Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
File:                     501941C093F211EEA029A113C4F9AE02.roa (raw, json)
Hash identifier:          gDNQ7RDm3OlBoepFJZ0oUQAQP6m12BXRlInXhBKg1vs=
Subject key identifier:   9C:3D:96:75:39:8C:A1:76:61:10:D9:7C:1C:BD:4E:C3:20:8B:DD:E4
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0A53
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 20:40:58 +0000
ROA not before:           Fri 31 Jul 2026 20:40:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     150325
IP address blocks:        2406:7ec0:1000::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 19:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2643 (0xa53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Jul 31 20:40:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6d085a-132e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:28:cc:f5:09:ad:21:4e:e7:3a:20:2c:04:
                    6d:de:71:19:15:7a:22:ae:f5:46:b4:00:c6:05:f0:
                    21:32:bb:e1:26:99:4e:55:3d:46:dd:6d:f1:3b:b1:
                    57:d9:50:3d:85:1c:d9:a3:75:1b:91:3d:7c:13:60:
                    6c:d9:46:d0:b4:54:a1:ee:0f:5a:77:7b:96:08:2a:
                    7c:2a:df:ae:62:68:bc:e6:66:5f:6b:93:74:7b:42:
                    cd:df:96:f7:7c:39:fb:30:f8:25:11:b1:20:7f:21:
                    7b:15:73:20:59:3f:66:cb:76:b2:49:dd:f6:5a:78:
                    fc:b1:fc:bd:27:59:11:c4:c7:76:93:6e:96:1d:9e:
                    f4:02:10:7d:15:cc:f4:a1:3b:7f:9f:22:02:32:f9:
                    11:df:ee:9d:b0:ec:94:2e:55:27:c4:1c:c9:0b:a1:
                    e0:89:88:eb:ca:86:81:95:28:34:11:65:ac:a8:a5:
                    6c:7e:67:f5:56:15:0e:5b:22:f2:80:3e:ca:f0:6a:
                    e3:a8:24:fa:82:79:3b:6b:40:52:40:04:96:19:78:
                    47:5e:fe:f7:56:99:de:78:ae:db:0b:4c:33:0d:53:
                    a5:3e:1e:18:c2:74:18:40:6f:8d:c8:9f:32:84:e1:
                    10:f9:3f:b6:56:5e:65:0a:b8:97:73:be:d5:27:76:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3D:96:75:39:8C:A1:76:61:10:D9:7C:1C:BD:4E:C3:20:8B:DD:E4
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ec0:1000::/46

    Signature Algorithm: sha256WithRSAEncryption
         a8:fe:52:e8:e8:79:c1:09:a0:59:ed:a5:82:b0:7d:7c:80:83:
         55:9b:a8:ef:68:cf:a6:0e:42:d8:f3:94:bf:67:a2:78:a5:17:
         00:96:d6:5c:b1:47:0b:4e:08:bf:49:9b:85:af:11:c9:1c:5c:
         26:26:74:79:61:2e:99:f0:11:1d:da:a1:af:83:d9:e3:03:8a:
         67:46:17:a6:50:b9:2a:93:b3:73:48:1a:87:d1:54:62:6f:dd:
         6f:d1:ef:aa:9b:5f:a7:da:34:13:e0:f2:25:3c:3c:d4:59:c4:
         ba:4e:83:f4:68:70:d0:bf:b2:3d:a5:53:9b:d3:3a:c9:f1:7d:
         81:2a:84:70:05:06:9b:4b:d0:44:36:2c:25:bd:ce:11:0e:04:
         f6:d4:9f:d9:f7:b2:73:1d:3a:c4:89:fd:2b:f0:b7:b5:e1:80:
         4e:ea:81:f8:26:b1:0b:1e:3e:9f:da:50:d1:83:5a:6b:b4:eb:
         47:69:df:d2:af:e3:a4:f6:58:5a:b3:6f:c1:9c:f2:76:a8:0a:
         57:3a:f4:58:21:c3:c8:21:49:ea:0b:23:07:20:de:ea:28:63:
         69:dd:f1:8b:d5:2d:00:8e:f6:61:d3:3f:29:dc:2b:e9:80:3e:
         a5:5e:1a:3e:5d:8c:12:8d:ae:89:ea:23:c4:88:e9:ad:11:6f:
         61:5e:d1:c9
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICClMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC
QjYwNjlCQzkwHhcNMjYwNzMxMjA0MDU4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkMDg1YS0xMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAynQozPUJrSFO5zogLARt3nEZFXoirvVGtADGBfAhMrvhJplOVT1G3W3xO7FX
2VA9hRzZo3UbkT18E2Bs2UbQtFSh7g9ad3uWCCp8Kt+uYmi85mZfa5N0e0LN35b3
fDn7MPglEbEgfyF7FXMgWT9my3aySd32Wnj8sfy9J1kRxMd2k26WHZ70AhB9Fcz0
oTt/nyICMvkR3+6dsOyULlUnxBzJC6HgiYjryoaBlSg0EWWsqKVsfmf1VhUOWyLy
gD7K8GrjqCT6gnk7a0BSQASWGXhHXv73VpneeK7bC0wzDVOlPh4YwnQYQG+NyJ8y
hOEQ+T+2Vl5lCriXc77VJ3bCawIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJw9lnU5
jKF2YRDZfBy9TsMgi93kMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw
QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjc3NzAvRTY4MTA0MTBDMEFFMTFFQUI5NUFCNTcyQzRGOUFFMDIvNTAxOTQxQzA5
M0YyMTFFRUEwMjlBMTEzQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAZ+wBAAMA0GCSqGSIb3DQEBCwUAA4IBAQCo/lLo6HnBCaBZ7aWC
sH18gINVm6jvaM+mDkLY85S/Z6J4pRcAltZcsUcLTgi/SZuFrxHJHFwmJnR5YS6Z
8BEd2qGvg9njA4pnRhemULkqk7NzSBqH0VRib91v0e+qm1+n2jQT4PIlPDzUWcS6
ToP0aHDQv7I9pVOb0zrJ8X2BKoRwBQabS9BENiwlvc4RDgT21J/Z97JzHTrEif0r
8Le14YBO6oH4JrELHj6f2lDRg1prtOtHad/Sr+Ok9lhas2/BnPJ2qApXOvRYIcPI
IUnqCyMHIN7qKGNp3fGL1S0AjvZh0z8p3CvpgD6lXho+XYwSja6J6iPEiOmtEW9h
XtHJ
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:03:53 2026 by rpki-client