Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/9577FE7C4C0B11F1996C5785A4833773.roa
File:                     9577FE7C4C0B11F1996C5785A4833773.roa (raw, json)
Hash identifier:          0qEz6js7PBUojcJH/VQOhbzx5OAA1vw3c9ZuGNzrDdM=
Subject key identifier:   7D:5D:27:7F:EF:14:A7:22:F9:FB:89:D2:BA:D3:F8:53:6A:59:18:D2
Certificate issuer:       /CN=A91629F2/serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
Certificate serial:       03
Authority key identifier: 08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/9577FE7C4C0B11F1996C5785A4833773.roa
Signing time:             Sun 10 May 2026 01:00:06 +0000
ROA not before:           Sun 10 May 2026 01:00:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154653
IP address blocks:        2001:df7:1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl
                          rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629F2, serialNumber=08813F6FEE21AF04B4DB60AF363F5AF87F89A275
        Validity
            Not Before: May 10 01:00:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=69ffd896-84c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:c7:55:92:47:7b:62:5c:13:fb:58:87:f6:
                    88:5b:e5:2b:f5:dd:e1:f2:f6:42:a7:e7:ed:57:71:
                    22:02:dd:89:13:95:fa:0f:60:48:0c:10:f9:fb:3d:
                    8e:b4:50:14:bc:8b:bc:89:92:0d:eb:93:35:42:0a:
                    dd:3f:d1:a1:8b:a6:10:08:5a:5a:57:6d:02:9f:8a:
                    8c:96:d8:e5:c4:2b:d9:f7:ce:f1:0c:d6:5b:c0:b2:
                    4b:20:79:30:49:8e:92:20:ff:17:f3:66:d4:20:e2:
                    94:b5:18:e5:14:4c:5c:d4:30:a5:94:26:c3:36:94:
                    33:78:c2:cd:a9:35:18:71:33:63:1c:ac:d8:df:75:
                    a9:16:90:df:39:72:df:21:f8:42:eb:e3:52:f1:d8:
                    64:42:6b:55:6b:22:b6:fc:8f:38:b7:ad:b9:13:18:
                    07:50:14:20:eb:1d:e2:41:ce:2f:0e:bf:17:bf:a6:
                    d1:66:bf:eb:8d:74:22:e3:48:35:96:41:b9:f7:16:
                    7b:72:81:cf:78:76:69:bf:8a:71:48:4a:ef:78:d5:
                    9f:94:71:4e:73:78:a2:ba:eb:ef:37:08:3e:6b:fd:
                    26:a5:71:76:88:80:c7:e7:21:bb:20:6f:98:55:1e:
                    f4:0f:be:d5:9b:dc:90:19:9a:30:7d:45:1b:e4:a6:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5D:27:7F:EF:14:A7:22:F9:FB:89:D2:BA:D3:F8:53:6A:59:18:D2
            X509v3 Authority Key Identifier:
                keyid:08:81:3F:6F:EE:21:AF:04:B4:DB:60:AF:36:3F:5A:F8:7F:89:A2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/CIE_b-4hrwS022CvNj9a-H-JonU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CIE_b-4hrwS022CvNj9a-H-JonU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/EB7F9ADE4C0411F18A6F8D79A1833773/9577FE7C4C0B11F1996C5785A4833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:f4:e2:1e:c6:32:88:4c:c3:a2:22:ce:6d:17:1f:78:a1:3f:
         37:45:02:91:39:24:6f:5e:07:26:9b:ce:d7:0a:6c:ad:16:a0:
         cb:fd:84:54:dd:fb:21:20:e2:c8:23:f5:e3:b6:c8:2b:22:0d:
         85:d9:55:e6:05:2d:4e:37:28:95:9a:91:b2:67:e9:01:59:0f:
         b5:0b:36:0f:57:88:b3:ef:e1:af:a1:25:2d:5d:e2:d1:df:89:
         1c:3e:6d:c7:c6:da:2d:f7:8e:3a:3d:6a:d1:c9:68:98:60:75:
         e5:0b:2e:61:b3:2a:32:6d:f3:58:f2:f6:ae:85:08:aa:cb:f1:
         24:a1:d5:46:16:82:da:6d:8c:d1:db:b1:77:cc:d8:e1:69:1e:
         ff:08:73:10:1e:36:2f:f2:a7:bd:a0:fa:57:0f:6d:71:e2:1f:
         ed:0a:48:18:8b:c3:6e:c7:16:ab:51:90:9d:56:7f:1e:b4:1d:
         86:2f:d0:41:2a:90:6f:16:bd:62:c2:44:5b:93:ed:c6:73:98:
         df:d5:36:b0:42:bd:4e:7f:8f:5f:dc:5f:55:2f:14:03:f4:b2:
         a3:bf:bb:8d:de:5a:1e:91:72:f7:06:0f:e6:26:3d:16:6f:3f:
         c7:b8:00:95:20:a2:59:73:a0:65:92:97:61:e7:66:8c:9f:cb:
         95:46:fe:3b
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MjlGMjExMC8GA1UEBRMoMDg4MTNGNkZFRTIxQUYwNEI0REI2MEFGMzYzRjVBRjg3
Rjg5QTI3NTAeFw0yNjA1MTAwMTAwMDZaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZmZkODk2LTg0YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1/8dVkkd7YlwT+1iH9ohb5Sv13eHy9kKn5+1XcSIC3YkTlfoPYEgMEPn7PY60
UBS8i7yJkg3rkzVCCt0/0aGLphAIWlpXbQKfioyW2OXEK9n3zvEM1lvAsksgeTBJ
jpIg/xfzZtQg4pS1GOUUTFzUMKWUJsM2lDN4ws2pNRhxM2McrNjfdakWkN85ct8h
+ELr41Lx2GRCa1VrIrb8jzi3rbkTGAdQFCDrHeJBzi8Ovxe/ptFmv+uNdCLjSDWW
Qbn3Fntygc94dmm/inFISu941Z+UcU5zeKK66+83CD5r/SalcXaIgMfnIbsgb5hV
HvQPvtWb3JAZmjB9RRvkpvalAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUfV0nf+8U
pyL5+4nSutP4U2pZGNIwHwYDVR0jBBgwFoAUCIE/b+4hrwS022CvNj9a+H+JonUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUYyL0VCN0Y5QURFNEMw
NDExRjE4QTZGOEQ3OUExODMzNzczL0NJRV9iLTRocndTMDIyQ3ZOajlhLUgtSm9u
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ0lFX2ItNGhyd1MwMjJDdk5qOWEtSC1Kb25VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjlGMi9FQjdGOUFERTRDMDQxMUYxOEE2RjhENzlBMTgzMzc3My85NTc3RkU3QzRD
MEIxMUYxOTk2QzU3ODVBNDgzMzc3My5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ33AcAwDQYJKoZIhvcNAQELBQADggEBAI704h7GMohMw6Iizm0X
H3ihPzdFApE5JG9eByabztcKbK0WoMv9hFTd+yEg4sgj9eO2yCsiDYXZVeYFLU43
KJWakbJn6QFZD7ULNg9XiLPv4a+hJS1d4tHfiRw+bcfG2i33jjo9atHJaJhgdeUL
LmGzKjJt81jy9q6FCKrL8SSh1UYWgtptjNHbsXfM2OFpHv8IcxAeNi/yp72g+lcP
bXHiH+0KSBiLw27HFqtRkJ1Wfx60HYYv0EEqkG8WvWLCRFuT7cZzmN/VNrBCvU5/
j1/cX1UvFAP0sqO/u43eWh6RcvcGD+YmPRZvP8e4AJUgollzoGWSl2HnZoyfy5VG
/js=
-----END CERTIFICATE-----
Generated at Wed May 13 01:42:00 2026 by rpki-client