Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/F1E4BDE86DD111F1B51930CDB3EE528E.roa
File:                     F1E4BDE86DD111F1B51930CDB3EE528E.roa (raw, json)
Hash identifier:          5UiDdvpjqhadflen0HJJc1fnXaHb/zbysX/iVQMv5M8=
Subject key identifier:   19:BD:D0:C5:67:AC:F3:9C:90:5D:E8:BC:68:8B:46:2D:29:DB:A7:64
Certificate issuer:       /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
Certificate serial:       0207
Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/F1E4BDE86DD111F1B51930CDB3EE528E.roa
Signing time:             Mon 22 Jun 2026 00:33:10 +0000
ROA not before:           Mon 22 Jun 2026 00:33:10 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133131
IP address blocks:        2001:df2:c340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl
                          rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 03:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B
        Validity
            Not Before: Jun 22 00:33:10 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a3882c6-1905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:fa:43:8f:14:31:2b:8a:28:05:ed:e7:9f:
                    9c:d8:9c:50:78:da:0b:60:08:38:8c:10:84:56:5d:
                    a8:e1:94:27:67:24:f9:0d:5d:8e:1d:87:e1:db:f3:
                    07:23:72:7d:4a:80:10:b4:b8:90:b7:44:2d:5d:4a:
                    a2:2d:0a:cd:c6:95:20:fa:49:36:70:0c:7e:9a:5d:
                    24:4e:8a:d5:0f:04:f9:3d:54:a8:58:5a:96:60:20:
                    5e:88:12:13:ac:ac:b0:85:b9:12:be:c1:7a:ae:36:
                    58:0e:33:57:f4:5d:21:1e:75:39:b5:5a:54:36:12:
                    f4:cc:9e:8a:15:4e:76:46:e9:87:36:a5:28:f5:3b:
                    e7:7d:27:e5:66:49:20:44:52:04:61:5f:9d:7e:33:
                    e4:cd:df:63:15:4b:c5:e8:b6:0f:02:25:e2:24:3b:
                    1b:8d:a3:4c:8c:03:0c:61:de:80:0d:3e:1e:ff:a7:
                    3b:23:a5:d9:17:f8:f2:46:0c:a1:91:b3:e4:22:2c:
                    79:97:65:48:29:94:6e:47:54:27:44:88:9a:84:bd:
                    e7:70:5c:d8:10:32:4a:c6:86:ff:62:82:80:44:29:
                    54:0d:ab:de:65:6f:06:4f:05:fe:17:2e:9c:e8:d0:
                    11:5f:93:b1:7e:2a:e8:8d:b8:a4:9c:2a:51:87:b6:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:D0:C5:67:AC:F3:9C:90:5D:E8:BC:68:8B:46:2D:29:DB:A7:64
            X509v3 Authority Key Identifier:
                keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/F1E4BDE86DD111F1B51930CDB3EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:c340::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:e9:0b:b6:ce:c0:46:3e:b0:c8:c6:67:47:9f:52:b1:21:0c:
         b4:08:ae:8f:d3:bc:5a:12:04:d4:5b:85:02:d3:cc:ba:48:3d:
         7a:cd:30:94:2f:83:02:58:6f:ab:95:d6:3d:09:8f:2e:ec:af:
         d7:3d:f8:9f:31:44:63:d1:86:0d:94:53:98:a9:0c:cd:eb:96:
         c7:83:d4:9c:a5:94:e7:86:5c:72:5f:34:68:b3:ab:a2:cd:30:
         b9:e2:2f:ef:19:18:96:4d:62:02:92:ad:4b:84:86:a9:ee:5a:
         2f:fc:73:46:12:b2:32:cf:a7:b3:b7:f7:91:5b:59:e0:07:e6:
         6e:38:70:49:dd:3c:f9:55:47:a8:c9:0d:c9:c9:83:60:41:2b:
         a7:b1:84:86:dd:57:97:59:38:6e:90:10:1a:9a:84:3a:12:b4:
         45:f3:54:89:cb:da:d3:03:29:4a:ca:42:16:03:fa:ad:81:5b:
         a1:58:95:5a:b2:00:56:88:69:22:aa:de:01:05:86:ed:ed:fd:
         69:1b:d0:fb:55:d3:ab:2e:9f:58:7f:1c:1a:8d:8e:9d:0d:6b:
         7e:2a:d7:b5:ad:dc:72:13:08:44:f8:29:01:c1:3b:32:01:1a:
         cc:77:b5:51:4a:0a:12:a5:0f:a2:99:ea:8d:a9:2d:40:3a:7e:
         a9:1e:89:b3
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw
QzA2OUMzMkIwHhcNMjYwNjIyMDAzMzEwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM4ODJjNi0xOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnj6Q48UMSuKKAXt55+c2JxQeNoLYAg4jBCEVl2o4ZQnZyT5DV2OHYfh2/MH
I3J9SoAQtLiQt0QtXUqiLQrNxpUg+kk2cAx+ml0kTorVDwT5PVSoWFqWYCBeiBIT
rKywhbkSvsF6rjZYDjNX9F0hHnU5tVpUNhL0zJ6KFU52RumHNqUo9TvnfSflZkkg
RFIEYV+dfjPkzd9jFUvF6LYPAiXiJDsbjaNMjAMMYd6ADT4e/6c7I6XZF/jyRgyh
kbPkIix5l2VIKZRuR1QnRIiahL3ncFzYEDJKxob/YoKARClUDaveZW8GTwX+Fy6c
6NARX5OxfirojbiknCpRh7YtuwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBm90MVn
rPOckF3ovGiLRi0p26dkMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx
QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTM5NEIvMTBBQ0FCMEE2MUI0MTFFRTgwQ0UxODQ2QzRGOUFFMDIvRjFFNEJERTg2
REQxMTFGMUI1MTkzMENEQjNFRTUyOEUucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8sNAMA0GCSqGSIb3DQEBCwUAA4IBAQA+6Qu2zsBGPrDIxmdH
n1KxIQy0CK6P07xaEgTUW4UC08y6SD16zTCUL4MCWG+rldY9CY8u7K/XPfifMURj
0YYNlFOYqQzN65bHg9ScpZTnhlxyXzRos6uizTC54i/vGRiWTWICkq1LhIap7lov
/HNGErIyz6ezt/eRW1ngB+ZuOHBJ3Tz5VUeoyQ3JyYNgQSunsYSG3VeXWThukBAa
moQ6ErRF81SJy9rTAylKykIWA/qtgVuhWJVasgBWiGkiqt4BBYbt7f1pG9D7VdOr
Lp9YfxwajY6dDWt+Kte1rdxyEwhE+CkBwTsyARrMd7VRSgoSpQ+imeqNqS1AOn6p
Homz
-----END CERTIFICATE-----
Generated at Wed Jun 24 12:31:20 2026 by rpki-client