Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8A6EC507C0311F19A8027EB8FA30FBC.roa
File:                     B8A6EC507C0311F19A8027EB8FA30FBC.roa (raw, json)
Hash identifier:          /Q/OsSViVbdEWWh4hmj1eO/01IaaRMepWRYxRTkU9Pw=
Subject key identifier:   54:8D:BC:6D:24:FB:6F:E0:75:6C:88:F1:A1:74:F3:19:E3:4C:8D:9A
Certificate issuer:       /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
Certificate serial:       07FA
Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8A6EC507C0311F19A8027EB8FA30FBC.roa
Signing time:             Wed 02 Sep 2026 21:42:44 +0000
ROA not before:           Wed 02 Sep 2026 21:42:44 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     214483
IP address blocks:        2403:58c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl
                          rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 21:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2042 (0x7fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6
        Validity
            Not Before: Sep  2 21:42:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a989853-e390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:09:f4:5c:4b:d4:2d:19:03:f6:aa:55:d7:
                    9b:cd:52:f9:6c:8f:e7:ac:3b:ba:76:8b:77:b0:74:
                    e0:67:22:4f:f0:b5:c5:2f:64:5d:40:83:51:26:d7:
                    ac:cc:0f:03:2a:c5:dc:80:ec:9c:d5:76:5e:08:1e:
                    95:ea:25:fb:18:d2:9a:60:f0:4e:da:fb:91:1b:08:
                    ac:ec:63:e1:17:00:fb:b8:d6:a4:71:6a:a8:65:1e:
                    2c:72:ea:51:15:04:8c:d5:1a:67:03:3c:26:01:13:
                    1e:30:b5:63:67:de:e7:fc:45:9e:1c:7c:d1:12:43:
                    13:4d:ce:ac:09:ce:68:5e:3c:d4:92:4b:43:02:83:
                    47:ce:17:55:41:a0:c1:68:55:b7:20:86:67:ed:9e:
                    ef:bd:24:a3:45:37:5b:d3:91:73:81:83:6b:2b:59:
                    4b:23:1e:32:71:a1:d2:a2:a7:5e:0f:c4:c6:ff:df:
                    77:63:fa:57:aa:59:64:5b:f6:50:c0:89:15:ab:9b:
                    af:cd:d4:53:64:d5:14:24:2b:85:17:00:ed:04:95:
                    30:29:0f:55:99:84:3c:15:bd:d4:d4:9e:8a:f4:31:
                    c1:cd:0d:5c:da:e2:0d:77:7e:b2:83:a8:4b:4e:63:
                    cc:1f:fb:5c:13:7e:e1:81:dc:6e:75:b8:ab:e1:8b:
                    b7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8D:BC:6D:24:FB:6F:E0:75:6C:88:F1:A1:74:F3:19:E3:4C:8D:9A
            X509v3 Authority Key Identifier:
                keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/B8A6EC507C0311F19A8027EB8FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:20:42:1d:68:ab:ef:b7:17:70:12:b4:92:28:61:a7:8c:31:
         e9:05:75:e1:d3:40:60:5a:fd:cd:c3:d7:c2:7f:54:71:31:b1:
         49:44:8c:d7:0a:3e:a8:17:72:92:f3:0b:29:13:15:00:53:2b:
         14:de:40:86:c6:28:00:cb:88:c1:90:bf:75:4f:45:d7:11:42:
         2f:4e:22:e1:fa:ea:b6:21:41:ee:db:51:95:a8:02:e9:8f:6c:
         9f:50:64:28:ce:d5:60:e9:65:92:b2:96:87:a6:1b:93:4e:78:
         8e:63:40:11:57:34:2c:fe:36:e2:bb:0b:d8:74:b0:e3:e6:e3:
         7a:ba:58:ca:f2:1f:5c:86:6c:85:3a:e9:47:ff:8b:68:4a:67:
         65:e3:6f:d4:79:b6:99:64:dd:ab:b9:47:6f:9d:b5:2e:84:b1:
         52:60:a4:c8:99:61:eb:40:2b:cb:30:b9:cd:c7:09:62:aa:f6:
         90:07:9b:25:db:4b:c2:bd:a5:65:c0:61:57:c6:71:bb:a4:cc:
         b0:78:c6:ec:82:fd:d8:07:a1:da:5d:7e:2f:1b:b3:15:bd:3e:
         53:37:8c:d5:86:2f:15:c4:db:8b:61:31:a0:2c:7c:67:97:43:
         12:72:ff:0f:a3:ac:41:a3:8b:aa:3c:ab:8a:98:7a:b5:a0:0b:
         fd:2c:34:6a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD
QTczM0REQTYwHhcNMjYwOTAyMjE0MjQ0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4OTg1My1lMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArx0J9FxL1C0ZA/aqVdebzVL5bI/nrDu6dot3sHTgZyJP8LXFL2RdQINRJtes
zA8DKsXcgOyc1XZeCB6V6iX7GNKaYPBO2vuRGwis7GPhFwD7uNakcWqoZR4scupR
FQSM1RpnAzwmARMeMLVjZ97n/EWeHHzREkMTTc6sCc5oXjzUkktDAoNHzhdVQaDB
aFW3IIZn7Z7vvSSjRTdb05FzgYNrK1lLIx4ycaHSoqdeD8TG/993Y/pXqllkW/ZQ
wIkVq5uvzdRTZNUUJCuFFwDtBJUwKQ9VmYQ8Fb3U1J6K9DHBzQ1c2uINd36yg6hL
TmPMH/tcE37hgdxudbir4Yu35wIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFFSNvG0k
+2/gdWyI8aF08xnjTI2aMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG
QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzMyNkYvNzg2NkY1MzA1RkM3MTFFQjhBNjkyMDJFQzRGOUFFMDIvQjhBNkVDNTA3
QzAzMTFGMTlBODAyN0VCOEZBMzBGQkMucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJANYwDANBgkqhkiG9w0BAQsFAAOCAQEAniBCHWir77cXcBK0kihh
p4wx6QV14dNAYFr9zcPXwn9UcTGxSUSM1wo+qBdykvMLKRMVAFMrFN5AhsYoAMuI
wZC/dU9F1xFCL04i4frqtiFB7ttRlagC6Y9sn1BkKM7VYOllkrKWh6Ybk054jmNA
EVc0LP424rsL2HSw4+bjerpYyvIfXIZshTrpR/+LaEpnZeNv1Hm2mWTdq7lHb521
LoSxUmCkyJlh60AryzC5zccJYqr2kAebJdtLwr2lZcBhV8Zxu6TMsHjG7IL92Aeh
2l1+LxuzFb0+UzeM1YYvFcTbi2ExoCx8Z5dDEnL/D6OsQaOLqjyriph6taAL/Sw0
ag==
-----END CERTIFICATE-----
Generated at Fri Sep 11 03:30:57 2026 by rpki-client