Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa
File:                     DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (raw, json)
Hash identifier:          5HVDJMdFAEWbpwDpLRs7BIeQXFMh3hWjQmOdlBm6OLk=
Subject key identifier:   D4:6B:38:6D:56:68:8E:6F:D0:BF:83:BD:27:07:8E:93:32:E0:D4:8D
Certificate issuer:       /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial:       09C7
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 20:40:36 +0000
ROA not before:           Sun 30 Aug 2026 20:40:36 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     400105
IP address blocks:        2001:df4:d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
                          rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
        Validity
            Not Before: Aug 30 20:40:36 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a949544-93ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:bb:ef:3b:ee:55:73:88:f2:85:64:fb:6e:
                    0c:8f:a9:8b:84:c5:81:a3:41:b2:a7:37:3c:c5:2b:
                    0d:98:27:76:12:b0:27:82:5f:d1:4c:4a:a4:e9:7e:
                    82:37:74:b3:e5:37:a1:53:b6:be:23:b3:9d:6c:d4:
                    f3:66:d8:c3:12:52:0d:4c:f5:ac:d5:2a:4c:4d:5b:
                    e7:b2:79:63:53:55:b0:dc:71:7c:af:07:57:bc:1b:
                    06:4a:c3:14:cf:ef:97:f2:26:86:4c:01:31:e2:0e:
                    ec:51:30:27:f2:cd:c0:3f:0e:f9:63:9c:e3:91:e4:
                    a4:d1:c0:ff:82:b8:3f:13:cf:3a:35:dc:0d:c3:33:
                    c9:cc:1e:83:1d:99:5d:8d:a3:ff:8c:a5:b0:4a:17:
                    26:1e:52:d8:f6:6f:85:b0:1d:a3:ce:a7:6d:e2:3b:
                    a5:4f:30:b8:0f:e6:5d:7a:ce:cf:fc:ae:a1:cd:93:
                    4f:3f:dd:ac:59:e8:84:53:c0:3a:c8:eb:32:5d:4a:
                    c3:df:a3:c1:42:83:a7:c8:b5:8e:85:61:c3:a8:1e:
                    c0:d6:c7:14:d8:aa:b4:e3:b7:79:bd:6c:44:0d:a2:
                    b6:f4:f1:16:9a:7c:57:fe:4f:d1:a6:dc:a6:3a:6c:
                    53:57:ce:01:21:de:22:ed:34:8e:d9:b2:d1:0b:b6:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6B:38:6D:56:68:8E:6F:D0:BF:83:BD:27:07:8E:93:32:E0:D4:8D
            X509v3 Authority Key Identifier:
                keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/DF8D07E8FB7E11EFA25DF775C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:bd:a4:ec:f5:47:a1:b0:56:cb:7d:a7:dc:43:ae:2f:26:4f:
         88:a4:3a:0a:bd:f9:8b:74:db:07:72:94:9d:a7:4d:e0:4a:cf:
         24:60:84:4f:2d:0b:20:f8:67:03:0c:90:95:ac:88:ac:c3:d2:
         c1:56:25:59:27:28:0c:50:0d:67:19:9b:cd:59:43:2b:dd:0f:
         69:04:2e:89:ee:9a:a5:42:d2:36:c2:a8:e1:07:eb:ca:79:1e:
         4f:69:9c:6c:71:8d:24:6e:ec:51:50:e5:69:14:8a:70:1e:b1:
         e3:2b:57:c3:61:69:e3:16:e6:34:d0:ac:ef:97:c6:46:32:eb:
         e1:03:60:f1:fa:89:25:f1:52:1e:5d:d0:6b:0d:ba:da:57:0f:
         c2:a2:15:11:56:c4:9f:26:f9:b8:3c:09:0b:32:bd:10:0d:fd:
         34:25:a2:22:2d:d5:26:16:43:af:ba:32:50:c8:dc:bb:ee:a6:
         6e:b8:48:61:6f:27:e8:79:b5:e4:0a:98:f7:4f:26:34:3e:6f:
         35:dd:f1:a8:22:8d:d3:2f:c9:46:63:cd:69:ee:f1:bc:e0:98:
         82:49:4e:8b:68:cf:cd:b6:1c:a9:94:97:4b:87:c6:73:b4:c9:
         85:02:2e:16:98:37:75:58:b8:b2:36:a5:f9:88:01:ce:fa:81:
         71:5e:9b:33
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB
MjBDRkI1NEMwHhcNMjYwODMwMjA0MDM2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0OTU0NC05M2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA39S77zvuVXOI8oVk+24Mj6mLhMWBo0Gypzc8xSsNmCd2ErAngl/RTEqk6X6C
N3Sz5TehU7a+I7OdbNTzZtjDElINTPWs1SpMTVvnsnljU1Ww3HF8rwdXvBsGSsMU
z++X8iaGTAEx4g7sUTAn8s3APw75Y5zjkeSk0cD/grg/E886NdwNwzPJzB6DHZld
jaP/jKWwShcmHlLY9m+FsB2jzqdt4julTzC4D+Zdes7P/K6hzZNPP92sWeiEU8A6
yOsyXUrD36PBQoOnyLWOhWHDqB7A1scU2Kq047d5vWxEDaK29PEWmnxX/k/Rptym
OmxTV84BId4i7TSO2bLRC7bY4wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNRrOG1W
aI5v0L+DvScHjpMy4NSNMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC
OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjZDMzkvMjdFRUNGRDBCQjk3MTFFQUExQTY2QzUzQzRGOUFFMDIvREY4RDA3RThG
QjdFMTFFRkEyNURGNzc1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9A2AMA0GCSqGSIb3DQEBCwUAA4IBAQDRvaTs9UehsFbLfafc
Q64vJk+IpDoKvfmLdNsHcpSdp03gSs8kYIRPLQsg+GcDDJCVrIisw9LBViVZJygM
UA1nGZvNWUMr3Q9pBC6J7pqlQtI2wqjhB+vKeR5PaZxscY0kbuxRUOVpFIpwHrHj
K1fDYWnjFuY00Kzvl8ZGMuvhA2Dx+okl8VIeXdBrDbraVw/CohURVsSfJvm4PAkL
Mr0QDf00JaIiLdUmFkOvujJQyNy77qZuuEhhbyfoebXkCpj3TyY0Pm813fGoIo3T
L8lGY81p7vG84JiCSU6LaM/NthyplJdLh8ZztMmFAi4WmDd1WLiyNqX5iAHO+oFx
Xpsz
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:03:06 2026 by rpki-client