Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa
File:                     4EE07E481F7F11ECA7242F6CC4F9AE02.roa (raw, json)
Hash identifier:          Bc9bPOXxLa7s5PBO0OfOl7CrgYQeg8aSrLHDflvzJqs=
Subject key identifier:   0B:5C:17:73:8A:CB:94:78:E2:D4:04:29:5A:93:80:B5:9D:1D:BC:8B
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36EE
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:10:45 +0000
ROA not before:           Thu 30 Jul 2026 15:10:45 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134461
IP address blocks:        2405:a000:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14062 (0x36ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:10:45 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b6975-ac5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:5d:2a:fc:6c:84:6f:04:80:fa:b2:26:da:
                    54:dc:b0:41:52:5a:0e:0f:57:9b:10:63:de:ae:d6:
                    bb:52:60:14:bb:8b:1d:8b:3c:21:09:12:c1:8b:77:
                    2b:20:c1:24:19:47:73:28:de:c5:0e:32:cc:58:af:
                    20:35:ce:b4:5b:ce:23:33:1d:c9:2f:33:33:b6:ff:
                    73:5f:aa:43:13:42:4a:e8:cb:0e:1c:75:a9:58:25:
                    49:2b:e5:79:5d:bc:50:79:8d:5c:ae:dc:57:d2:b8:
                    05:4b:0f:ed:ef:fb:7f:e0:6e:27:81:9a:b0:2c:59:
                    1a:31:4c:ee:b7:5a:e3:f5:3d:d4:a5:51:bb:5d:3e:
                    5b:1a:c2:42:47:e6:e8:7f:1e:ff:f8:f3:da:c1:93:
                    60:17:9d:79:e1:13:8b:7c:52:01:f5:3a:e3:97:8f:
                    c4:42:8f:f1:cd:e1:f6:38:b7:de:0e:d7:9f:3b:b6:
                    a7:f6:89:b8:30:80:1e:01:42:7e:ea:f8:bd:1a:0e:
                    21:61:52:a5:81:c1:28:83:d1:96:da:76:d2:b5:67:
                    70:5c:84:0b:47:d8:92:dd:c8:93:e6:70:27:01:16:
                    d2:bf:fd:16:d1:14:b3:07:16:4d:c3:52:ce:02:46:
                    d9:b2:6e:31:43:71:d3:54:3f:4e:58:38:c2:94:bd:
                    c2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5C:17:73:8A:CB:94:78:E2:D4:04:29:5A:93:80:B5:9D:1D:BC:8B
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4EE07E481F7F11ECA7242F6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a000:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:95:87:ab:44:3e:1f:c6:47:36:6f:58:37:37:d5:5b:03:
         27:56:62:92:c5:ad:4c:7c:5a:41:9e:2c:85:cd:1c:5f:c6:c9:
         f0:62:3e:e2:33:7b:92:de:42:69:ad:41:a9:87:6e:14:ca:13:
         c0:c8:9c:18:fc:8b:05:9e:6a:83:39:90:9e:a4:a0:78:78:b7:
         1e:81:ad:18:f3:61:47:0d:3e:db:0a:da:e7:03:c7:32:32:d8:
         86:12:19:8f:4f:fe:4a:70:e7:80:35:ec:4f:2d:1a:85:ee:12:
         bc:5c:10:2b:17:c8:21:90:1e:9a:08:6e:0c:8f:de:fb:48:89:
         08:27:77:4e:b3:94:a9:e3:5f:ed:e5:2d:67:93:93:6b:2b:a2:
         18:e8:ab:62:27:dc:64:b6:9b:4f:c7:87:9b:72:35:90:6b:ee:
         c3:92:5e:3a:08:dc:56:f1:40:d4:f5:74:1e:fb:11:90:db:f4:
         85:e1:fd:d0:9c:de:5b:e8:9e:fd:29:8b:76:49:23:3d:83:74:
         01:07:37:c1:71:01:28:b4:c7:96:0e:47:f7:9a:16:18:74:dc:
         bf:34:7f:64:90:e4:a4:8e:73:22:62:0e:b2:06:98:1f:9a:ba:
         b6:07:3a:38:57:9b:04:3c:7c:c6:b3:2e:a7:f7:6e:55:25:f4:
         c8:da:68:a4
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICNu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjYwNzMwMTUxMDQ1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiNjk3NS1hYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyDNdKvxshG8EgPqyJtpU3LBBUloOD1ebEGPerta7UmAUu4sdizwhCRLBi3cr
IMEkGUdzKN7FDjLMWK8gNc60W84jMx3JLzMztv9zX6pDE0JK6MsOHHWpWCVJK+V5
XbxQeY1crtxX0rgFSw/t7/t/4G4ngZqwLFkaMUzut1rj9T3UpVG7XT5bGsJCR+bo
fx7/+PPawZNgF5154ROLfFIB9Trjl4/EQo/xzeH2OLfeDtefO7an9om4MIAeAUJ+
6vi9Gg4hYVKlgcEog9GW2nbStWdwXIQLR9iS3ciT5nAnARbSv/0W0RSzBxZNw1LO
AkbZsm4xQ3HTVD9OWDjClL3CxwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFAtcF3OK
y5R44tQEKVqTgLWdHbyLMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNEVFMDdFNDgx
RjdGMTFFQ0E3MjQyRjZDQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAWgAAAgMA0GCSqGSIb3DQEBCwUAA4IBAQA3i5WHq0Q+H8ZHNm9Y
NzfVWwMnVmKSxa1MfFpBniyFzRxfxsnwYj7iM3uS3kJprUGph24UyhPAyJwY/IsF
nmqDOZCepKB4eLcega0Y82FHDT7bCtrnA8cyMtiGEhmPT/5KcOeANexPLRqF7hK8
XBArF8ghkB6aCG4Mj977SIkIJ3dOs5Sp41/t5S1nk5NrK6IY6KtiJ9xktptPx4eb
cjWQa+7Dkl46CNxW8UDU9XQe+xGQ2/SF4f3QnN5b6J79KYt2SSM9g3QBBzfBcQEo
tMeWDkf3mhYYdNy/NH9kkOSkjnMiYg6yBpgfmrq2Bzo4V5sEPHzGsy6n925VJfTI
2mik
-----END CERTIFICATE-----
Generated at Sat Sep 19 05:38:45 2026 by rpki-client