Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EB6C27AF0E011EF80FCA362C4F9AE02.roa
File:                     9EB6C27AF0E011EF80FCA362C4F9AE02.roa (raw, json)
Hash identifier:          SAhIEDlkfZ2LMh8dOVsVFuJ+RVaLJLtQWcBk5qzz73I=
Subject key identifier:   F5:66:4E:E1:8C:66:45:46:99:6E:39:F2:5C:DD:4A:C7:74:09:52:D1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EBD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EB6C27AF0E011EF80FCA362C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:33:01 +0000
ROA not before:           Fri 02 Oct 2026 15:33:01 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153429
IP address blocks:        2001:df4:a940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28349 (0x6ebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:33:01 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcead-4222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:84:5d:c1:94:d1:c2:7c:bf:88:1f:aa:73:
                    c7:c4:c8:ec:06:ad:24:d5:42:1f:27:72:4e:56:9d:
                    47:40:67:36:00:21:fa:a2:46:ca:08:86:05:84:d7:
                    c2:d1:39:1a:ed:6f:6e:02:3d:6e:ee:94:28:b1:79:
                    80:1b:14:9d:a1:2a:d0:39:d6:08:72:9b:d9:b9:85:
                    24:8d:45:a4:7d:b6:7c:d3:2f:ef:c7:43:1d:7c:e7:
                    d4:be:cb:9c:52:ee:39:5f:c5:7e:dd:13:ae:2c:71:
                    d5:f3:0c:3f:44:38:c9:24:47:7b:32:21:ac:a4:62:
                    69:02:e0:9e:41:35:e8:01:06:10:82:35:0b:02:eb:
                    a4:7f:6d:39:be:ce:47:40:f3:28:00:32:bc:94:21:
                    8a:99:5e:e3:ba:2e:57:79:f3:0f:58:ae:f3:ed:47:
                    a1:44:72:f4:ea:f6:ca:4e:24:fe:b8:6c:63:ec:f0:
                    21:67:c4:d9:84:c4:3f:aa:f1:9a:b2:34:66:ce:dd:
                    92:1b:14:9d:66:81:66:ee:42:e9:4b:64:49:97:82:
                    15:6e:e6:3c:81:cf:64:1e:81:02:25:55:36:fe:86:
                    10:d9:3e:2f:58:95:e3:9d:1d:23:0a:2b:54:58:be:
                    10:a0:a4:11:6e:d8:ac:03:5f:67:cd:2f:0c:ac:a7:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:66:4E:E1:8C:66:45:46:99:6E:39:F2:5C:DD:4A:C7:74:09:52:D1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EB6C27AF0E011EF80FCA362C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a940::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:a3:2a:ea:51:34:ae:0c:33:55:69:1d:11:20:21:44:a0:41:
         69:2f:99:bf:29:d8:d5:62:a1:e2:11:08:c6:28:22:02:90:07:
         b0:dd:ad:5e:e2:d9:f3:5c:1e:55:df:3d:dd:c6:12:fe:8b:df:
         25:8d:a9:81:1e:33:fb:17:bb:30:d3:96:7d:71:40:29:78:49:
         fb:f1:ce:8c:bb:30:e7:e7:b0:ef:92:61:99:86:08:cb:89:7b:
         55:83:0f:2d:f5:99:e5:6e:c4:c2:07:3c:70:b3:48:59:90:6b:
         31:1c:72:ad:67:05:1d:8c:d5:b1:b3:a7:2d:df:d3:81:ab:71:
         3a:f2:71:60:42:64:43:03:fd:0a:c0:bc:66:ce:4f:87:f9:bb:
         e4:34:e6:39:91:f9:8a:21:1b:94:da:07:5c:a2:07:7b:c8:36:
         6e:89:a3:0d:22:f5:da:85:4b:6d:b6:c8:77:ba:63:d1:23:34:
         b4:50:ff:b4:84:cd:8f:7a:f0:b3:15:1e:cd:f0:86:ea:f5:03:
         1b:39:58:11:33:ed:42:f0:d7:b1:fc:0a:9a:6e:4c:d2:4d:dd:
         de:4b:01:79:30:af:de:52:f9:9d:23:78:af:67:5a:79:56:8f:
         b4:c3:29:f2:e1:6f:0b:9c:f4:2e:c9:fc:f9:1c:b5:dc:1d:ea:
         56:9a:99:cf
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICbr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzMzAxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2VhZC00MjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaOEXcGU0cJ8v4gfqnPHxMjsBq0k1UIfJ3JOVp1HQGc2ACH6okbKCIYFhNfC
0Tka7W9uAj1u7pQosXmAGxSdoSrQOdYIcpvZuYUkjUWkfbZ80y/vx0MdfOfUvsuc
Uu45X8V+3ROuLHHV8ww/RDjJJEd7MiGspGJpAuCeQTXoAQYQgjULAuukf205vs5H
QPMoADK8lCGKmV7jui5XefMPWK7z7UehRHL06vbKTiT+uGxj7PAhZ8TZhMQ/qvGa
sjRmzt2SGxSdZoFm7kLpS2RJl4IVbuY8gc9kHoECJVU2/oYQ2T4vWJXjnR0jCitU
WL4QoKQRbtisA19nzS8MrKfuLwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPVmTuGM
ZkVGmW458lzdSsd0CVLRMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOUVCNkMyN0FG
MEUwMTFFRjgwRkNBMzYyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9KlAMA0GCSqGSIb3DQEBCwUAA4IBAQARoyrqUTSuDDNVaR0R
ICFEoEFpL5m/KdjVYqHiEQjGKCICkAew3a1e4tnzXB5V3z3dxhL+i98ljamBHjP7
F7sw05Z9cUApeEn78c6MuzDn57DvkmGZhgjLiXtVgw8t9ZnlbsTCBzxws0hZkGsx
HHKtZwUdjNWxs6ct39OBq3E68nFgQmRDA/0KwLxmzk+H+bvkNOY5kfmKIRuU2gdc
ogd7yDZuiaMNIvXahUtttsh3umPRIzS0UP+0hM2PevCzFR7N8Ibq9QMbOVgRM+1C
8Nex/AqabkzSTd3eSwF5MK/eUvmdI3ivZ1p5Vo+0wyny4W8LnPQuyfz5HLXcHepW
mpnP
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:00:25 2026 by rpki-client