Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/1D63B4248BB011F0A730E413C4F9AE02.roa
File:                     1D63B4248BB011F0A730E413C4F9AE02.roa (raw, json)
Hash identifier:          Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=
Subject key identifier:   CF:A8:20:CB:E2:FB:29:F5:A3:B7:2D:3B:3A:50:90:09:7D:30:BF:15
Certificate issuer:       /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
Certificate serial:       0187
Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/1D63B4248BB011F0A730E413C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 04:39:50 +0000
ROA not before:           Tue 03 Mar 2026 04:39:50 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152473
IP address blocks:        2001:df3:74c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl
                          rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A
        Validity
            Not Before: Mar  3 04:39:50 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a66616-063d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:1b:7c:c2:e1:79:f4:01:09:08:d9:41:1f:
                    5d:17:58:59:6f:07:42:3b:04:f8:38:bd:6a:d1:db:
                    0b:05:f7:f4:80:a8:12:26:18:0b:66:4f:7b:9a:df:
                    b6:9d:3c:ff:8e:38:eb:46:8f:1d:dd:8a:19:18:a8:
                    4b:d4:92:52:1d:1e:64:ae:80:1a:e5:5c:88:3d:06:
                    44:c9:b4:e1:98:59:6d:aa:3a:29:43:3f:81:88:bd:
                    f4:82:da:f6:ab:69:40:58:b9:2b:5f:ab:38:3d:ba:
                    8b:bc:ee:26:c4:2c:01:cf:73:26:69:c1:58:9d:92:
                    bd:73:aa:fb:2d:b3:4e:71:69:27:db:3b:23:36:07:
                    7e:03:57:57:51:bd:b2:0c:e1:4b:4f:90:9a:52:ae:
                    1c:24:94:db:a1:6d:19:3d:47:09:c7:d0:16:51:d2:
                    81:5a:f1:ef:6a:41:75:b1:2c:f8:00:e9:16:61:f6:
                    2e:b4:2d:1d:67:68:67:dc:c2:fb:f5:a3:3a:7d:d1:
                    6e:6e:9c:e5:20:51:89:c9:23:21:33:ea:3a:73:6f:
                    2f:3d:c7:37:38:34:49:66:8e:5e:47:24:0e:1e:42:
                    2f:2f:ed:78:14:bf:e7:cd:27:f3:1e:22:a6:ba:2f:
                    e9:70:10:54:10:b4:1b:08:b0:f6:8a:9e:8b:20:2d:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A8:20:CB:E2:FB:29:F5:A3:B7:2D:3B:3A:50:90:09:7D:30:BF:15
            X509v3 Authority Key Identifier:
                keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/1D63B4248BB011F0A730E413C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:74c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:fb:1e:59:23:bf:7f:b5:25:2e:db:4b:85:fe:35:96:bd:
         50:b8:7d:ef:0f:da:ea:81:65:81:1c:73:ac:4d:58:b3:e9:0d:
         10:a7:51:3d:43:72:40:9c:99:e7:34:96:6d:a3:48:64:b7:3f:
         19:fd:e7:7f:ab:54:68:45:0c:41:d0:08:09:94:4c:3e:be:da:
         cb:ce:fc:6a:12:e8:24:8b:7e:a4:71:b4:32:f2:ab:3a:2e:aa:
         14:f2:dc:b5:a8:17:48:21:d2:e8:51:e3:c0:67:35:ac:80:36:
         6f:f0:cc:49:f2:81:75:c2:cb:a6:4b:a2:66:ec:c0:9c:b7:1d:
         6f:85:23:c8:df:3e:fe:d0:29:c7:db:6e:ed:6b:2e:d3:96:47:
         d9:45:1f:42:c9:a9:aa:05:6a:72:4e:93:7d:17:33:23:ed:73:
         b4:31:4e:2a:dd:c4:a4:ba:96:7e:74:cb:94:d3:7f:a9:c6:87:
         4a:47:21:ea:3b:ac:5f:b4:89:fc:7c:26:bf:5b:a4:50:dd:6f:
         d4:86:53:32:86:a6:5d:95:65:45:bd:97:30:32:97:78:48:7b:
         22:96:64:0c:25:8c:46:64:35:70:14:d2:be:6c:bb:da:32:91:
         7b:72:f7:a1:9e:7a:61:23:1b:a2:db:37:10:d0:32:07:e1:a9:
         c9:44:5c:18
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE3MTExMTAvBgNVBAUTKEYxQURCRDBFNzEzOTFERjIxMERFMzQ2MUU3NjU3OEI0
N0EwMTYyNEEwHhcNMjYwMzAzMDQzOTUwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2NjYxNi0wNjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtF8bfMLhefQBCQjZQR9dF1hZbwdCOwT4OL1q0dsLBff0gKgSJhgLZk97mt+2
nTz/jjjrRo8d3YoZGKhL1JJSHR5kroAa5VyIPQZEybThmFltqjopQz+BiL30gtr2
q2lAWLkrX6s4PbqLvO4mxCwBz3MmacFYnZK9c6r7LbNOcWkn2zsjNgd+A1dXUb2y
DOFLT5CaUq4cJJTboW0ZPUcJx9AWUdKBWvHvakF1sSz4AOkWYfYutC0dZ2hn3ML7
9aM6fdFubpzlIFGJySMhM+o6c28vPcc3ODRJZo5eRyQOHkIvL+14FL/nzSfzHiKm
ui/pcBBUELQbCLD2ip6LIC3ecQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFM+oIMvi
+yn1o7ctOzpQkAl9ML8VMB8GA1UdIwQYMBaAFPGtvQ5xOR3yEN40YedleLR6AWJK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS9BOTUwREZEQUM5
OTExMUVFODkxQkE0MTlDNEY5QUUwMi84YTI5RG5FNUhmSVEzalJoNTJWNHRIb0JZ
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhhMjlEbkU1SGZJUTNqUmg1MlY0dEhvQllrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE3MTEvQTk1MERGREFDOTkxMTFFRTg5MUJBNDE5QzRGOUFFMDIvMUQ2M0I0MjQ4
QkIwMTFGMEE3MzBFNDEzQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN83TAMA0GCSqGSIb3DQEBCwUAA4IBAQAfLvseWSO/f7UlLttL
hf41lr1QuH3vD9rqgWWBHHOsTViz6Q0Qp1E9Q3JAnJnnNJZto0hktz8Z/ed/q1Ro
RQxB0AgJlEw+vtrLzvxqEugki36kcbQy8qs6LqoU8ty1qBdIIdLoUePAZzWsgDZv
8MxJ8oF1wsumS6Jm7MCctx1vhSPI3z7+0CnH227tay7TlkfZRR9CyamqBWpyTpN9
FzMj7XO0MU4q3cSkupZ+dMuU03+pxodKRyHqO6xftIn8fCa/W6RQ3W/UhlMyhqZd
lWVFvZcwMpd4SHsilmQMJYxGZDVwFNK+bLvaMpF7cvehnnphIxui2zcQ0DIH4anJ
RFwY
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:18 2026 by rpki-client