Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/4A12ECDA687B11F1991CF7FE6647A888.roa
File:                     4A12ECDA687B11F1991CF7FE6647A888.roa (raw, json)
Hash identifier:          DUotnWkAe6FNoAWorklQvryeqsRSLpu4L9xS7rYPygY=
Subject key identifier:   35:AF:0C:07:49:8B:77:CA:D5:86:80:5D:8B:DB:0E:E0:F3:36:7A:DC
Certificate issuer:       /CN=A91AA1F9/serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
Certificate serial:       02
Authority key identifier: 10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/4A12ECDA687B11F1991CF7FE6647A888.roa
Signing time:             Mon 15 Jun 2026 05:30:16 +0000
ROA not before:           Mon 15 Jun 2026 05:30:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     137238
IP address blocks:        2001:df7:13c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl
                          rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA1F9, serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
        Validity
            Not Before: Jun 15 05:30:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2f8de8-6ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:91:99:b7:a3:80:4d:8c:47:f4:9b:cd:73:
                    2a:1c:fb:0a:48:6c:68:8d:0a:53:97:39:cd:31:50:
                    6c:e6:85:b7:8e:c4:42:b2:9c:5d:7d:43:89:95:7f:
                    d5:69:e8:d1:09:b7:54:57:5b:48:8f:c8:2c:57:bd:
                    d6:86:bb:8b:88:7b:74:dd:ed:4b:44:5b:a0:28:ad:
                    48:4a:4f:0e:c5:c1:b7:59:b5:aa:10:fd:fd:fd:de:
                    16:40:56:da:df:f6:cc:91:be:bd:b3:40:60:55:83:
                    eb:3f:27:b5:e0:c2:b3:29:8d:e9:6c:f6:e1:c9:7c:
                    21:68:5a:50:2a:ac:b2:27:b3:20:df:b1:83:df:68:
                    4f:5a:52:e5:03:ab:3d:80:0a:bf:68:38:a8:50:57:
                    e9:93:df:0c:ad:02:47:cf:03:6d:b1:10:fb:48:3f:
                    b4:f2:56:0d:44:2a:83:05:24:10:75:e7:e5:c0:b2:
                    2a:a4:25:47:c0:4c:05:1e:cf:39:d7:0c:ac:df:70:
                    b6:76:67:b1:ed:c1:de:4b:2f:b6:fe:4b:4e:4a:a8:
                    27:68:82:c8:53:6b:f5:a6:8d:ca:c1:b3:e0:4c:06:
                    9f:03:90:78:ba:52:59:1f:fa:66:0d:26:09:41:df:
                    2a:d3:52:88:de:3d:3b:a8:dc:2e:7d:71:65:14:bd:
                    5c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AF:0C:07:49:8B:77:CA:D5:86:80:5D:8B:DB:0E:E0:F3:36:7A:DC
            X509v3 Authority Key Identifier:
                keyid:10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/4A12ECDA687B11F1991CF7FE6647A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:13c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:25:42:69:6f:9d:28:17:f4:fb:ca:a7:6d:a6:48:17:79:c3:
         84:78:98:a6:01:ff:ed:79:6c:a0:ef:d9:18:67:2d:d7:7f:2b:
         e1:56:76:6a:2f:8b:09:a2:a7:db:1b:b7:3e:92:8a:b6:4e:1a:
         3e:44:31:44:2a:a6:73:e3:47:9c:55:39:aa:72:1b:03:a5:9b:
         15:ef:e9:23:c1:ad:90:c0:61:4a:92:22:59:1b:1b:bb:9b:af:
         8a:4e:43:c6:fb:9d:3f:66:4e:6a:0a:ce:94:73:81:cb:bd:c3:
         5c:9e:d5:30:6b:f3:66:f8:d5:dd:7a:09:ef:82:84:a7:07:90:
         d5:03:c2:6d:e6:2e:ac:3a:0b:24:82:3d:43:85:bf:1d:af:17:
         39:49:9a:5d:dc:19:09:f2:a1:5b:a2:dd:8c:1d:c8:2c:0e:b5:
         c0:f3:f2:de:bb:09:09:09:db:26:05:33:3a:ba:00:af:0d:7f:
         db:f7:6a:1b:04:cf:36:bd:be:a0:23:1a:70:96:f9:29:90:8c:
         16:bd:74:2e:cc:32:75:83:70:e5:21:2c:71:90:d0:54:17:7f:
         f4:2f:4a:c0:43:f3:ff:e5:cf:62:e1:13:37:2e:6e:76:34:37:
         07:c3:70:b3:0e:59:df:08:7a:b2:17:d0:54:e1:73:bb:0a:51:
         80:53:84:33
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QTFGOTExMC8GA1UEBRMoMTA5Qjk0RTdEOUIzRTY3OUU5OUM2MkE3QTJENDk3QTE3
RDM5OTcxODAeFw0yNjA2MTUwNTMwMTZaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMmY4ZGU4LTZmZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLUZGZt6OATYxH9JvNcyoc+wpIbGiNClOXOc0xUGzmhbeOxEKynF19Q4mVf9Vp
6NEJt1RXW0iPyCxXvdaGu4uIe3Td7UtEW6AorUhKTw7FwbdZtaoQ/f393hZAVtrf
9syRvr2zQGBVg+s/J7XgwrMpjels9uHJfCFoWlAqrLInsyDfsYPfaE9aUuUDqz2A
Cr9oOKhQV+mT3wytAkfPA22xEPtIP7TyVg1EKoMFJBB15+XAsiqkJUfATAUezznX
DKzfcLZ2Z7Htwd5LL7b+S05KqCdogshTa/WmjcrBs+BMBp8DkHi6Ulkf+mYNJglB
3yrTUojePTuo3C59cWUUvVzrAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUNa8MB0mL
d8rVhoBdi9sO4PM2etwwHwYDVR0jBBgwFoAUEJuU59mz5nnpnGKnotSXoX05lxgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBMUY5L0QyRDA2NDM2Njg3
QTExRjE5RTcxNDREQjY2NDdBODg4L0VKdVU1OW16NW5ucG5HS25vdFNYb1gwNWx4
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRUp1VTU5bXo1bm5wbkdLbm90U1hvWDA1bHhnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTFGOS9EMkQwNjQzNjY4N0ExMUYxOUU3MTQ0REI2NjQ3QTg4OC80QTEyRUNEQTY4
N0IxMUYxOTkxQ0Y3RkU2NjQ3QTg4OC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ33E8AwDQYJKoZIhvcNAQELBQADggEBADAlQmlvnSgX9PvKp22m
SBd5w4R4mKYB/+15bKDv2RhnLdd/K+FWdmoviwmip9sbtz6SirZOGj5EMUQqpnPj
R5xVOapyGwOlmxXv6SPBrZDAYUqSIlkbG7ubr4pOQ8b7nT9mTmoKzpRzgcu9w1ye
1TBr82b41d16Ce+ChKcHkNUDwm3mLqw6CySCPUOFvx2vFzlJml3cGQnyoVui3Ywd
yCwOtcDz8t67CQkJ2yYFMzq6AK8Nf9v3ahsEzza9vqAjGnCW+SmQjBa9dC7MMnWD
cOUhLHGQ0FQXf/QvSsBD8//lz2LhEzcubnY0NwfDcLMOWd8IerIX0FThc7sKUYBT
hDM=
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:13:15 2026 by rpki-client