Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa
File:                     13B46272139511F0BAC02735C4F9AE02.roa (raw, json)
Hash identifier:          9BLP4fuFM870a7urAU2qoqDlhTnPcRo3RUzBO9Wc+7c=
Subject key identifier:   BB:64:2E:3A:DE:D6:50:94:99:0B:4D:EF:D5:D3:3B:97:E9:80:84:99
Certificate issuer:       /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial:       0129
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:53:58 +0000
ROA not before:           Mon 07 Apr 2025 09:45:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209650
IP address blocks:        2401:f860:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
                          rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
        Validity
            Not Before: Apr  7 09:45:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59676-bec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:20:d1:47:76:f4:57:48:b7:8a:81:c5:17:
                    c5:83:33:5a:1c:65:d2:f3:b6:e6:2f:01:df:d4:78:
                    ee:6e:36:20:55:81:26:54:62:6a:fa:1a:87:4e:31:
                    26:2b:44:00:4d:1c:cb:23:f0:4c:cf:01:77:fc:cb:
                    93:39:49:6f:ac:2c:2d:bc:c3:52:86:66:6b:77:33:
                    ee:d8:a8:50:46:51:d0:52:72:7e:1e:40:0d:d0:ec:
                    c3:ce:7e:7f:f3:0f:de:48:a7:14:ad:4a:2c:23:dc:
                    b5:00:ad:eb:8a:96:26:60:55:0a:6a:d4:71:c3:78:
                    b3:e0:49:3f:65:fd:10:5c:c8:30:d7:1a:a4:e2:fc:
                    4e:77:cb:76:dd:d6:cd:2d:db:07:2a:4d:15:96:e5:
                    69:09:16:0f:1c:5b:7f:fc:eb:94:b2:c9:5e:bb:3b:
                    6a:10:75:f2:ca:79:77:75:0b:35:6b:cc:75:b5:ae:
                    7d:06:0e:61:06:58:c9:01:18:69:6f:b5:94:3d:34:
                    a1:64:bd:bd:cb:83:2d:b4:8b:2e:26:75:b2:ad:c7:
                    53:57:f1:17:6f:22:5e:c8:15:66:88:91:da:83:ef:
                    49:14:c1:e3:59:79:1d:76:44:da:62:08:57:95:7b:
                    f0:5b:65:af:13:80:8f:93:58:cc:15:e2:56:2d:a3:
                    e7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:64:2E:3A:DE:D6:50:94:99:0B:4D:EF:D5:D3:3B:97:E9:80:84:99
            X509v3 Authority Key Identifier:
                keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f860:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:81:79:6d:d9:06:bc:9d:a3:1c:f3:49:6d:7f:86:cd:57:c2:
         60:71:ef:d5:ee:98:3e:d8:b9:34:d4:7e:72:2e:f6:1d:d2:60:
         86:91:38:a5:72:2e:a0:6b:e9:72:a9:f0:76:3a:b8:87:38:28:
         81:32:59:04:b9:ae:02:f8:78:ca:be:dd:dc:1e:e2:df:e3:96:
         a2:ec:a2:9c:04:5f:d7:97:b8:9e:07:f1:d3:31:3a:10:a9:f8:
         b3:d2:13:33:3c:8a:68:fb:6e:34:a1:8c:b3:88:96:39:c8:56:
         d6:17:c8:dc:5c:e1:b6:8b:a9:a3:80:8a:dc:89:97:5e:12:fa:
         8e:c3:33:e0:4a:bb:7a:63:80:48:4f:46:77:56:fa:62:ca:c8:
         9f:6c:8d:46:51:55:5d:2c:ff:f6:50:42:86:ec:1b:ba:25:f8:
         c0:fe:ec:cd:1d:4a:67:26:66:8e:f1:ef:c1:45:32:cb:4c:99:
         33:63:44:70:d4:11:6c:24:b8:09:5c:8c:f8:8d:aa:db:f4:7e:
         06:36:cd:12:26:7f:17:e2:3f:0f:e5:59:e4:89:a7:82:56:98:
         ed:9d:42:81:09:00:4b:f7:53:8d:4b:38:c0:5e:72:19:1a:a2:
         b5:6e:10:75:60:64:98:18:54:3b:ed:d3:94:d1:10:1a:35:70:
         2f:9e:a8:17
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDOTgxMTAvBgNVBAUTKEZGOENDQkU2MTg3NTVBMUY1MTk5QkQwQzgyNzYwRThF
REI4Rjg1QkEwHhcNMjUwNDA3MDk0NTQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTY3Ni1iZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnNAg0Ud29FdIt4qBxRfFgzNaHGXS87bmLwHf1HjubjYgVYEmVGJq+hqHTjEm
K0QATRzLI/BMzwF3/MuTOUlvrCwtvMNShmZrdzPu2KhQRlHQUnJ+HkAN0OzDzn5/
8w/eSKcUrUosI9y1AK3ripYmYFUKatRxw3iz4Ek/Zf0QXMgw1xqk4vxOd8t23dbN
LdsHKk0VluVpCRYPHFt//OuUssleuztqEHXyynl3dQs1a8x1ta59Bg5hBljJARhp
b7WUPTShZL29y4MttIsuJnWyrcdTV/EXbyJeyBVmiJHag+9JFMHjWXkddkTaYghX
lXvwW2WvE4CPk1jMFeJWLaPnBQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFLtkLjre
1lCUmQtN79XTO5fpgISZMB8GA1UdIwQYMBaAFP+My+YYdVofUZm9DIJ2Do7bj4W6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkM5OC9BQkFGRjVFQTA2
MTIxMUYwOEU5QUU1MjlDNEY5QUUwMi9fNHpMNWhoMVdoOVJtYjBNZ25ZT2p0dVBo
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL180ekw1aGgxV2g5Um1iME1nbllPanR1UGhiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJDOTgvQUJBRkY1RUEwNjEyMTFGMDhFOUFFNTI5QzRGOUFFMDIvMTNCNDYyNzIx
Mzk1MTFGMEJBQzAyNzM1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAH4YAIAMA0GCSqGSIb3DQEBCwUAA4IBAQAhgXlt2Qa8naMc80lt
f4bNV8Jgce/V7pg+2Lk01H5yLvYd0mCGkTilci6ga+lyqfB2OriHOCiBMlkEua4C
+HjKvt3cHuLf45ai7KKcBF/Xl7ieB/HTMToQqfiz0hMzPIpo+240oYyziJY5yFbW
F8jcXOG2i6mjgIrciZdeEvqOwzPgSrt6Y4BIT0Z3VvpiysifbI1GUVVdLP/2UEKG
7Bu6JfjA/uzNHUpnJmaO8e/BRTLLTJkzY0Rw1BFsJLgJXIz4jarb9H4GNs0SJn8X
4j8P5VnkiaeCVpjtnUKBCQBL91ONSzjAXnIZGqK1bhB1YGSYGFQ77dOU0RAaNXAv
nqgX
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:24:08 2026 by rpki-client