21:dd:25:bd:d3:f6:d2:
                    d8:13:c3:3f:b0:d2:a5:2a:fe:b5:71:67:f0:37:54:
                    8b:7e:c3:3c:17:19:9e:92:92:f6:c7:a5:da:f0:16:
                    41:fa:9e:74:0e:50:0d:9f:87:71:19:d5:67:cf:0b:
                    97:09:e7:7e:41:48:3d:a4:5b:5d:da:33:24:1b:11:
                    18:c2:46:08:d5:1d:c3:ad:a9:24:a9:a3:df:dc:e9:
                    ec:53:61:85:3c:c7:bb:99:db:80:26:d7:6b:c8:d4:
                    a9:9b:d8:ed:87:71:58:76:ad:64:4b:97:5f:36:c9:
                    59:2c:a6:0c:2f:de:26:a5:8d:35:bc:dc:af:72:2e:
                    9d:e0:6f:e3:cd:fe:65:3e:36:a7:ad:28:b8:26:65:
                    29:c1:03:e2:53:b7:5c:76:5b:18:f6:3e:82:fb:4b:
                    0f:37:bc:b2:bb:30:6d:e2:d8:d7:44:d2:57:b3:76:
                    1c:42:d7:6c:d3:e9:bb:12:28:80:95:db:d7:70:1f:
                    82:7d:b7:00:fa:3b:81:9e:c8:64:43:ba:ee:b8:56:
                    33:5f:77:4e:22:80:5e:f7:d4:69:e5:03:0f:7b:21:
                    b5:99:57:4e:fa:d2:71:8d:94:a0:29:48:5b:4c:75:
                    84:27:80:0c:22:05:b1:86:6a:02:df:6a:36:e6:ce:
                    df:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FC:BE:0C:49:3E:77:1E:95:C9:93:B1:84:C7:76:28:27:F3:76:53
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/647957DCC82D11F193F012BE3411F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:c000:c025::/48

    Signature Algorithm: sha256WithRSAEncryption
         d7:60:80:d4:b2:1b:d9:3e:91:20:e2:d6:49:c2:2b:7a:bb:9c:
         5b:5b:5a:ba:18:99:24:eb:d9:e9:03:27:46:ca:71:9a:ba:1f:
         a0:41:bc:84:bb:e4:52:4f:0c:0a:4e:fd:7d:79:94:08:91:c4:
         93:eb:d2:5a:d5:e9:1a:b9:b6:f3:c6:60:e2:39:7e:7c:f5:ee:
         9e:28:51:92:b5:e5:6b:dc:e2:82:48:7f:24:9c:8a:3e:c8:f0:
         51:ea:d1:38:f9:dd:df:2e:a5:80:ce:b9:4f:68:af:d5:44:d3:
         af:be:ba:d7:7c:5f:95:0a:c4:56:60:6e:7e:dc:73:3f:14:5e:
         6f:77:5b:98:42:43:43:d1:61:5f:84:c1:9b:5f:66:da:4b:a9:
         b5:db:37:2c:0c:01:be:fe:ef:f5:e4:74:64:79:c1:de:76:0e:
         51:52:e7:31:dd:5e:c4:38:d9:c0:a2:d1:db:85:83:16:9b:64:
         97:40:00:ae:6d:ff:6e:19:47:66:18:6e:99:30:14:0a:63:ab:
         1b:a2:e5:96:1f:e8:59:57:e0:c0:22:45:93:85:14:c9:1f:4c:
         8a:b0:2b:3e:e8:0b:3b:69:3f:7a:64:3b:45:58:de:93:5f:14:
         47:fb:ca:17:73:81:80:eb:93:21:32:8e:30:26:38:d5:eb:00:
         2c:e3:ec:36
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICPsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjYxMDE1MDAxNDMxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQwMWFlNy0zYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJvETxddXyHdJb3T9tLYE8M/sNKlKv61cWfwN1SLfsM8FxmekpL2x6Xa8BZB
+p50DlANn4dxGdVnzwuXCed+QUg9pFtd2jMkGxEYwkYI1R3DrakkqaPf3OnsU2GF
PMe7mduAJtdryNSpm9jth3FYdq1kS5dfNslZLKYML94mpY01vNyvci6d4G/jzf5l
PjanrSi4JmUpwQPiU7dcdlsY9j6C+0sPN7yyuzBt4tjXRNJXs3YcQtds0+m7EiiA
ldvXcB+CfbcA+juBnshkQ7ruuFYzX3dOIoBe99Rp5QMPeyG1mVdO+tJxjZSgKUhb
THWEJ4AMIgWxhmoC32o25s7fDQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFD8vgxJ
PncelcmTsYTHdign83ZTMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNjQ3OTU3REND
ODJEMTFGMTkzRjAxMkJFMzQxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAfAAMAlMA0GCSqGSIb3DQEBCwUAA4IBAQDXYIDUshvZPpEg4tZJ
wit6u5xbW1q6GJkk69npAydGynGauh+gQbyEu+RSTwwKTv19eZQIkcST69Ja1eka
ubbzxmDiOX589e6eKFGSteVr3OKCSH8knIo+yPBR6tE4+d3fLqWAzrlPaK/VRNOv
vrrXfF+VCsRWYG5+3HM/FF5vd1uYQkND0WFfhMGbX2baS6m12zcsDAG+/u/15HRk
ecHedg5RUucx3V7EONnAotHbhYMWm2SXQACubf9uGUdmGG6ZMBQKY6sbouWWH+hZ
V+DAIkWThRTJH0yKsCs+6As7aT96ZDtFWN6TXxRH+8oXc4GA65MhMo4wJjjV6wAs
4+w2
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:55 2026 by rpki-client