Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
File:                     E1ADA4BC062B11F08449516EC4F9AE02.roa (raw, json)
Hash identifier:          dU1yskZMlQoOBOEUim7mpkF90uQM5P4GdS9XBXL5d6Y=
Subject key identifier:   52:15:98:F3:42:18:62:6C:F0:19:63:DD:E2:61:C4:2F:AD:73:48:34
Certificate issuer:       /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial:       1782
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
Signing time:             Fri 16 Oct 2026 17:30:04 +0000
ROA not before:           Fri 16 Oct 2026 17:30:04 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     134963
IP address blocks:        2401:8680:4000::/40 maxlen: 48
                          2401:8680:4100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
                          rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 16:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6018 (0x1782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
        Validity
            Not Before: Oct 16 17:30:04 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad25f1c-1bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:9e:90:6b:b3:34:88:04:12:bb:bd:1e:d1:
                    80:7f:67:74:29:88:5e:95:16:c7:af:5f:ed:1d:25:
                    dd:a6:b4:76:a1:cf:2e:16:13:31:39:91:7c:d9:97:
                    2e:5e:3c:ff:1f:df:80:5a:22:e2:2b:36:bf:a2:69:
                    92:86:d9:0d:53:9f:02:73:73:d8:d0:38:38:04:1d:
                    8f:65:d3:75:52:f0:e7:a6:c0:86:27:0a:ef:cc:1a:
                    95:02:d5:78:2a:ba:13:f9:fa:86:f1:25:d4:60:18:
                    58:0e:23:7a:8a:24:28:d1:a9:d3:58:9a:91:cf:8b:
                    da:49:e3:a6:bb:ce:5d:96:61:be:75:58:71:de:80:
                    a3:dc:ef:46:5a:0e:ca:48:89:28:c8:10:2b:5a:69:
                    53:7a:96:d4:c8:dc:b6:54:73:61:b1:d1:86:df:29:
                    d9:48:7d:07:98:3b:b0:2f:9b:60:a0:b5:14:f1:db:
                    57:73:24:64:a5:34:97:c1:7f:6c:37:32:c2:67:d5:
                    04:26:45:14:6a:93:9e:94:91:c2:af:58:09:97:81:
                    26:2b:51:61:d8:0f:c1:75:43:26:78:08:3c:e4:10:
                    ba:c1:85:33:d0:5b:c4:8e:cf:d9:d2:7f:2b:d6:c8:
                    b8:ed:33:f0:37:57:15:2c:01:a5:5a:97:e5:10:a2:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:98:F3:42:18:62:6C:F0:19:63:DD:E2:61:C4:2F:AD:73:48:34
            X509v3 Authority Key Identifier:
                keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8680:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         67:40:d2:47:37:f9:0a:ef:a3:aa:79:57:37:40:ae:69:eb:ec:
         d9:36:e4:b4:59:c7:76:82:69:af:49:a0:ca:e0:1d:64:49:01:
         b1:6f:95:fa:40:fd:d3:8d:80:d9:4b:34:8b:cf:a9:dc:45:b5:
         bc:31:f0:bd:33:2d:8e:4f:5b:0a:40:ee:cb:a9:6f:fa:e0:5e:
         e9:e5:25:fd:d3:34:bb:ff:e8:12:40:9a:92:7a:7f:1e:e0:ba:
         83:f4:9b:1d:64:78:70:09:3c:66:74:05:eb:13:62:0b:72:8e:
         e4:96:22:89:a4:fe:37:f7:14:77:6d:b2:b3:f8:a7:51:ae:4b:
         53:f9:69:07:c5:45:ab:72:f1:09:c0:39:a3:51:d5:3a:2f:c3:
         9a:c0:dc:61:d2:84:79:13:af:58:38:0a:cb:9e:a9:af:07:9f:
         24:f4:3b:ec:95:50:23:28:79:e8:b8:4a:b6:f4:28:9d:bf:4e:
         15:31:94:7b:c9:30:19:b2:91:7e:9d:c7:6d:1b:f9:81:c1:d0:
         3c:15:7b:b0:d9:2a:18:58:46:6d:d4:8a:c4:03:f7:02:70:86:
         98:6b:0a:3d:60:5f:51:8a:11:f2:f1:e5:34:2e:c2:d3:3c:92:
         d2:70:5c:c5:79:4c:c5:74:81:3b:b7:8d:80:13:e3:ac:9a:c9:
         56:19:92:b4
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICF4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3
M0IwNDdCMTkwHhcNMjYxMDE2MTczMDA0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQyNWYxYy0xYmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApA+ekGuzNIgEEru9HtGAf2d0KYhelRbHr1/tHSXdprR2oc8uFhMxOZF82Zcu
Xjz/H9+AWiLiKza/ommShtkNU58Cc3PY0Dg4BB2PZdN1UvDnpsCGJwrvzBqVAtV4
KroT+fqG8SXUYBhYDiN6iiQo0anTWJqRz4vaSeOmu85dlmG+dVhx3oCj3O9GWg7K
SIkoyBArWmlTepbUyNy2VHNhsdGG3ynZSH0HmDuwL5tgoLUU8dtXcyRkpTSXwX9s
NzLCZ9UEJkUUapOelJHCr1gJl4EmK1Fh2A/BdUMmeAg85BC6wYUz0FvEjs/Z0n8r
1si47TPwN1cVLAGlWpflEKIJ1wIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFFIVmPNC
GGJs8Blj3eJhxC+tc0g0MB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB
NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc0NjUvQjFBRkI2RkEwQTUzMTFFOEFDN0JFRTJFQzRGOUFFMDIvRTFBREE0QkMw
NjJCMTFGMDg0NDk1MTZFQzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYBJAGGgEAwDQYJKoZIhvcNAQELBQADggEBAGdA0kc3+Qrvo6p5VzdA
rmnr7Nk25LRZx3aCaa9JoMrgHWRJAbFvlfpA/dONgNlLNIvPqdxFtbwx8L0zLY5P
WwpA7supb/rgXunlJf3TNLv/6BJAmpJ6fx7guoP0mx1keHAJPGZ0BesTYgtyjuSW
Iomk/jf3FHdtsrP4p1GuS1P5aQfFRaty8QnAOaNR1Tovw5rA3GHShHkTr1g4Csue
qa8HnyT0O+yVUCMoeei4Srb0KJ2/ThUxlHvJMBmykX6dx20b+YHB0DwVe7DZKhhY
Rm3UisQD9wJwhphrCj1gX1GKEfLx5TQuwtM8ktJwXMV5TMV0gTu3jYAT46yayVYZ
krQ=
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:58:44 2026 by rpki-client