Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE17F000B12411EF8CF51A7FC4F9AE02.roa
File:                     FE17F000B12411EF8CF51A7FC4F9AE02.roa (raw, json)
Hash identifier:          pZdV+DVJjemu2rSSNRjSLTan12/5oV+XXO+GHVRenMw=
Subject key identifier:   39:B5:7C:8E:AB:7D:5A:29:73:05:7E:39:6D:FC:FD:E7:75:4B:4D:1E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EBE
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE17F000B12411EF8CF51A7FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:33:04 +0000
ROA not before:           Fri 02 Oct 2026 15:33:04 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153430
IP address blocks:        2001:df4:a9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28350 (0x6ebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:33:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfceb0-da51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:7e:ca:56:db:1b:b0:1c:c0:d2:ea:2e:d0:
                    6a:56:7e:31:52:6e:37:45:05:7e:c6:60:ad:e2:98:
                    4f:df:c4:75:05:e3:96:b1:5e:7c:bd:66:63:ca:11:
                    ed:02:6e:22:e0:45:1c:8b:ba:3c:25:d3:d1:a8:ba:
                    2f:6a:57:5e:81:91:f5:11:72:69:82:ab:9d:7c:0d:
                    31:4b:19:da:09:7b:02:44:b0:80:1f:93:48:cc:78:
                    82:1b:86:83:b9:56:50:97:d3:a8:2f:a1:27:55:7a:
                    a6:60:c2:01:35:c6:9d:eb:95:2f:fd:3e:28:ea:8f:
                    29:0c:98:cb:a8:ee:cd:7f:08:57:80:e1:53:df:e1:
                    46:be:59:ee:e5:c8:d5:5d:38:8c:aa:8a:05:99:91:
                    c0:40:ba:ed:1c:3c:72:be:e3:40:83:8c:4c:16:b4:
                    2e:8d:08:6a:8c:ab:3b:a2:31:9f:75:eb:03:0a:45:
                    93:0d:9a:36:b9:a1:29:f0:32:5a:ff:32:bf:58:93:
                    ff:9a:95:4f:9e:d1:da:71:4f:a2:ff:51:f0:e2:59:
                    7b:92:98:0b:be:c7:c7:c4:39:60:e8:02:0b:61:2c:
                    ca:e6:25:08:9f:80:4d:73:f9:10:ca:54:50:07:48:
                    dc:90:25:1d:44:70:60:02:76:67:30:1c:69:92:3a:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B5:7C:8E:AB:7D:5A:29:73:05:7E:39:6D:FC:FD:E7:75:4B:4D:1E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FE17F000B12411EF8CF51A7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:04:ed:2c:e3:96:32:f8:dc:fc:b3:f6:b4:83:dc:e0:4e:ae:
         6c:34:e3:e9:5c:d8:96:03:39:07:a9:61:81:a5:04:ff:d8:f8:
         a5:f6:f5:46:23:9b:e0:97:10:6b:c7:31:95:6b:3a:ef:43:61:
         a6:ac:18:38:c2:34:bc:48:82:f4:d8:4e:3a:4e:ea:18:0a:76:
         d0:9e:c6:56:ce:2a:3c:6e:78:c8:0e:3b:29:f8:36:60:b0:b4:
         fe:ca:3a:0b:cb:b2:90:6a:3d:4b:3e:7b:a7:6e:aa:ec:ad:e1:
         f5:34:8a:a4:43:5f:02:29:b4:01:e4:96:03:19:86:82:d9:11:
         c5:e1:1a:33:db:7e:14:dd:7b:d9:37:82:80:39:35:ef:66:cc:
         f5:84:9b:30:c5:08:91:3b:7e:e1:46:57:2b:e4:69:de:f4:fc:
         be:c1:cf:c8:28:83:41:14:ed:c9:c6:4c:d8:ba:2d:87:1d:f1:
         60:80:a5:37:f8:ce:32:9e:32:bb:96:5d:ef:e1:ab:17:cb:02:
         0e:e3:0b:5a:9c:4b:6b:62:a5:d8:42:2a:a6:27:f4:72:5d:78:
         a4:5d:22:67:a7:47:6b:27:85:1c:f2:3c:f9:11:db:39:ba:04:
         74:97:08:db:bf:45:ef:04:c6:1d:57:e4:39:50:6e:95:45:90:
         4f:f0:f3:73
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICbr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzMzA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2ViMC1kYTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAB+ylbbG7AcwNLqLtBqVn4xUm43RQV+xmCt4phP38R1BeOWsV58vWZjyhHt
Am4i4EUci7o8JdPRqLovaldegZH1EXJpgqudfA0xSxnaCXsCRLCAH5NIzHiCG4aD
uVZQl9OoL6EnVXqmYMIBNcad65Uv/T4o6o8pDJjLqO7NfwhXgOFT3+FGvlnu5cjV
XTiMqooFmZHAQLrtHDxyvuNAg4xMFrQujQhqjKs7ojGfdesDCkWTDZo2uaEp8DJa
/zK/WJP/mpVPntHacU+i/1Hw4ll7kpgLvsfHxDlg6AILYSzK5iUIn4BNc/kQylRQ
B0jckCUdRHBgAnZnMBxpkjrSLQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDm1fI6r
fVopcwV+OW38/ed1S00eMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkUxN0YwMDBC
MTI0MTFFRjhDRjUxQTdGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9KnAMA0GCSqGSIb3DQEBCwUAA4IBAQCfBO0s45Yy+Nz8s/a0
g9zgTq5sNOPpXNiWAzkHqWGBpQT/2Pil9vVGI5vglxBrxzGVazrvQ2GmrBg4wjS8
SIL02E46TuoYCnbQnsZWzio8bnjIDjsp+DZgsLT+yjoLy7KQaj1LPnunbqrsreH1
NIqkQ18CKbQB5JYDGYaC2RHF4Roz234U3XvZN4KAOTXvZsz1hJswxQiRO37hRlcr
5Gne9Py+wc/IKINBFO3JxkzYui2HHfFggKU3+M4ynjK7ll3v4asXywIO4wtanEtr
YqXYQiqmJ/RyXXikXSJnp0drJ4Uc8jz5Eds5ugR0lwjbv0XvBMYdV+Q5UG6VRZBP
8PNz
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:34 2026 by rpki-client