Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C5B45CA014F411F180EDEBBD193D8C67.roa
File:                     C5B45CA014F411F180EDEBBD193D8C67.roa (raw, json)
Hash identifier:          1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=
Subject key identifier:   76:00:69:82:EE:E2:11:7F:3B:46:4D:13:E9:F9:24:4F:E4:A0:03:11
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       04E1
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C5B45CA014F411F180EDEBBD193D8C67.roa
Signing time:             Tue 03 Mar 2026 00:32:45 +0000
ROA not before:           Tue 03 Mar 2026 00:32:45 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     50763
IP address blocks:        2400:54a0:2080::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 23:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1249 (0x4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  3 00:32:45 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a62c2d-0a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:44:b3:06:03:49:77:33:3b:90:bd:e3:7c:
                    63:b6:f6:3a:fd:65:47:30:0c:5e:22:22:96:95:47:
                    50:3c:2a:1f:95:b9:18:b0:8a:ab:1f:f7:76:39:e6:
                    99:62:51:7f:d1:a3:97:d6:e8:5f:ad:80:e9:08:37:
                    7c:e8:99:d2:18:fa:1e:22:83:d7:97:11:2b:76:90:
                    12:a0:32:a9:35:3a:df:30:34:2a:bb:4e:48:1e:de:
                    9b:f5:8f:f1:62:53:bc:cc:ce:a7:4e:c2:66:e6:6c:
                    4d:6d:80:a4:93:42:c9:e8:38:f8:2d:38:39:38:ba:
                    9a:69:b5:e9:d2:33:f3:2f:e9:6e:5b:85:57:d0:f0:
                    81:24:86:3c:84:1c:58:29:74:31:69:31:a6:1d:6f:
                    8c:f8:b4:8c:da:7a:c1:8c:2e:c0:33:5e:e9:f8:83:
                    bf:d7:03:01:19:82:dc:11:6b:cc:14:2c:b1:0e:eb:
                    7d:df:72:a3:f1:79:c9:a3:a9:d7:c5:85:5c:2e:22:
                    a2:ca:73:ba:88:a2:77:8f:29:97:73:27:76:b7:5d:
                    66:16:af:25:41:a1:1f:30:3d:d9:dc:42:5e:5e:43:
                    b0:3b:8a:47:38:5a:6c:a5:22:b6:80:47:40:b8:60:
                    d5:da:8e:dd:d7:fe:40:24:86:51:8e:d4:c2:56:9b:
                    58:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:00:69:82:EE:E2:11:7F:3B:46:4D:13:E9:F9:24:4F:E4:A0:03:11
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C5B45CA014F411F180EDEBBD193D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:2080::/44

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:c5:09:25:5e:d9:be:39:22:9a:a2:68:02:37:51:7b:50:
         b9:6d:45:22:96:9d:f7:e3:92:4a:46:c1:b5:b1:e6:7e:99:3b:
         eb:ef:47:bb:87:a2:32:b2:9e:84:96:51:42:24:69:d3:10:20:
         9a:f2:cb:7a:66:0e:7f:6b:32:b9:4c:df:b0:63:7a:9a:7c:34:
         7d:dc:60:b1:c9:24:c4:7d:88:23:c8:0c:e5:80:6c:31:be:7c:
         1d:89:c5:85:ce:f0:3f:83:ff:f6:fd:dc:01:b1:ab:94:13:e7:
         f2:a0:ed:14:29:a2:ef:36:8c:5c:3c:aa:b4:14:01:74:f4:c8:
         5e:52:e8:bf:c7:4a:8f:cf:43:1e:93:ab:25:9b:62:ce:e1:d8:
         46:10:0a:06:0f:cd:ab:95:34:c0:cf:c0:d7:da:cb:25:24:1e:
         f5:98:31:f2:dd:52:f8:cd:fa:37:16:d9:83:d7:c5:f6:50:38:
         01:88:9c:7e:f2:95:d1:52:d3:3e:65:cc:46:d3:87:bb:28:6d:
         49:4f:13:43:7d:39:b5:e3:0f:4e:76:c0:2a:39:e8:63:9c:8c:
         0e:3a:25:4f:7a:14:09:8e:99:71:18:2d:b2:6e:4d:a9:e8:47:
         b5:17:05:aa:38:16:95:3f:09:5a:12:d2:2e:53:f8:72:2b:b0:
         f9:31:a2:a5
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC
Mzk5OTI1MzkwHhcNMjYwMzAzMDAzMjQ1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MmMyZC0wYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk7BEswYDSXczO5C943xjtvY6/WVHMAxeIiKWlUdQPCoflbkYsIqrH/d2OeaZ
YlF/0aOX1uhfrYDpCDd86JnSGPoeIoPXlxErdpASoDKpNTrfMDQqu05IHt6b9Y/x
YlO8zM6nTsJm5mxNbYCkk0LJ6Dj4LTg5OLqaabXp0jPzL+luW4VX0PCBJIY8hBxY
KXQxaTGmHW+M+LSM2nrBjC7AM17p+IO/1wMBGYLcEWvMFCyxDut933Kj8XnJo6nX
xYVcLiKiynO6iKJ3jymXcyd2t11mFq8lQaEfMD3Z3EJeXkOwO4pHOFpspSK2gEdA
uGDV2o7d1/5AJIZRjtTCVptYkwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHYAaYLu
4hF/O0ZNE+n5JE/koAMRMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG
ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDUxQTAvN0M1MzkxMEM3Rjg0MTFFQzgwNTE4RTUxQzRGOUFFMDIvQzVCNDVDQTAx
NEY0MTFGMTgwRURFQkJEMTkzRDhDNjcucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJABUoCCAMA0GCSqGSIb3DQEBCwUAA4IBAQAv8MUJJV7ZvjkimqJo
AjdRe1C5bUUilp3345JKRsG1seZ+mTvr70e7h6Iysp6EllFCJGnTECCa8st6Zg5/
azK5TN+wY3qafDR93GCxySTEfYgjyAzlgGwxvnwdicWFzvA/g//2/dwBsauUE+fy
oO0UKaLvNoxcPKq0FAF09MheUui/x0qPz0Mek6slm2LO4dhGEAoGD82rlTTAz8DX
2sslJB71mDHy3VL4zfo3FtmD18X2UDgBiJx+8pXRUtM+ZcxG04e7KG1JTxNDfTm1
4w9OdsAqOehjnIwOOiVPehQJjplxGC2ybk2p6Ee1FwWqOBaVPwlaEtIuU/hyK7D5
MaKl
-----END CERTIFICATE-----
Generated at Sat Mar 7 15:34:55 2026 by rpki-client