Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa
File:                     D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa (raw, json)
Hash identifier:          L1BQlodbLjWzbDTDZTd+cJJ3MiEG96Az6Cag05j+tjQ=
Subject key identifier:   A8:DF:AD:79:86:30:C0:19:D4:8F:BF:91:2B:26:A7:2C:30:D0:A2:8B
Certificate issuer:       /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial:       0831
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa
Signing time:             Tue 29 Sep 2026 06:41:37 +0000
ROA not before:           Tue 29 Sep 2026 06:41:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134455
IP address blocks:        2406:e7c0::/32 maxlen: 32
                          2406:e7c0:1000::/36 maxlen: 36
                          2406:e7c0:c000::/36 maxlen: 36
                          2406:e7c0:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
                          rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:31:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
        Validity
            Not Before: Sep 29 06:41:37 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6abb5da1-b218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:e8:1f:18:2d:a9:e2:ff:dd:48:8c:f1:91:
                    5e:64:25:a6:ed:a7:11:a7:b7:d0:2c:c1:56:f0:3c:
                    ec:ca:5d:99:c7:5b:a1:12:68:05:06:25:e4:84:8f:
                    44:2a:c5:9a:03:e1:78:d4:0d:c4:b0:c3:d2:3a:2c:
                    32:77:d4:23:b0:09:91:eb:74:d5:46:5c:99:b5:87:
                    b6:c4:d2:c3:c7:fb:a7:f9:60:3c:70:f9:55:19:0b:
                    cb:11:5d:1f:df:1d:65:b6:f5:73:4f:d6:83:75:72:
                    1e:86:30:63:55:47:02:c1:71:6b:7f:20:aa:8f:75:
                    ef:5a:56:cc:37:f5:ec:5b:41:a4:0a:a1:50:4d:91:
                    f1:81:76:c4:6b:61:06:77:8e:17:e4:bd:e9:f9:96:
                    ed:42:c6:a4:c8:46:a1:a2:e9:8b:4b:bf:1f:fa:f7:
                    66:89:8f:3c:97:c9:5e:04:f3:1e:17:e4:6d:0f:e6:
                    ab:f9:e3:71:c2:a5:35:1d:b5:3a:a2:6e:e8:ce:ef:
                    30:1b:c9:44:64:92:f9:19:47:eb:51:ee:20:5e:4e:
                    7c:ef:5e:de:76:61:23:94:e7:01:a1:be:a0:00:12:
                    07:f9:c0:ab:d7:6d:77:62:33:5e:1c:88:df:1d:56:
                    fe:b6:81:f7:55:08:5b:d3:66:cb:95:00:34:bd:7c:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DF:AD:79:86:30:C0:19:D4:8F:BF:91:2B:26:A7:2C:30:D0:A2:8B
            X509v3 Authority Key Identifier:
                keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/D1AFFC66BBD011F1A3EF2FC2A9EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:5d:ee:fc:52:0f:58:ce:54:b6:8b:bc:9d:16:87:32:12:
         68:c3:7f:01:df:cb:1c:5d:7d:eb:77:0d:a6:4b:ac:b0:07:85:
         1e:76:c8:8f:b4:18:6e:fa:25:4d:de:fe:64:69:c4:8c:12:6a:
         50:cc:43:7a:f5:1d:f0:b0:12:9d:14:75:3b:43:c6:91:5f:74:
         d2:74:62:ba:3c:77:ac:f2:8f:9a:ce:03:d2:1d:c1:e0:b9:07:
         02:ec:75:33:fc:40:30:28:e4:fb:ce:5d:c5:e2:1b:fc:27:af:
         8e:a9:2b:d1:91:38:1b:9d:fd:87:96:46:54:e2:a5:3a:85:b0:
         f8:dd:b5:57:bf:0e:67:ef:cd:58:1f:b0:58:39:1d:3a:65:51:
         4b:1f:ac:d0:5c:f3:3c:27:da:a8:c0:6c:20:f5:78:22:df:51:
         95:39:a4:e7:a6:e0:ca:d7:96:68:d1:20:c7:c9:88:88:61:ca:
         c4:ba:75:a5:42:7e:dc:5f:cb:be:c2:8e:c5:1a:a6:4c:3b:7a:
         cd:2f:ac:27:9e:af:37:48:83:d3:aa:af:ad:4f:8f:ce:6d:af:
         42:3c:71:20:92:16:c5:be:8b:4c:48:e1:56:78:ab:5d:89:64:
         d0:32:9a:b0:8e:78:36:8c:1b:c1:15:dc:b6:fb:c9:3c:cf:60:
         c8:ae:81:ad
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEMUQxMTAvBgNVBAUTKDNGNzMxMzYzRkU0NzQwNDYxQTU5Qzg4RkE3NjdCRDhB
MzZFQzBERjYwHhcNMjYwOTI5MDY0MTM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJiNWRhMS1iMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdLoHxgtqeL/3UiM8ZFeZCWm7acRp7fQLMFW8Dzsyl2Zx1uhEmgFBiXkhI9E
KsWaA+F41A3EsMPSOiwyd9QjsAmR63TVRlyZtYe2xNLDx/un+WA8cPlVGQvLEV0f
3x1ltvVzT9aDdXIehjBjVUcCwXFrfyCqj3XvWlbMN/XsW0GkCqFQTZHxgXbEa2EG
d44X5L3p+ZbtQsakyEahoumLS78f+vdmiY88l8leBPMeF+RtD+ar+eNxwqU1HbU6
om7ozu8wG8lEZJL5GUfrUe4gXk58717edmEjlOcBob6gABIH+cCr1213YjNeHIjf
HVb+toH3VQhb02bLlQA0vXyUkQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFKjfrXmG
MMAZ1I+/kSsmpyww0KKLMB8GA1UdIwQYMBaAFD9zE2P+R0BGGlnIj6dnvYo27A32
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQxRC84QURFMzNGQzQx
MkUxMUVCOUE5NzRDMTZDNEY5QUUwMi9QM01UWV81SFFFWWFXY2lQcDJlOWlqYnNE
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AzTVRZXzVIUUVZYVdjaVBwMmU5aWpic0RmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZEMUQvOEFERTMzRkM0MTJFMTFFQjlBOTc0QzE2QzRGOUFFMDIvRDFBRkZDNjZC
QkQwMTFGMUEzRUYyRkMyQTlFRTUyOEUucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAbnwDANBgkqhkiG9w0BAQsFAAOCAQEAqDpd7vxSD1jOVLaLvJ0W
hzISaMN/Ad/LHF1963cNpkussAeFHnbIj7QYbvolTd7+ZGnEjBJqUMxDevUd8LAS
nRR1O0PGkV900nRiujx3rPKPms4D0h3B4LkHAux1M/xAMCjk+85dxeIb/Cevjqkr
0ZE4G539h5ZGVOKlOoWw+N21V78OZ+/NWB+wWDkdOmVRSx+s0FzzPCfaqMBsIPV4
It9RlTmk56bgyteWaNEgx8mIiGHKxLp1pUJ+3F/LvsKOxRqmTDt6zS+sJ56vN0iD
06qvrU+Pzm2vQjxxIJIWxb6LTEjhVnirXYlk0DKasI54NowbwRXctvvJPM9gyK6B
rQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:28:00 2026 by rpki-client