Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa
File:                     96A61404AAA911EBA223275EC4F9AE02.roa (raw, json)
Hash identifier:          J6ptr2M/TMomERG7TufKCcit8emwLww/3Fa756sq9r0=
Subject key identifier:   D4:C5:B8:6A:2D:BA:AB:45:5F:5C:C2:E4:F0:D6:E9:CC:70:1F:AE:4F
Certificate issuer:       /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Certificate serial:       06E6
Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa
Signing time:             Tue 28 Apr 2026 23:28:51 +0000
ROA not before:           Tue 28 Apr 2026 23:28:51 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     141704
IP address blocks:        2001:df5:ee80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
                          rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766 (0x6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
        Validity
            Not Before: Apr 28 23:28:51 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f142b2-f053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:3e:1a:7e:ea:ef:13:95:9e:45:58:9d:e2:
                    7e:7e:00:de:f5:26:5e:4b:32:e5:ef:a2:3c:20:ba:
                    45:78:cc:80:75:ff:e9:9a:c9:55:96:7b:c7:15:c9:
                    90:d2:e1:58:88:79:3c:25:bc:0b:67:a3:99:04:4a:
                    67:61:e4:e7:bc:58:f0:2e:fd:84:fd:53:1e:1a:11:
                    01:b9:eb:0c:dd:82:2a:d2:58:cc:e3:81:8e:e6:ea:
                    23:80:66:b8:24:e5:13:bd:22:7e:8a:b2:80:06:ad:
                    98:fe:1c:c3:ff:4e:6a:65:5d:11:56:81:28:31:b6:
                    1c:3e:c8:b5:d5:dc:c7:ef:a9:54:23:dd:1e:2f:c5:
                    74:b8:ea:d0:cc:26:6b:49:ec:40:0d:0f:11:cb:f4:
                    1d:cf:09:be:fb:33:b4:d5:85:84:fb:54:57:11:51:
                    a4:99:8d:b9:b1:14:01:48:8d:0e:76:53:5a:42:b3:
                    33:3c:79:2e:1e:41:5f:52:c4:48:09:4c:75:3d:da:
                    f9:52:a4:65:e9:c7:d0:84:9a:55:22:78:2c:8e:b2:
                    86:e2:94:c6:7d:26:bb:d8:81:04:1a:96:0d:4c:46:
                    cc:25:23:e0:9d:72:69:2e:0a:86:c2:88:e2:c1:64:
                    53:a0:d9:2c:78:85:8f:c5:77:07:82:6a:83:2a:9a:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C5:B8:6A:2D:BA:AB:45:5F:5C:C2:E4:F0:D6:E9:CC:70:1F:AE:4F
            X509v3 Authority Key Identifier:
                keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:ee80::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:3d:46:1f:6f:17:24:3e:1f:ec:c9:9e:f3:6b:46:23:ca:99:
         81:a3:d7:c3:68:98:90:2d:34:56:da:7c:ae:50:aa:78:cb:ab:
         b8:68:5b:09:df:65:93:be:f2:11:86:91:8f:ba:2c:83:9a:06:
         c7:4f:99:e1:bc:c0:df:08:54:df:00:7e:e4:66:1b:e7:4e:48:
         43:93:c0:f1:cb:3b:a5:1f:27:c2:b2:46:43:6f:16:09:d1:29:
         8a:14:68:1c:ab:9f:25:ba:10:25:0a:3c:19:0b:98:07:10:c5:
         82:d3:f6:e9:a4:46:24:b6:0a:4e:3b:ee:27:13:4c:37:d6:dd:
         30:d3:4b:d6:51:d1:59:bf:e4:20:6e:48:5a:c3:6c:c3:f8:b9:
         de:97:02:59:0b:b9:7b:7a:2f:ed:2d:dd:32:8d:e0:80:34:0f:
         74:7f:25:93:68:20:ec:3b:56:c6:49:0f:e2:dc:76:d7:fe:72:
         7a:80:66:03:86:35:5e:55:88:0a:84:1e:41:93:a6:99:32:c9:
         ef:8b:30:8f:f0:be:03:d8:7b:ea:34:20:b4:50:c5:80:7f:52:
         e6:4d:05:ce:de:bb:1e:c0:bd:2f:07:5c:cf:a0:45:63:ac:c0:
         e4:0a:f6:cb:ed:00:e3:89:8d:15:2e:29:24:04:25:ff:73:41:
         5f:02:f0:29
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg0NUQxMTAvBgNVBAUTKEFCQTZDMEM0NkNFODg3QTYzOUQwREUwNzEzM0FFMUZG
Q0MwRDJEOTEwHhcNMjYwNDI4MjMyODUxWhcNMjYwODI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYxNDJiMi1mMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+A+Gn7q7xOVnkVYneJ+fgDe9SZeSzLl76I8ILpFeMyAdf/pmslVlnvHFcmQ
0uFYiHk8JbwLZ6OZBEpnYeTnvFjwLv2E/VMeGhEBuesM3YIq0ljM44GO5uojgGa4
JOUTvSJ+irKABq2Y/hzD/05qZV0RVoEoMbYcPsi11dzH76lUI90eL8V0uOrQzCZr
SexADQ8Ry/Qdzwm++zO01YWE+1RXEVGkmY25sRQBSI0OdlNaQrMzPHkuHkFfUsRI
CUx1Pdr5UqRl6cfQhJpVIngsjrKG4pTGfSa72IEEGpYNTEbMJSPgnXJpLgqGwoji
wWRToNkseIWPxXcHgmqDKpowxQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNTFuGot
uqtFX1zC5PDW6cxwH65PMB8GA1UdIwQYMBaAFKumwMRs6IemOdDeBxM64f/MDS2R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1RC81NDc1MTVDNjk0
OTcxMUVCOUNGODgzMkFDNEY5QUUwMi9xNmJBeEd6b2g2WTUwTjRIRXpyaF84d05M
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E2YkF4R3pvaDZZNTBONEhFenJoXzh3TkxaRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDg0NUQvNTQ3NTE1QzY5NDk3MTFFQjlDRjg4MzJBQzRGOUFFMDIvOTZBNjE0MDRB
QUE5MTFFQkEyMjMyNzVFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9e6AMA0GCSqGSIb3DQEBCwUAA4IBAQA/PUYfbxckPh/syZ7z
a0YjypmBo9fDaJiQLTRW2nyuUKp4y6u4aFsJ32WTvvIRhpGPuiyDmgbHT5nhvMDf
CFTfAH7kZhvnTkhDk8DxyzulHyfCskZDbxYJ0SmKFGgcq58luhAlCjwZC5gHEMWC
0/bppEYktgpOO+4nE0w31t0w00vWUdFZv+Qgbkhaw2zD+LnelwJZC7l7ei/tLd0y
jeCANA90fyWTaCDsO1bGSQ/i3HbX/nJ6gGYDhjVeVYgKhB5Bk6aZMsnvizCP8L4D
2HvqNCC0UMWAf1LmTQXO3rsewL0vB1zPoEVjrMDkCvbL7QDjiY0VLikkBCX/c0Ff
AvAp
-----END CERTIFICATE-----
Generated at Wed May 13 10:14:15 2026 by rpki-client