Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa
File:                     6023AFB22F5F11EEBE311577C4F9AE02.roa (raw, json)
Hash identifier:          tGMAIl3/k6G1q8dJnYI7hANKBUtFxchL1YEdgkkggUg=
Subject key identifier:   E3:78:48:6E:95:72:B8:54:FF:A3:70:2C:7A:A9:1C:B1:71:D5:E3:AA
Certificate issuer:       /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Certificate serial:       0293
Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 03:30:08 +0000
ROA not before:           Thu 09 Jul 2026 03:30:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     7674
IP address blocks:        2401:4640:170::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
                          rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
        Validity
            Not Before: Jul  9 03:30:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a4f15c0-2488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:05:c4:8f:1d:64:58:cb:a2:8e:f0:fd:48:
                    7b:e6:6a:7d:38:ab:c7:a9:57:26:97:cd:b9:0d:5f:
                    76:47:cd:e8:95:be:e2:3c:a8:2e:6f:d8:4b:00:7f:
                    80:3b:60:a4:9c:d4:a9:88:16:ff:f4:aa:18:26:1f:
                    09:1e:ba:94:8c:fa:24:38:93:6a:af:c8:9e:5b:73:
                    25:c5:70:39:a4:6e:93:ba:bf:4d:ae:78:44:28:7e:
                    60:4e:7e:e3:21:fe:33:39:ec:97:ee:f8:da:c5:87:
                    75:f0:23:3b:8e:a9:a3:00:7b:17:73:f6:20:dc:aa:
                    ca:d2:72:91:d0:86:28:b9:27:3e:af:c3:6f:69:cc:
                    dd:f4:84:34:14:ef:26:fa:16:35:9f:21:34:9b:4b:
                    b2:e0:38:83:ee:f2:da:99:b7:84:05:2b:51:75:45:
                    f8:33:75:02:e3:03:ae:f6:b4:8f:c5:78:8a:1e:01:
                    19:0d:cd:50:01:28:8b:43:10:61:5a:6d:55:94:e0:
                    f7:35:9d:af:4b:14:38:c7:c1:ae:1b:03:9c:26:81:
                    6a:ef:71:b7:b3:e2:6f:55:1d:bc:2b:29:09:00:16:
                    39:ac:62:8d:cd:1d:74:e9:bc:0b:60:f3:89:c2:de:
                    65:79:71:30:c2:f4:8a:66:2a:44:ba:07:1d:a5:d7:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:48:6E:95:72:B8:54:FF:A3:70:2C:7A:A9:1C:B1:71:D5:E3:AA
            X509v3 Authority Key Identifier:
                keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/6023AFB22F5F11EEBE311577C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4640:170::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:29:a8:7e:5a:c6:98:80:30:fe:46:3e:80:e1:a5:e5:f5:13:
         c0:89:c0:a2:60:53:8c:66:c1:aa:2d:f4:ae:bc:60:12:ab:b2:
         fa:11:05:89:3c:54:f1:0d:ef:de:19:75:cc:f5:5a:cf:0e:8f:
         15:45:3e:c7:e1:30:39:3b:e1:dd:e3:79:ad:f4:f8:69:21:88:
         7e:db:2d:90:50:64:13:b6:88:3f:07:08:5b:a6:5a:bd:9d:48:
         0a:45:86:c0:75:06:1b:c8:9a:72:a6:26:f9:60:e0:d4:7d:a4:
         29:28:b0:6b:87:d5:3f:f1:3d:4e:be:30:3d:4a:9f:6d:0a:96:
         c5:c1:96:c3:48:7c:a3:35:b5:d7:ff:26:98:ff:81:73:98:81:
         e3:89:af:ea:08:ca:c2:3b:98:6f:d2:e9:71:fe:e6:24:82:f6:
         57:72:a5:0c:cb:52:a0:fc:2f:80:d5:c3:5a:8a:b6:fb:8b:d6:
         cc:ed:47:f9:6b:d3:1e:23:09:e1:4b:f1:6c:fd:a7:44:9f:13:
         7d:8d:ca:45:38:98:8c:eb:55:fc:de:97:b0:5c:11:bf:19:18:
         f2:60:7a:52:f6:ec:52:16:65:69:76:67:81:3d:6a:e3:e1:ae:
         cf:6b:3a:e9:12:03:0d:ac:21:06:e7:f4:e9:cc:66:a3:27:58:
         9b:5a:1c:1a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG
QkNDRDJEMDcwHhcNMjYwNzA5MDMzMDA4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmMTVjMC0yNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx2sFxI8dZFjLoo7w/Uh75mp9OKvHqVcml825DV92R83olb7iPKgub9hLAH+A
O2CknNSpiBb/9KoYJh8JHrqUjPokOJNqr8ieW3MlxXA5pG6Tur9NrnhEKH5gTn7j
If4zOeyX7vjaxYd18CM7jqmjAHsXc/Yg3KrK0nKR0IYouSc+r8Nvaczd9IQ0FO8m
+hY1nyE0m0uy4DiD7vLambeEBStRdUX4M3UC4wOu9rSPxXiKHgEZDc1QASiLQxBh
Wm1VlOD3NZ2vSxQ4x8GuGwOcJoFq73G3s+JvVR28KykJABY5rGKNzR106bwLYPOJ
wt5leXEwwvSKZipEugcdpdcSPwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFON4SG6V
crhU/6NwLHqpHLFx1eOqMB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3
MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFCRUQvRkIyQUE4RUNCNzJBMTFFRDg4NEEwOTFEQzRGOUFFMDIvNjAyM0FGQjIy
RjVGMTFFRUJFMzExNTc3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAFGQAFwMA0GCSqGSIb3DQEBCwUAA4IBAQCSKah+WsaYgDD+Rj6A
4aXl9RPAicCiYFOMZsGqLfSuvGASq7L6EQWJPFTxDe/eGXXM9VrPDo8VRT7H4TA5
O+Hd43mt9PhpIYh+2y2QUGQTtog/Bwhbplq9nUgKRYbAdQYbyJpypib5YODUfaQp
KLBrh9U/8T1OvjA9Sp9tCpbFwZbDSHyjNbXX/yaY/4FzmIHjia/qCMrCO5hv0ulx
/uYkgvZXcqUMy1Kg/C+A1cNairb7i9bM7Uf5a9MeIwnhS/Fs/adEnxN9jcpFOJiM
61X83pewXBG/GRjyYHpS9uxSFmVpdmeBPWrj4a7PazrpEgMNrCEG5/TpzGajJ1ib
Whwa
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:22:24 2026 by rpki-client