Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/566FED7071AB11EFB45D987FC4F9AE02.roa
File:                     566FED7071AB11EFB45D987FC4F9AE02.roa (raw, json)
Hash identifier:          J5NOPXr3wPETLrm/rX1Me6ZdDfcoksp1CAfWiHvOF+o=
Subject key identifier:   F4:85:27:01:D1:6C:D6:95:16:1C:31:59:ED:C8:C7:5F:A9:5B:A0:02
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       0252
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/566FED7071AB11EFB45D987FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:16:54 +0000
ROA not before:           Wed 31 Dec 2025 04:24:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137546
IP address blocks:        2001:3c8:e10e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:21 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490a6-d7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:5b:b0:6e:87:89:4e:e3:d3:f4:3a:ca:5f:
                    06:62:b8:c4:8d:a4:f2:9d:4a:f9:4b:e0:b9:88:3a:
                    9d:0d:6e:c2:cf:3c:eb:d3:c0:af:69:13:25:da:27:
                    4a:2d:94:41:2f:23:49:5c:9d:c3:b6:1d:f6:40:0f:
                    d5:27:96:76:ef:ce:63:bb:f2:33:0d:26:13:39:14:
                    9b:c0:48:db:02:9c:28:e8:99:4d:8a:c1:87:07:43:
                    50:3b:89:c5:cd:07:41:22:66:36:c0:2d:89:62:16:
                    8d:bf:d8:ae:af:8b:f6:e5:96:a6:5a:16:18:5c:af:
                    0a:58:80:f9:6f:e1:e2:63:d4:4b:fe:ff:61:9e:c4:
                    77:e9:9b:00:b0:3e:58:b5:2b:73:d5:df:2e:ec:b5:
                    14:66:95:41:30:e4:17:fb:e9:14:8f:15:00:8d:ca:
                    1b:b8:bb:4f:68:88:ba:8a:08:52:65:85:90:09:39:
                    ff:4e:e4:47:c4:93:02:63:61:67:76:fc:2c:45:67:
                    8b:b5:d8:b7:cc:04:98:5e:cc:76:be:d9:c7:4c:3e:
                    df:32:38:e1:97:1e:74:71:37:59:30:1e:bd:cc:e5:
                    cc:08:55:f5:81:22:02:94:b5:29:62:ea:67:44:d9:
                    57:fb:5f:53:49:90:1a:27:7f:fb:b6:9e:ad:47:53:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:85:27:01:D1:6C:D6:95:16:1C:31:59:ED:C8:C7:5F:A9:5B:A0:02
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/566FED7071AB11EFB45D987FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3c8:e10e::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:ee:11:55:9d:c0:8f:16:b9:08:b9:ff:ea:09:65:b3:9f:0e:
         15:9c:a9:2a:8a:f6:3a:c4:ce:36:0a:6f:6f:b5:f6:a3:40:1d:
         3c:d7:cf:38:85:80:fb:e0:c9:74:d1:11:37:7a:3b:e4:61:05:
         f5:eb:85:b1:45:06:f0:ab:55:b5:f9:8e:9a:14:2a:ac:e5:8e:
         d7:df:1b:90:75:81:e8:e5:d1:e0:46:61:f4:63:ff:98:b0:92:
         a7:8c:f7:1c:71:d8:54:fa:ea:00:34:a9:a4:69:5c:98:d2:9b:
         5d:2f:23:15:b4:d6:59:d6:10:19:b2:b3:b6:a3:2c:bb:20:d9:
         fa:41:83:ca:41:f4:10:aa:25:24:3d:cc:c5:2b:fd:fa:bc:3d:
         76:ba:a6:29:0f:a4:ed:1a:df:89:c7:b1:ed:08:cf:4f:3a:7f:
         61:72:76:4e:90:9b:a3:3b:6a:74:a2:2b:ed:8d:5d:4c:89:ae:
         6b:98:05:73:97:03:bc:a7:e8:6d:fd:c9:c9:1b:45:80:e6:ab:
         c5:26:72:c7:66:66:c0:9a:4f:dd:3c:6c:76:57:44:0a:08:84:
         bc:c1:ff:67:b3:a5:83:93:69:c0:c6:a0:18:fa:2c:6f:2a:0c:
         d3:ee:1e:43:aa:b1:78:80:05:98:60:a3:4b:bd:cf:0b:ce:07:
         c0:f5:ca:31
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTBhNi1kN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr0RbsG6HiU7j0/Q6yl8GYrjEjaTynUr5S+C5iDqdDW7Czzzr08CvaRMl2idK
LZRBLyNJXJ3Dth32QA/VJ5Z2785ju/IzDSYTORSbwEjbApwo6JlNisGHB0NQO4nF
zQdBImY2wC2JYhaNv9iur4v25ZamWhYYXK8KWID5b+HiY9RL/v9hnsR36ZsAsD5Y
tStz1d8u7LUUZpVBMOQX++kUjxUAjcobuLtPaIi6ighSZYWQCTn/TuRHxJMCY2Fn
dvwsRWeLtdi3zASYXsx2vtnHTD7fMjjhlx50cTdZMB69zOXMCFX1gSIClLUpYupn
RNlX+19TSZAaJ3/7tp6tR1PTRQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPSFJwHR
bNaVFhwxWe3Ix1+pW6ACMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvNTY2RkVENzA3
MUFCMTFFRkI0NUQ5ODdGQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEDyOEOMA0GCSqGSIb3DQEBCwUAA4IBAQBC7hFVncCPFrkIuf/q
CWWznw4VnKkqivY6xM42Cm9vtfajQB081884hYD74Ml00RE3ejvkYQX164WxRQbw
q1W1+Y6aFCqs5Y7X3xuQdYHo5dHgRmH0Y/+YsJKnjPcccdhU+uoANKmkaVyY0ptd
LyMVtNZZ1hAZsrO2oyy7INn6QYPKQfQQqiUkPczFK/36vD12uqYpD6TtGt+Jx7Ht
CM9POn9hcnZOkJujO2p0oivtjV1Mia5rmAVzlwO8p+ht/cnJG0WA5qvFJnLHZmbA
mk/dPGx2V0QKCIS8wf9ns6WDk2nAxqAY+ixvKgzT7h5DqrF4gAWYYKNLvc8LzgfA
9cox
-----END CERTIFICATE-----
Generated at Sun Mar 15 05:53:24 2026 by rpki-client