Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/061796780C2511F199949558073D8C67.roa
File:                     061796780C2511F199949558073D8C67.roa (raw, json)
Hash identifier:          CFhJ2j6PzNLKmMtQJY2IEbcroEpirGdBOfvLhPskhS0=
Subject key identifier:   F5:77:F5:C6:D1:64:92:89:0E:1B:3A:DB:3F:2E:98:8A:70:4C:D3:37
Certificate issuer:       /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial:       05D9
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/061796780C2511F199949558073D8C67.roa
Signing time:             Mon 02 Mar 2026 22:45:24 +0000
ROA not before:           Tue 17 Feb 2026 17:20:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133369
IP address blocks:        2402:41a0:6::/48 maxlen: 48
                          2402:41a0:7::/48 maxlen: 48
                          2402:41a0:8::/48 maxlen: 48
                          2402:41a0:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
                          rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
        Validity
            Not Before: Feb 17 17:20:58 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61304-c231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:1d:8e:b7:94:b3:99:05:27:84:a5:c3:53:89:
                    12:24:d0:ad:96:cf:54:74:c1:0c:de:f9:e7:17:f7:
                    40:59:87:a9:61:ff:f5:bb:90:af:6d:71:b3:c2:3b:
                    5e:33:bb:62:5e:04:b0:ea:ba:1f:78:2b:7b:94:e6:
                    87:18:c0:c7:82:a0:fe:7b:d3:d8:13:0f:ab:c0:ac:
                    0b:a5:f9:22:4c:dd:38:ad:9b:11:5d:8a:39:3b:e8:
                    90:da:5d:97:39:ad:81:4f:c7:ef:e9:2a:48:ec:e7:
                    b3:e7:bf:fd:d4:c3:e1:88:e7:a7:5b:cd:d1:dd:2e:
                    10:4f:e5:9f:2c:c8:7e:e3:99:2f:b8:64:27:24:cc:
                    2f:dd:a2:9b:9d:c6:ae:30:c2:06:cf:f3:cc:45:74:
                    29:17:c6:80:69:24:d4:bf:77:ae:4c:41:1c:05:4c:
                    82:f3:db:17:19:51:4d:a6:26:0e:a6:24:33:8c:2e:
                    59:36:db:bc:f8:df:53:73:e5:78:2f:23:af:35:ed:
                    35:6c:39:3b:86:83:d4:16:f0:9c:26:5c:09:5c:48:
                    81:ac:8b:51:a0:a7:c5:eb:ec:99:9a:cc:ea:d1:36:
                    88:68:86:62:e3:07:ed:e7:e4:ca:20:6e:04:90:67:
                    aa:f2:33:eb:f2:bc:b2:dd:b4:cf:59:c3:aa:9a:d1:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:77:F5:C6:D1:64:92:89:0E:1B:3A:DB:3F:2E:98:8A:70:4C:D3:37
            X509v3 Authority Key Identifier:
                keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/061796780C2511F199949558073D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:41a0:6::-2402:41a0:9:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         70:27:63:8a:85:1a:40:31:a6:b6:3e:54:0d:92:35:e5:e7:32:
         11:c4:5f:63:3e:c2:f3:1c:8c:48:07:ff:91:49:8a:66:ad:55:
         06:4e:24:a8:ba:b0:12:95:c5:a6:8b:81:13:68:01:e9:3e:b9:
         0a:7e:d1:9a:16:7b:65:85:21:21:a6:5f:df:8c:60:47:52:b6:
         8a:c9:79:50:56:04:d8:cb:47:61:e6:ef:3b:c1:54:ad:be:ef:
         4b:6a:bb:c7:0a:90:21:40:be:e3:3a:39:7d:68:1b:3f:70:ab:
         2f:21:bc:3d:bb:8e:ae:1c:8d:72:ed:5a:41:68:21:0f:7e:11:
         9e:ba:12:93:41:e6:db:59:69:5a:6e:03:50:64:bb:43:bd:4a:
         7e:2b:8f:60:9d:c0:9d:1a:eb:95:a8:65:22:b9:aa:64:74:e2:
         8b:14:fb:32:d1:07:14:e3:0f:96:91:2e:4a:43:1a:d4:37:ff:
         b5:8f:d6:9e:98:1a:31:c5:b1:83:57:91:2d:e5:de:c1:a5:4b:
         81:99:a2:0b:c0:d9:2d:33:84:f0:d2:23:42:e6:a3:c1:18:4f:
         10:05:fb:4f:06:33:d0:b8:25:07:94:ad:47:7c:cd:e9:ed:f9:
         e6:66:8a:53:36:2d:84:f3:9f:87:8b:22:24:78:39:e8:a6:7c:
         dd:4e:8f:2d
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICBdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0
MzAxMjZGRDMwHhcNMjYwMjE3MTcyMDU4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MTMwNC1jMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/R2Ot5SzmQUnhKXDU4kSJNCtls9UdMEM3vnnF/dAWYepYf/1u5CvbXGzwjte
M7tiXgSw6rofeCt7lOaHGMDHgqD+e9PYEw+rwKwLpfkiTN04rZsRXYo5O+iQ2l2X
Oa2BT8fv6SpI7Oez57/91MPhiOenW83R3S4QT+WfLMh+45kvuGQnJMwv3aKbncau
MMIGz/PMRXQpF8aAaSTUv3euTEEcBUyC89sXGVFNpiYOpiQzjC5ZNtu8+N9Tc+V4
LyOvNe01bDk7hoPUFvCcJlwJXEiBrItRoKfF6+yZmszq0TaIaIZi4wft5+TKIG4E
kGeq8jPr8ryy3bTPWcOqmtEeUQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFPV39cbR
ZJKJDhs62z8umIpwTNM3MB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1
NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0VGQUIvRTgyRDA2RkUwNTc0MTFFQ0EyNDJDNTdGQzRGOUFFMDIvMDYxNzk2Nzgw
QzI1MTFGMTk5OTQ5NTU4MDczRDhDNjcucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAAjAUMBIDBwEkAkGgAAYDBwEkAkGgAAgwDQYJKoZIhvcNAQELBQADggEBAHAn
Y4qFGkAxprY+VA2SNeXnMhHEX2M+wvMcjEgH/5FJimatVQZOJKi6sBKVxaaLgRNo
Aek+uQp+0ZoWe2WFISGmX9+MYEdStorJeVBWBNjLR2Hm7zvBVK2+70tqu8cKkCFA
vuM6OX1oGz9wqy8hvD27jq4cjXLtWkFoIQ9+EZ66EpNB5ttZaVpuA1Bku0O9Sn4r
j2CdwJ0a65WoZSK5qmR04osU+zLRBxTjD5aRLkpDGtQ3/7WP1p6YGjHFsYNXkS3l
3sGlS4GZogvA2S0zhPDSI0Lmo8EYTxAF+08GM9C4JQeUrUd8zent+eZmilM2LYTz
n4eLIiR4OeimfN1Ojy0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:43 2026 by rpki-client