Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7362D03E37C511EFBA013C34C4F9AE02.roa
File:                     7362D03E37C511EFBA013C34C4F9AE02.roa (raw, json)
Hash identifier:          aOJyx114GbhnkCsRFWg1YNlSN0DBylya4KIOU7vB0js=
Subject key identifier:   0D:6B:37:2D:E7:7C:05:3D:1C:1F:8C:5D:7A:31:F7:61:89:4F:C5:1C
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       02A7
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7362D03E37C511EFBA013C34C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:30:49 +0000
ROA not before:           Thu 31 Jul 2025 04:10:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     214633
IP address blocks:        2401:b60:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Jul 31 04:10:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a485d9-71a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:ad:db:b1:c2:3f:05:07:07:ab:df:5d:9d:
                    8c:9b:d5:f8:f6:c1:01:aa:a4:24:ec:26:8c:61:6f:
                    35:27:bf:61:3e:ba:4c:82:56:84:a7:7b:7d:e6:08:
                    fd:c4:93:2f:a5:9f:28:19:e5:1e:38:a1:34:3d:ba:
                    7d:a0:65:10:a3:5b:60:01:22:32:9b:1a:75:23:af:
                    68:ad:77:4a:13:48:03:36:eb:e5:5a:38:4c:d7:0e:
                    d9:03:cb:3c:81:66:54:67:4c:e4:e0:e0:c7:c5:d7:
                    e6:42:c4:54:b1:1f:14:85:b9:1a:fe:e6:fe:fa:70:
                    45:7a:55:b7:9a:81:d3:df:ba:2a:ae:30:55:9d:6d:
                    e5:4f:7e:ef:46:a7:dc:15:6d:ca:56:db:87:77:6c:
                    38:4d:29:8d:2f:74:58:cf:7e:9c:84:ff:e6:82:14:
                    86:8d:6d:e2:5e:d2:cd:ea:cf:1f:a6:38:27:18:5d:
                    79:60:e5:98:53:f9:f5:cf:2b:ab:95:52:35:0c:5f:
                    fb:d7:3e:77:a5:f5:b7:56:bd:41:df:2e:83:4e:9f:
                    cf:58:17:ea:2e:43:0e:9d:67:37:28:62:8d:e7:1b:
                    bd:e7:86:b4:0f:a6:88:0c:ac:96:e0:0d:f5:4c:79:
                    a8:b7:70:65:a9:68:ab:8c:87:9b:7a:d5:27:2d:cd:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:37:2D:E7:7C:05:3D:1C:1F:8C:5D:7A:31:F7:61:89:4F:C5:1C
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/7362D03E37C511EFBA013C34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:86:f2:b1:4b:51:ec:ab:a1:1a:31:f2:17:ce:9b:4a:0e:0d:
         d5:0e:6a:f8:68:22:19:a9:8f:06:43:97:5c:31:eb:5e:2f:f6:
         74:7e:e2:67:7b:21:af:68:bc:b0:ed:d2:ad:c4:42:55:da:b0:
         77:e5:a6:2c:54:61:e2:5f:a2:f5:11:5d:45:57:75:86:ea:76:
         cb:bd:e9:d3:2f:e8:ac:6e:22:d2:37:fc:d1:34:9a:04:6c:99:
         b2:30:c4:5c:17:b3:ff:85:c6:79:89:ab:69:fc:90:df:5b:4a:
         4e:b7:2d:e5:85:99:a0:b9:59:42:3e:6a:ec:f7:e9:94:a3:f8:
         29:f8:e4:c3:72:f4:4f:64:33:cc:68:aa:3e:d4:10:e9:ca:4f:
         8d:03:b3:87:81:c4:37:97:02:14:79:54:eb:62:63:a6:6a:05:
         c6:e6:b5:6a:d4:44:25:e1:13:27:c6:9d:1f:50:16:79:78:ea:
         a1:d0:79:33:1e:ca:a5:ba:cf:b1:00:24:18:4e:20:e2:7f:26:
         30:74:7a:57:9f:40:a5:58:cc:22:cc:1b:ab:a1:d0:0a:7b:75:
         4a:db:42:d8:f0:b4:69:5c:6e:bb:ea:a9:ef:52:89:68:c9:81:
         de:27:f3:7e:bc:c3:34:07:df:fd:1e:bb:9a:95:27:22:53:cc:
         8d:b0:82:54
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0
NTIzOUNDRjQwHhcNMjUwNzMxMDQxMDQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODVkOS03MWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkCWt27HCPwUHB6vfXZ2Mm9X49sEBqqQk7CaMYW81J79hPrpMglaEp3t95gj9
xJMvpZ8oGeUeOKE0Pbp9oGUQo1tgASIymxp1I69orXdKE0gDNuvlWjhM1w7ZA8s8
gWZUZ0zk4ODHxdfmQsRUsR8Uhbka/ub++nBFelW3moHT37oqrjBVnW3lT37vRqfc
FW3KVtuHd2w4TSmNL3RYz36chP/mghSGjW3iXtLN6s8fpjgnGF15YOWYU/n1zyur
lVI1DF/71z53pfW3Vr1B3y6DTp/PWBfqLkMOnWc3KGKN5xu954a0D6aIDKyW4A31
THmot3BlqWirjIebetUnLc2OewIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFA1rNy3n
fAU9HB+MXXox92GJT8UcMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC
NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvNzM2MkQwM0Uz
N0M1MTFFRkJBMDEzQzM0QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAELYAMwDQYJKoZIhvcNAQELBQADggEBAAyG8rFLUeyroRox8hfO
m0oODdUOavhoIhmpjwZDl1wx614v9nR+4md7Ia9ovLDt0q3EQlXasHflpixUYeJf
ovURXUVXdYbqdsu96dMv6KxuItI3/NE0mgRsmbIwxFwXs/+FxnmJq2n8kN9bSk63
LeWFmaC5WUI+auz36ZSj+Cn45MNy9E9kM8xoqj7UEOnKT40Ds4eBxDeXAhR5VOti
Y6ZqBcbmtWrURCXhEyfGnR9QFnl46qHQeTMeyqW6z7EAJBhOIOJ/JjB0elefQKVY
zCLMG6uh0Ap7dUrbQtjwtGlcbrvqqe9SiWjJgd4n8368wzQH3/0eu5qVJyJTzI2w
glQ=
-----END CERTIFICATE-----
Generated at Sat Mar 7 08:01:32 2026 by rpki-client