Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa
File:                     17A651BCA40E11EEAAB83671C4F9AE02.roa (raw, json)
Hash identifier:          AQCdnyWc2A0RuJ5m4pn2aOSXExDCTyUrz6gNwl8Ipp0=
Subject key identifier:   D6:44:BB:F3:A9:2B:93:C7:AD:CD:ED:19:92:B4:B5:61:88:36:5E:CA
Certificate issuer:       /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial:       063B
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa
Signing time:             Sun 04 Oct 2026 23:44:17 +0000
ROA not before:           Sun 04 Oct 2026 23:44:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     47869
IP address blocks:        2401:df40:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 22:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
        Validity
            Not Before: Oct  4 23:44:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac2e4d0-b230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:57:c8:87:0c:95:87:ec:3a:c9:8f:35:8b:c5:
                    58:1f:5e:a2:bc:7e:98:07:e9:66:67:41:76:ee:cc:
                    90:8b:47:86:d2:98:5a:a7:cc:2d:9a:5d:b4:8e:cd:
                    0f:f9:cf:fb:e9:3f:72:6f:9a:53:80:93:7a:0c:f8:
                    e3:7f:d4:a6:17:db:de:a9:07:fe:b0:90:87:bc:c5:
                    52:45:0c:3f:f7:35:3a:22:ce:72:e4:68:0e:d7:e9:
                    1e:b7:45:45:6b:fb:be:c5:58:49:fe:14:0a:3a:42:
                    0b:1b:10:c4:5b:3a:7c:4c:d5:bd:70:27:9f:64:d1:
                    85:25:33:01:6a:a6:40:c2:ff:1b:ec:63:6a:7f:75:
                    05:6d:47:ab:ff:23:da:67:c8:b4:ee:bd:70:c9:a2:
                    69:a5:0d:42:82:2a:9f:47:8a:bc:6f:fa:2f:5a:75:
                    8f:64:f2:48:07:f1:01:e0:7d:2f:0c:06:eb:ef:2d:
                    db:7e:b2:c2:a2:a5:75:33:45:a4:fe:5f:f7:ce:a6:
                    6e:65:b7:94:0b:0b:5a:46:24:4f:98:18:5b:5f:c6:
                    9f:4d:66:55:91:c0:23:a1:98:ce:77:14:35:45:22:
                    9b:dc:5c:99:b5:3e:2b:9c:01:d2:1f:d1:10:26:5d:
                    ad:63:f1:78:3e:6d:08:bf:7c:9a:57:4b:1a:0e:a1:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:44:BB:F3:A9:2B:93:C7:AD:CD:ED:19:92:B4:B5:61:88:36:5E:CA
            X509v3 Authority Key Identifier:
                keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/17A651BCA40E11EEAAB83671C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:df40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:1a:09:1f:b5:f5:da:66:b3:26:22:76:64:e1:58:d6:d7:91:
         c2:08:03:d4:de:40:8c:c8:a5:05:4a:f0:d8:a0:83:03:1e:df:
         84:9d:74:1e:66:e0:2e:21:97:78:fd:e8:b6:78:e5:9f:db:28:
         6e:0b:56:37:90:f0:78:ad:0d:04:2e:ea:2a:99:a8:ad:f0:a9:
         31:03:28:8f:47:2f:b4:8e:fd:b0:bd:c5:3a:f5:2d:ea:dd:de:
         fa:04:f2:16:52:95:83:6b:43:00:76:c7:f6:3d:53:f6:76:b9:
         3e:41:2a:d1:b8:ff:f1:d3:a9:fe:18:2d:10:bb:9c:e4:65:9a:
         aa:2e:9f:55:fa:10:f2:e2:bd:8c:fe:ff:85:69:8d:ec:db:f8:
         c3:9f:3b:6b:64:52:d5:6e:99:50:89:34:d6:f2:a5:9f:e0:0f:
         8b:f3:b2:d5:35:db:42:92:d6:bc:a9:60:20:5a:59:05:ac:b5:
         2b:42:b8:84:dd:42:94:58:b6:b3:d5:8a:de:a2:be:51:b3:c4:
         c5:e7:13:7d:2a:9f:60:be:12:76:42:77:54:cc:cb:b4:72:b1:
         67:44:93:ae:75:6f:31:16:5d:00:95:b6:76:91:6e:aa:0c:69:
         27:a3:91:3b:e7:5b:e4:8b:71:bc:a4:14:a3:6d:57:59:16:cd:
         da:ce:c4:36
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB
N0U1QTU1MzcwHhcNMjYxMDA0MjM0NDE3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyZTRkMC1iMjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA71fIhwyVh+w6yY81i8VYH16ivH6YB+lmZ0F27syQi0eG0phap8wtml20js0P
+c/76T9yb5pTgJN6DPjjf9SmF9veqQf+sJCHvMVSRQw/9zU6Is5y5GgO1+ket0VF
a/u+xVhJ/hQKOkILGxDEWzp8TNW9cCefZNGFJTMBaqZAwv8b7GNqf3UFbUer/yPa
Z8i07r1wyaJppQ1CgiqfR4q8b/ovWnWPZPJIB/EB4H0vDAbr7y3bfrLCoqV1M0Wk
/l/3zqZuZbeUCwtaRiRPmBhbX8afTWZVkcAjoZjOdxQ1RSKb3FyZtT4rnAHSH9EQ
Jl2tY/F4Pm0Iv3yaV0saDqFneQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNZEu/Op
K5PHrc3tGZK0tWGINl7KMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF
QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU0QjcvRUIzMTJGMDIxRUFBMTFFQ0I3NTZCRjMwQzRGOUFFMDIvMTdBNjUxQkNB
NDBFMTFFRUFBQjgzNjcxQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAHfQAABMA0GCSqGSIb3DQEBCwUAA4IBAQAZGgkftfXaZrMmInZk
4VjW15HCCAPU3kCMyKUFSvDYoIMDHt+EnXQeZuAuIZd4/ei2eOWf2yhuC1Y3kPB4
rQ0ELuoqmait8KkxAyiPRy+0jv2wvcU69S3q3d76BPIWUpWDa0MAdsf2PVP2drk+
QSrRuP/x06n+GC0Qu5zkZZqqLp9V+hDy4r2M/v+FaY3s2/jDnztrZFLVbplQiTTW
8qWf4A+L87LVNdtCkta8qWAgWlkFrLUrQriE3UKUWLaz1Yreor5Rs8TF5xN9Kp9g
vhJ2QndUzMu0crFnRJOudW8xFl0AlbZ2kW6qDGkno5E751vki3G8pBSjbVdZFs3a
zsQ2
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:38 2026 by rpki-client