Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/D5D88D8CA78811F185D54B974311F970.roa
File:                     D5D88D8CA78811F185D54B974311F970.roa (raw, json)
Hash identifier:          i04Fzf26OB6qpqfRvq02G3AlyUuzOaLJ4XIrh5XGTvA=
Subject key identifier:   17:40:EA:74:D5:7E:B0:57:2C:B0:94:A5:69:03:1A:D4:BD:96:A8:2F
Certificate issuer:       /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial:       0E66
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/D5D88D8CA78811F185D54B974311F970.roa
Signing time:             Thu 03 Sep 2026 11:15:57 +0000
ROA not before:           Thu 03 Sep 2026 11:15:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149638
IP address blocks:        2401:1040:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
                          rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3686 (0xe66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
        Validity
            Not Before: Sep  3 11:15:57 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a9956ed-3d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:f0:5b:0f:16:59:3f:95:01:10:0e:04:b0:
                    ab:e9:f1:1c:3a:31:b3:d4:02:be:9c:1c:51:4a:70:
                    31:2d:d2:c4:41:4e:19:53:8d:b5:45:ce:45:f1:97:
                    71:80:da:03:f3:b4:86:8a:ff:a6:bd:e2:ec:10:72:
                    b9:19:c7:c4:71:62:90:bb:c8:78:ca:70:9d:56:79:
                    bb:a5:8e:28:a5:16:9e:ce:c0:5b:2e:e5:90:ae:d6:
                    0a:fc:61:0b:8a:ec:50:da:2e:d6:51:6c:14:71:0d:
                    e5:62:f3:01:a4:8c:1c:05:a3:70:ae:58:23:78:70:
                    5d:63:c5:56:d5:fb:05:a3:7c:ec:d7:72:13:24:fd:
                    45:2d:8d:30:63:84:75:17:24:64:5f:30:d0:81:67:
                    36:23:b4:56:d0:cf:05:dc:18:0b:6f:bb:a8:bf:1f:
                    54:79:10:0f:bc:fd:4e:6e:df:93:c2:9d:39:81:80:
                    bb:73:c2:8c:54:1d:21:45:d3:e0:14:06:b8:3a:2d:
                    22:8e:26:44:8c:07:50:d7:33:79:4a:3f:fb:20:ff:
                    89:e4:39:cb:6b:21:89:30:6d:c8:0c:8c:07:99:3c:
                    49:b2:48:1e:98:b9:db:44:6e:99:ee:23:5d:a9:08:
                    fc:fa:58:b8:2a:1c:43:4a:a5:b0:bf:75:52:bf:ef:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:40:EA:74:D5:7E:B0:57:2C:B0:94:A5:69:03:1A:D4:BD:96:A8:2F
            X509v3 Authority Key Identifier:
                keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/D5D88D8CA78811F185D54B974311F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1040:401::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:c6:d6:80:f7:85:e6:73:3a:24:78:01:53:83:c8:25:3a:
         77:de:97:96:bd:9c:ef:fd:5d:a9:0b:35:e7:b9:d7:40:fe:1d:
         de:1e:7f:02:cb:1f:b1:a9:20:cf:07:6b:08:63:35:44:7d:8a:
         88:f5:cc:0b:82:35:8b:03:80:27:d1:83:96:8e:7f:32:c9:b3:
         09:89:58:d4:29:fe:3b:e5:9f:61:25:58:f5:d5:e5:0c:7c:ed:
         3d:ae:da:87:2a:ba:96:fb:ae:a9:89:be:ce:7c:33:c8:05:59:
         e4:7b:09:27:68:72:89:e2:e3:42:64:b9:55:ce:01:f2:04:d5:
         70:e5:3b:0d:57:2d:4a:cb:94:fb:f5:dd:af:e1:d1:2e:7f:90:
         e3:a0:f1:ad:ec:25:b1:73:6b:c6:0f:eb:a9:94:5b:28:94:ef:
         7d:64:7f:fd:45:22:bd:d8:2c:05:e4:05:11:fb:d0:7c:6b:40:
         10:d7:9d:70:fb:69:47:c2:86:92:7e:ef:e5:de:ea:a3:eb:1f:
         46:0f:44:20:7d:47:a9:b7:92:d4:25:1d:43:9d:0e:15:f4:57:
         58:1b:25:98:14:ab:53:16:45:fc:eb:0d:a2:a3:e0:e8:f1:7a:
         41:5b:cb:25:0b:4e:03:8c:18:c4:5f:13:06:2d:33:5e:73:1f:
         0e:93:91:36
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw
ODc0OEQwREYwHhcNMjYwOTAzMTExNTU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk5NTZlZC0zZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzPwWw8WWT+VARAOBLCr6fEcOjGz1AK+nBxRSnAxLdLEQU4ZU421Rc5F8Zdx
gNoD87SGiv+mveLsEHK5GcfEcWKQu8h4ynCdVnm7pY4opRaezsBbLuWQrtYK/GEL
iuxQ2i7WUWwUcQ3lYvMBpIwcBaNwrlgjeHBdY8VW1fsFo3zs13ITJP1FLY0wY4R1
FyRkXzDQgWc2I7RW0M8F3BgLb7uovx9UeRAPvP1Obt+Twp05gYC7c8KMVB0hRdPg
FAa4Oi0ijiZEjAdQ1zN5Sj/7IP+J5DnLayGJMG3IDIwHmTxJskgemLnbRG6Z7iNd
qQj8+li4KhxDSqWwv3VSv+8gdwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBdA6nTV
frBXLLCUpWkDGtS9lqgvMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0
RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvRDVEODhEOENB
Nzg4MTFGMTg1RDU0Qjk3NDMxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAEQQAQBMA0GCSqGSIb3DQEBCwUAA4IBAQAtJcbWgPeF5nM6JHgB
U4PIJTp33peWvZzv/V2pCzXnuddA/h3eHn8Cyx+xqSDPB2sIYzVEfYqI9cwLgjWL
A4An0YOWjn8yybMJiVjUKf475Z9hJVj11eUMfO09rtqHKrqW+66pib7OfDPIBVnk
ewknaHKJ4uNCZLlVzgHyBNVw5TsNVy1Ky5T79d2v4dEuf5DjoPGt7CWxc2vGD+up
lFsolO99ZH/9RSK92CwF5AUR+9B8a0AQ151w+2lHwoaSfu/l3uqj6x9GD0QgfUep
t5LUJR1DnQ4V9FdYGyWYFKtTFkX86w2io+Do8XpBW8slC04DjBjEXxMGLTNecx8O
k5E2
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:30 2026 by rpki-client