Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/1AC505BE090B11F1A5787D1E363D8C67.roa
File:                     1AC505BE090B11F1A5787D1E363D8C67.roa (raw, json)
Hash identifier:          6dvfhysIbcVTCkyj0ZkmbXr/UmJBK+KvtS/v29xveLo=
Subject key identifier:   F5:62:38:19:02:5C:02:56:64:BC:AB:BF:96:3C:69:92:E5:1F:52:FB
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       0315
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/1AC505BE090B11F1A5787D1E363D8C67.roa
Signing time:             Sun 01 Mar 2026 18:33:25 +0000
ROA not before:           Fri 13 Feb 2026 18:37:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     26042
IP address blocks:        2400:ac20:5051::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
                          rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Feb 13 18:37:52 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48675-41e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:53:5a:47:95:90:79:38:52:b2:0d:5f:34:8a:
                    35:b9:92:f4:30:37:14:08:ea:88:59:56:c4:ef:10:
                    98:66:e9:b4:f2:3a:72:28:61:b4:39:c4:8b:4d:de:
                    95:a1:b4:66:bb:44:bc:74:f3:9f:ea:1b:06:fd:58:
                    21:b4:6c:19:3b:94:e9:90:2e:1e:22:74:dd:9d:33:
                    37:a5:4e:07:75:44:0c:7a:9b:a4:d9:1d:6f:d9:1f:
                    f4:16:68:dd:f0:8c:05:1f:ea:48:86:cb:60:d8:bc:
                    d0:7d:b7:4d:f6:d2:44:53:6a:bc:82:e9:b2:4b:c6:
                    67:b3:87:e6:79:48:bb:a7:6b:bf:91:3a:c2:58:9a:
                    bb:9b:64:eb:c0:01:30:d1:52:88:36:da:07:3c:7f:
                    5c:a3:93:d3:c9:76:59:1a:43:29:02:d6:0f:b4:da:
                    da:b7:7e:e3:6b:4c:8d:8e:82:38:a5:aa:7a:de:30:
                    06:37:81:5c:82:79:b8:8c:71:3c:09:22:1f:34:82:
                    a3:35:d7:31:e4:cd:cd:3d:29:52:c4:2d:1d:3c:5e:
                    44:ae:6b:3e:3b:15:7b:e1:ff:e3:23:bb:89:be:eb:
                    ad:9e:ac:63:72:a3:4a:32:54:24:26:fa:6d:19:03:
                    56:5a:7a:1b:b3:4d:2c:e0:76:aa:f4:22:b7:e1:ae:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:62:38:19:02:5C:02:56:64:BC:AB:BF:96:3C:69:92:E5:1F:52:FB
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/1AC505BE090B11F1A5787D1E363D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ac20:5051::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:6b:65:eb:fa:9e:fa:69:36:dd:b6:fa:b0:06:24:6a:71:f1:
         d5:72:06:7b:f7:60:86:8a:18:6a:34:ed:d6:d8:cc:7f:fe:00:
         8c:97:80:b0:36:da:d8:92:31:ed:9a:69:21:4d:6a:b4:88:22:
         f1:61:77:9a:60:b9:93:db:89:7c:79:0c:5c:35:0e:b9:4f:8e:
         26:a4:11:4d:28:cf:a8:23:37:52:eb:de:cb:5c:9d:17:7e:9a:
         3e:e2:32:b8:c5:44:2e:95:9c:e4:82:95:09:d0:d9:8e:4f:f6:
         06:ba:43:b6:64:a3:2a:a8:b7:86:10:fc:2c:08:35:f3:6d:68:
         b6:50:8c:28:81:3c:71:8d:03:9e:84:ec:09:02:d6:ea:54:34:
         42:80:35:50:65:fd:e3:73:31:31:82:2d:49:a4:35:ec:da:49:
         0c:e2:36:e3:6f:64:a0:cb:c2:0a:70:2b:8e:45:c8:a8:fb:46:
         d6:a3:42:7b:bf:82:8d:84:3a:38:13:45:33:ab:03:7f:f7:01:
         92:49:1c:6e:f0:d1:f2:7f:ee:30:06:79:ad:d6:98:6f:1a:cb:
         5b:6e:1f:b8:af:32:f5:f9:b7:35:63:18:0c:21:2a:fb:ea:b4:
         f5:a2:46:85:b1:d9:c3:a6:2b:25:65:09:6b:f5:9a:d2:ee:ce:
         0f:49:56:d1
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY2MUMxMTAvBgNVBAUTKDc0QUVCNjNGMkYxREE5NTdENjU4MjA5NjRGRjc5REYw
RjU5MzgwMEMwHhcNMjYwMjEzMTgzNzUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODY3NS00MWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhlNaR5WQeThSsg1fNIo1uZL0MDcUCOqIWVbE7xCYZum08jpyKGG0OcSLTd6V
obRmu0S8dPOf6hsG/VghtGwZO5TpkC4eInTdnTM3pU4HdUQMepuk2R1v2R/0Fmjd
8IwFH+pIhstg2LzQfbdN9tJEU2q8gumyS8Zns4fmeUi7p2u/kTrCWJq7m2TrwAEw
0VKINtoHPH9co5PTyXZZGkMpAtYPtNrat37ja0yNjoI4pap63jAGN4Fcgnm4jHE8
CSIfNIKjNdcx5M3NPSlSxC0dPF5Erms+OxV74f/jI7uJvuutnqxjcqNKMlQkJvpt
GQNWWnobs00s4Haq9CK34a6acwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPViOBkC
XAJWZLyrv5Y8aZLlH1L7MB8GA1UdIwQYMBaAFHSutj8vHalX1lgglk/3nfD1k4AM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjYxQy83NzBDQkUyNDM2
QTYxMUVEOEZDMTcwMkNDNEY5QUUwMi9kSzYyUHk4ZHFWZldXQ0NXVF9lZDhQV1Rn
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RLNjJQeThkcVZmV1dDQ1dUX2VkOFBXVGdBdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDY2MUMvNzcwQ0JFMjQzNkE2MTFFRDhGQzE3MDJDQzRGOUFFMDIvMUFDNTA1QkUw
OTBCMTFGMUE1Nzg3RDFFMzYzRDhDNjcucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJACsIFBRMA0GCSqGSIb3DQEBCwUAA4IBAQCQa2Xr+p76aTbdtvqw
BiRqcfHVcgZ792CGihhqNO3W2Mx//gCMl4CwNtrYkjHtmmkhTWq0iCLxYXeaYLmT
24l8eQxcNQ65T44mpBFNKM+oIzdS697LXJ0Xfpo+4jK4xUQulZzkgpUJ0NmOT/YG
ukO2ZKMqqLeGEPwsCDXzbWi2UIwogTxxjQOehOwJAtbqVDRCgDVQZf3jczExgi1J
pDXs2kkM4jbjb2Sgy8IKcCuORcio+0bWo0J7v4KNhDo4E0UzqwN/9wGSSRxu8NHy
f+4wBnmt1phvGstbbh+4rzL1+bc1YxgMISr76rT1okaFsdnDpislZQlr9ZrS7s4P
SVbR
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:52 2026 by rpki-client