Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa
File:                     49FB21A25C8011F0ABC6993DC4F9AE02.roa (raw, json)
Hash identifier:          TcqgQuTUKwk/8My9FRNGi7Q5iljemvXvrhjSAEqGUSM=
Subject key identifier:   5C:E6:C9:F6:04:0E:81:F8:78:86:E9:16:7A:15:C7:B3:73:4B:2E:3E
Certificate issuer:       /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Certificate serial:       C0
Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa
Signing time:             Thu 09 Jul 2026 09:35:21 +0000
ROA not before:           Thu 09 Jul 2026 09:35:21 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153995
IP address blocks:        2402:1260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
                          rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
        Validity
            Not Before: Jul  9 09:35:21 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4f6b58-4dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:9a:b2:1c:de:b0:43:1a:0a:e4:2f:ee:39:
                    81:a9:b9:c2:cb:4d:ec:21:d4:8c:05:88:3d:48:5f:
                    c4:b3:a8:d4:a4:13:61:f3:17:5f:75:cf:e3:d0:e9:
                    da:34:cc:fb:bb:04:c9:f1:6e:e2:5a:8f:17:7b:46:
                    2b:ce:76:11:70:3f:e0:35:28:46:07:6d:5b:5c:11:
                    9a:3a:6c:44:5a:04:9e:2d:6a:b3:f8:ee:ff:02:cb:
                    ed:1c:e9:b5:60:b2:c8:da:5a:db:11:a5:6f:e1:d9:
                    f6:a1:9e:88:03:a9:92:38:b2:70:86:a9:dd:31:3c:
                    c0:26:12:5b:2a:47:26:8b:ed:e4:e1:ee:15:ac:30:
                    19:1e:68:63:e9:3d:5f:f4:e9:28:46:22:e1:20:24:
                    96:d9:c6:31:7e:1c:91:3a:9a:54:ef:2d:0e:23:dc:
                    94:52:eb:bc:d4:29:c1:26:c8:6a:74:53:97:8b:e9:
                    d8:b7:31:83:c3:43:e3:59:3f:19:a1:8d:42:9b:62:
                    d2:fe:0c:ed:b2:1d:fc:47:81:a3:9f:19:77:67:74:
                    4e:41:e1:6e:31:05:79:07:32:46:b7:05:fb:fc:ee:
                    0b:66:12:50:56:59:6c:8b:47:b9:df:9a:bb:77:6a:
                    71:74:a6:23:68:5e:eb:24:41:0b:2c:72:43:3b:29:
                    4b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E6:C9:F6:04:0E:81:F8:78:86:E9:16:7A:15:C7:B3:73:4B:2E:3E
            X509v3 Authority Key Identifier:
                keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/49FB21A25C8011F0ABC6993DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1260::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:4c:54:87:8d:f0:6d:79:2b:2d:bf:a3:0e:a7:de:97:18:
         c9:b0:18:18:18:2d:75:84:65:dd:1f:86:41:47:6f:5f:83:4e:
         90:27:38:76:61:93:9d:2f:c5:f0:02:d5:f4:92:56:9e:4a:85:
         96:b2:a9:b9:2c:8e:5a:df:2c:b3:14:0b:19:c6:d5:bf:62:e0:
         49:4d:f1:57:c7:bc:1e:2a:ee:bf:8a:63:9f:44:40:6b:6f:69:
         3a:f6:60:91:e7:82:b8:24:cc:32:8c:5e:7e:3e:a5:aa:29:1d:
         10:0b:33:48:0c:55:50:f3:6e:02:8c:ac:17:13:57:e5:c7:86:
         29:24:25:bc:51:08:ba:57:40:e8:28:ce:ea:e4:d6:8d:f1:95:
         01:a6:ce:fb:ea:b8:b9:6b:d5:1e:4e:7e:e6:b9:94:50:31:44:
         9d:ce:54:74:89:1a:6c:47:0c:31:46:40:e8:09:7f:4e:98:f5:
         20:06:58:14:9f:9b:dc:d3:40:03:e9:22:0f:fc:c4:4e:99:cf:
         ae:33:fa:f2:2a:18:c7:a9:f5:b3:e9:70:d1:56:d9:72:0a:8f:
         99:2e:ed:0e:f5:7d:89:2d:6e:a6:53:b8:df:9a:b2:b9:0f:e7:
         4c:2f:6b:7b:78:03:19:f9:12:ff:d5:ce:55:67:ac:5b:f3:ee:
         a1:b1:ee:27
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc3QTYxMTAvBgNVBAUTKEU1NEM3RTE2NTNEMDEzNDI0MjIyQzNCOTM2OEEyMTNC
QTUxMTVDRTMwHhcNMjYwNzA5MDkzNTIxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmNmI1OC00ZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Q6ashzesEMaCuQv7jmBqbnCy03sIdSMBYg9SF/Es6jUpBNh8xdfdc/j0Ona
NMz7uwTJ8W7iWo8Xe0YrznYRcD/gNShGB21bXBGaOmxEWgSeLWqz+O7/AsvtHOm1
YLLI2lrbEaVv4dn2oZ6IA6mSOLJwhqndMTzAJhJbKkcmi+3k4e4VrDAZHmhj6T1f
9OkoRiLhICSW2cYxfhyROppU7y0OI9yUUuu81CnBJshqdFOXi+nYtzGDw0PjWT8Z
oY1Cm2LS/gztsh38R4Gjnxl3Z3ROQeFuMQV5BzJGtwX7/O4LZhJQVllsi0e535q7
d2pxdKYjaF7rJEELLHJDOylL8QIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFFzmyfYE
DoH4eIbpFnoVx7NzSy4+MB8GA1UdIwQYMBaAFOVMfhZT0BNCQiLDuTaKITulEVzj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzdBNi9DOTJDMzlBRTVD
N0UxMUYwQTVDMzYwMzZDNEY5QUUwMi81VXgtRmxQUUUwSkNJc081Tm9vaE82VVJY
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVVeC1GbFBRRTBKQ0lzTzVOb29oTzZVUlhPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc3QTYvQzkyQzM5QUU1QzdFMTFGMEE1QzM2MDM2QzRGOUFFMDIvNDlGQjIxQTI1
QzgwMTFGMEFCQzY5OTNEQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAISYDANBgkqhkiG9w0BAQsFAAOCAQEAGftMVIeN8G15Ky2/ow6n
3pcYybAYGBgtdYRl3R+GQUdvX4NOkCc4dmGTnS/F8ALV9JJWnkqFlrKpuSyOWt8s
sxQLGcbVv2LgSU3xV8e8Hiruv4pjn0RAa29pOvZgkeeCuCTMMoxefj6lqikdEAsz
SAxVUPNuAoysFxNX5ceGKSQlvFEIuldA6CjO6uTWjfGVAabO++q4uWvVHk5+5rmU
UDFEnc5UdIkabEcMMUZA6Al/Tpj1IAZYFJ+b3NNAA+kiD/zETpnPrjP68ioYx6n1
s+lw0VbZcgqPmS7tDvV9iS1uplO435qyuQ/nTC9re3gDGfkS/9XOVWesW/PuobHu
Jw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:11:33 2026 by rpki-client