Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa
File:                     45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (raw, json)
Hash identifier:          YFagb40AbqmE67WpsPHQQlwPOv44QLtDjwGBLFO+SMg=
Subject key identifier:   9D:F2:55:D5:3B:DF:68:1E:2C:CD:81:2B:D7:A4:79:F2:41:F6:5B:4A
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0FA2
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa
Signing time:             Wed 02 Sep 2026 18:36:01 +0000
ROA not before:           Wed 02 Sep 2026 18:36:01 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     9516
IP address blocks:        2405:84c0:ff20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4002 (0xfa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Sep  2 18:36:01 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a986c91-6559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:2f:73:7b:5c:f4:db:1d:18:7f:2b:cc:d5:
                    db:93:2c:32:84:12:ad:b5:37:00:5e:a8:3b:4b:e2:
                    4d:6b:53:fd:2b:8c:d4:83:0b:7f:6a:30:1e:89:ef:
                    65:9a:2a:e5:e5:4a:71:a6:0d:78:98:2f:35:b6:1e:
                    b1:7c:28:93:5b:06:52:44:76:a0:a1:0a:09:49:de:
                    58:07:f4:76:04:f8:78:74:ed:c9:a6:4b:ec:14:8c:
                    f1:3b:21:e8:b4:2a:0b:ea:f1:19:be:69:ac:4d:7c:
                    12:e8:85:96:4e:d6:8d:57:2b:c4:e9:f1:4c:e2:3e:
                    55:8c:fd:41:4e:ca:56:d1:c1:b3:f6:ef:9c:b3:39:
                    fd:07:dd:8a:65:19:38:0b:53:c1:a7:74:05:ac:bc:
                    17:0b:03:34:23:4a:f2:3b:37:57:30:66:3a:8f:cd:
                    59:23:f4:16:2f:99:90:67:79:d3:8a:c4:e9:4b:db:
                    a6:df:39:4c:47:4f:85:b1:f5:e1:e2:db:13:4e:21:
                    a8:5a:78:44:dc:d7:55:09:b3:7e:ca:4d:cb:fb:1e:
                    3b:5c:6e:53:8b:d2:7e:eb:55:5c:b1:20:ab:b1:53:
                    8f:7f:43:02:5c:af:e0:d1:a3:30:b2:36:6f:fd:54:
                    a5:65:fb:fa:47:cd:ca:6f:ba:65:85:1a:8b:df:51:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F2:55:D5:3B:DF:68:1E:2C:CD:81:2B:D7:A4:79:F2:41:F6:5B:4A
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:84c0:ff20::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:89:0d:b8:d0:0b:61:ef:99:2f:68:14:57:9f:69:8a:d0:47:
         2a:77:c4:d0:33:b6:6b:72:0f:ce:87:d2:29:b3:e2:41:f5:fb:
         c8:3e:5c:36:e9:95:4e:9d:7f:87:53:36:01:6c:01:fa:41:bb:
         e2:b9:02:5b:2a:f7:e4:c1:e9:9d:c6:5d:81:80:a1:3b:d9:c8:
         9e:56:fc:55:d4:7f:2e:62:c8:07:7d:a6:82:68:d8:6c:14:b9:
         67:ea:7a:99:71:b9:83:53:05:a4:ff:35:98:90:40:5a:51:11:
         16:27:a2:a0:64:83:b7:cc:95:25:55:84:c4:c9:80:fa:99:e3:
         b4:bf:7c:39:f1:d5:fd:88:e4:ea:d0:90:29:11:ea:a0:b0:05:
         fb:79:56:e1:de:4b:30:2b:3c:38:7c:79:28:1a:45:4c:16:49:
         10:b5:52:18:de:0a:06:7b:df:b4:97:de:72:65:2c:d3:56:41:
         58:88:f3:d4:4e:da:94:e5:75:db:8e:ef:9b:10:e3:9a:32:9b:
         9e:54:b0:a7:f2:17:f5:46:6a:1a:8d:60:ef:98:db:d4:70:73:
         45:3e:53:a2:53:da:35:d2:10:28:3f:9a:bf:01:13:53:b6:8d:
         52:da:69:af:9d:04:da:01:c8:5f:38:48:b5:fc:e4:29:69:47:
         9f:8a:71:73
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICD6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRDNjAxMTAvBgNVBAUTKDlFRjlFNDM3NkUzNjY1MzI3NUM3OTYzNTk4RDZCNDVC
NzBBRjgwOTkwHhcNMjYwOTAyMTgzNjAxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4NmM5MS02NTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8svc3tc9NsdGH8rzNXbkywyhBKttTcAXqg7S+JNa1P9K4zUgwt/ajAeie9l
mirl5Upxpg14mC81th6xfCiTWwZSRHagoQoJSd5YB/R2BPh4dO3JpkvsFIzxOyHo
tCoL6vEZvmmsTXwS6IWWTtaNVyvE6fFM4j5VjP1BTspW0cGz9u+cszn9B92KZRk4
C1PBp3QFrLwXCwM0I0ryOzdXMGY6j81ZI/QWL5mQZ3nTisTpS9um3zlMR0+FsfXh
4tsTTiGoWnhE3NdVCbN+yk3L+x47XG5Ti9J+61VcsSCrsVOPf0MCXK/g0aMwsjZv
/VSlZfv6R83Kb7plhRqL31EtiQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJ3yVdU7
32geLM2BK9ekefJB9ltKMB8GA1UdIwQYMBaAFJ755DduNmUydceWNZjWtFtwr4CZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEM2MC9CNTI2RkY3NEQ4
NDExMUU5QTQ1MjE0MTNDNEY5QUUwMi9udm5rTjI0MlpUSjF4NVkxbU5hMFczQ3Zn
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL252bmtOMjQyWlRKMXg1WTFtTmEwVzNDdmdKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRDNjAvQjUyNkZGNzREODQxMTFFOUE0NTIxNDEzQzRGOUFFMDIvNDVGNEREQTI2
NUNGMTFFQjlFM0NGQTZGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAWEwP8gMA0GCSqGSIb3DQEBCwUAA4IBAQBviQ240Ath75kvaBRX
n2mK0Ecqd8TQM7Zrcg/Oh9Ips+JB9fvIPlw26ZVOnX+HUzYBbAH6QbviuQJbKvfk
wemdxl2BgKE72cieVvxV1H8uYsgHfaaCaNhsFLln6nqZcbmDUwWk/zWYkEBaUREW
J6KgZIO3zJUlVYTEyYD6meO0v3w58dX9iOTq0JApEeqgsAX7eVbh3kswKzw4fHko
GkVMFkkQtVIY3goGe9+0l95yZSzTVkFYiPPUTtqU5XXbju+bEOOaMpueVLCn8hf1
RmoajWDvmNvUcHNFPlOiU9o10hAoP5q/ARNTto1S2mmvnQTaAchfOEi1/OQpaUef
inFz
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:01 2026 by rpki-client