Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/8C3BBD78F0D611EDAF996E15C4F9AE02.roa
File:                     8C3BBD78F0D611EDAF996E15C4F9AE02.roa (raw, json)
Hash identifier:          ugAdyITyl3jjkM5TSX/sl89uA0LzGbZjsV8crXd5c5E=
Subject key identifier:   F0:01:23:B4:D2:06:33:9C:47:9A:1F:1D:9E:D6:04:27:46:8D:50:47
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       195D
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/8C3BBD78F0D611EDAF996E15C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:32:46 +0000
ROA not before:           Sun 30 Aug 2026 16:32:46 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38910
IP address blocks:        2407:e500:40::/43 maxlen: 43
                          2407:e500:40::/47 maxlen: 47
                          2407:e500:50::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 16:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6493 (0x195d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Aug 30 16:32:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a945b2e-9e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:fd:79:12:e8:26:40:19:61:71:2b:68:eb:
                    65:c8:a3:58:3b:db:1f:a1:ff:9c:26:71:5a:da:93:
                    85:9d:8a:aa:92:3f:30:d0:42:01:66:da:0b:b2:dd:
                    47:19:f8:3a:7c:95:79:97:b2:44:ee:19:44:48:53:
                    04:c5:88:75:ca:33:52:6d:92:e0:80:bc:78:7a:13:
                    8a:77:28:e5:27:d2:bc:17:a9:3c:68:65:81:97:bf:
                    8a:f8:72:fa:27:d1:66:fa:4e:ef:d1:27:fd:48:32:
                    88:cd:27:a4:96:b6:cd:5a:4f:58:30:2b:9d:7d:7f:
                    2e:d6:f3:1b:b5:8b:ee:fc:60:b5:c3:27:18:f1:67:
                    42:7a:a5:83:a0:58:38:6c:63:0e:a0:e6:09:87:54:
                    df:28:96:7d:0e:7c:88:11:5d:59:68:7d:f3:3a:8e:
                    c7:bd:2e:34:80:05:ae:e5:af:a5:2f:d5:54:34:0b:
                    ea:51:79:35:63:cb:38:9a:b1:0e:57:50:96:e0:e3:
                    eb:eb:92:e2:41:5c:65:72:90:e0:4f:67:8f:fd:89:
                    8d:a3:88:8d:a6:ce:9d:01:23:a5:9f:1e:71:97:d8:
                    0b:35:61:c9:58:55:55:e2:68:63:c1:53:db:5e:70:
                    8e:f4:8f:eb:fe:e3:a5:0c:ed:12:93:c3:af:f1:c3:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:01:23:B4:D2:06:33:9C:47:9A:1F:1D:9E:D6:04:27:46:8D:50:47
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/8C3BBD78F0D611EDAF996E15C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:e500:40::/43

    Signature Algorithm: sha256WithRSAEncryption
         a8:b5:0e:32:48:43:4c:49:19:a1:03:f0:d7:5f:a3:85:41:59:
         c3:f7:ff:94:e5:35:ef:69:86:9b:8e:af:2c:14:47:72:de:b2:
         a2:56:cc:22:96:f0:19:52:c3:d4:03:10:49:5e:23:18:1c:eb:
         aa:7f:ab:5e:1a:1b:77:51:c9:ed:02:30:42:eb:c0:11:49:18:
         d3:f6:d5:14:d6:96:97:10:4a:8b:ae:07:b5:10:6a:13:5d:99:
         c0:c0:f6:b9:e1:cd:8e:09:3f:d1:09:b0:08:07:6f:28:3f:71:
         13:f3:cc:6d:df:6c:9d:06:17:72:bb:fd:af:92:15:4b:be:b7:
         96:77:81:29:70:86:99:73:cd:23:f0:d1:b5:8e:7d:43:63:eb:
         ac:16:10:7b:f0:94:5d:8b:2f:6c:9d:f2:a4:e1:cc:70:b7:26:
         d6:de:7b:bb:7a:84:99:27:5f:50:a0:8c:29:b8:d4:2b:9f:30:
         8b:65:a9:15:99:a4:b4:dd:2b:c0:46:63:59:59:30:db:75:50:
         a8:02:a9:e4:5d:90:1c:ef:a7:63:b2:40:e5:61:4d:1a:4a:a2:
         50:84:db:0f:a7:79:82:16:a2:17:ec:83:53:03:82:33:09:0a:
         38:45:de:b0:f3:6a:5b:cd:a4:eb:30:59:60:1f:e9:da:13:69:
         29:d8:01:b8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICGV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG
NjQyNDZDN0MwHhcNMjYwODMwMTYzMjQ2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NWIyZS05ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnSP9eRLoJkAZYXEraOtlyKNYO9sfof+cJnFa2pOFnYqqkj8w0EIBZtoLst1H
Gfg6fJV5l7JE7hlESFMExYh1yjNSbZLggLx4ehOKdyjlJ9K8F6k8aGWBl7+K+HL6
J9Fm+k7v0Sf9SDKIzSeklrbNWk9YMCudfX8u1vMbtYvu/GC1wycY8WdCeqWDoFg4
bGMOoOYJh1TfKJZ9DnyIEV1ZaH3zOo7HvS40gAWu5a+lL9VUNAvqUXk1Y8s4mrEO
V1CW4OPr65LiQVxlcpDgT2eP/YmNo4iNps6dASOlnx5xl9gLNWHJWFVV4mhjwVPb
XnCO9I/r/uOlDO0Sk8Ov8cMbWQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPABI7TS
BjOcR5ofHZ7WBCdGjVBHMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB
OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQzNkEvMzdBQkQ3MDhBQTlBMTFFN0JBQzQxMjUyQzRGOUFFMDIvOEMzQkJENzhG
MEQ2MTFFREFGOTk2RTE1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcFJAflAABAMA0GCSqGSIb3DQEBCwUAA4IBAQCotQ4ySENMSRmhA/DX
X6OFQVnD9/+U5TXvaYabjq8sFEdy3rKiVswilvAZUsPUAxBJXiMYHOuqf6teGht3
UcntAjBC68ARSRjT9tUU1paXEEqLrge1EGoTXZnAwPa54c2OCT/RCbAIB28oP3ET
88xt32ydBhdyu/2vkhVLvreWd4EpcIaZc80j8NG1jn1DY+usFhB78JRdiy9snfKk
4cxwtybW3nu7eoSZJ19QoIwpuNQrnzCLZakVmaS03SvARmNZWTDbdVCoAqnkXZAc
76djskDlYU0aSqJQhNsPp3mCFqIX7INTA4IzCQo4Rd6w82pbzaTrMFlgH+naE2kp
2AG4
-----END CERTIFICATE-----
Generated at Mon Aug 31 12:15:43 2026 by rpki-client