Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/6F89ECBE80D611E99C76DF63C4F9AE02.roa
File:                     6F89ECBE80D611E99C76DF63C4F9AE02.roa (raw, json)
Hash identifier:          QZTAOImU0Z2WPbI1rkI9qCfJOQspayOIo2PoVTSDncA=
Subject key identifier:   9D:A6:98:A5:0C:1C:32:EF:C3:3F:ED:0F:62:A7:DE:11:C2:C5:09:82
Certificate issuer:       /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Certificate serial:       0F7A
Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/6F89ECBE80D611E99C76DF63C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 18:20:56 +0000
ROA not before:           Mon 02 Mar 2026 18:20:56 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     56123
IP address blocks:        115.124.8.0/21 maxlen: 21
                          2407:a200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl
                          rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3962 (0xf7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
        Validity
            Not Before: Mar  2 18:20:56 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a5d508-4c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:e4:dc:eb:68:8f:2c:22:df:ce:30:c0:4e:
                    67:f2:09:e7:dc:5e:9b:cb:0f:35:09:3d:ca:87:1a:
                    cb:a7:2f:f3:69:ad:b2:10:34:e8:b2:90:1f:08:24:
                    1d:53:dd:0d:e0:cc:2b:64:06:86:59:d5:5a:09:d8:
                    a7:a4:fd:45:f4:84:a8:bd:86:1a:35:b7:25:ad:f4:
                    f2:5f:12:15:5d:37:19:ec:e3:6b:97:e2:9d:45:2a:
                    2a:b1:54:79:0d:ff:f4:d2:14:44:e2:2c:20:7f:9f:
                    bf:b8:6b:dd:d1:c1:da:37:c6:b3:0e:15:39:c5:61:
                    61:f8:ee:0e:33:9d:cd:43:8d:1b:67:e5:cf:95:01:
                    1f:eb:03:e3:3b:7b:42:7a:f4:f1:ee:92:dc:8e:e3:
                    f5:51:a3:7e:a6:21:ec:e3:74:73:41:e0:45:18:17:
                    3b:8f:a6:64:1e:d3:3f:06:f3:7a:71:4a:4d:f4:62:
                    ad:11:91:f5:17:7c:86:c5:94:5a:29:dd:d9:0d:90:
                    cd:f6:8c:d5:9e:75:03:25:55:e2:b0:80:88:57:70:
                    e0:2a:f4:85:5a:7d:54:39:a9:8b:23:56:eb:75:3c:
                    b8:3a:cb:16:7c:2d:77:d0:2a:72:a9:59:e3:92:f9:
                    d6:74:86:15:bd:cc:bc:96:c9:c1:e3:72:f2:d8:fd:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A6:98:A5:0C:1C:32:EF:C3:3F:ED:0F:62:A7:DE:11:C2:C5:09:82
            X509v3 Authority Key Identifier:
                keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/6F89ECBE80D611E99C76DF63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.8.0/21
                IPv6:
                  2407:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:d7:67:a0:a4:53:6c:de:6e:4c:c2:13:b1:34:87:da:d1:d1:
         4f:01:a4:69:ad:eb:1b:8a:4e:e1:68:88:ce:82:a6:0a:44:f9:
         b0:07:08:ae:05:5b:0b:88:4b:f7:ae:14:54:3d:24:fb:60:1d:
         94:5f:34:b6:1e:fe:0e:36:a3:81:b6:7f:5d:f2:fd:97:d8:f8:
         5b:d4:8b:2f:d5:db:d1:cd:17:86:34:3d:ce:c7:16:78:5b:ed:
         6f:84:82:3d:f8:a9:c4:e7:38:c2:5e:84:e0:17:f8:67:fe:62:
         47:c1:52:5d:4f:4f:24:16:42:72:49:40:06:4e:70:18:f6:56:
         c5:28:0a:b2:28:fb:9b:46:3b:5e:29:d4:fe:fe:70:ed:e7:2f:
         49:e5:b3:e3:87:fc:97:75:7a:d1:84:be:96:65:ff:71:a6:38:
         9e:02:c6:75:14:c2:ba:53:f4:a5:e9:b9:ad:65:7d:74:aa:7e:
         68:76:a8:43:5c:3f:be:31:55:5a:1e:ba:d1:30:f0:fa:83:8a:
         d1:e8:d1:33:38:ea:ff:3b:93:7e:51:49:3f:b0:bb:7f:6d:b3:
         53:cf:db:8a:3a:8c:67:de:fb:39:50:36:98:64:48:9b:3c:81:
         1e:f3:39:33:4e:2a:30:ff:72:cf:75:f0:d5:ba:14:d1:6f:a4:
         1c:fb:92:78
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICD3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQyOUM4RUM3MzdB
NTYwNTBCNzkwHhcNMjYwMzAyMTgyMDU2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ZDUwOC00YzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1nPk3Otojywi384wwE5n8gnn3F6byw81CT3KhxrLpy/zaa2yEDTospAfCCQd
U90N4MwrZAaGWdVaCdinpP1F9ISovYYaNbclrfTyXxIVXTcZ7ONrl+KdRSoqsVR5
Df/00hRE4iwgf5+/uGvd0cHaN8azDhU5xWFh+O4OM53NQ40bZ+XPlQEf6wPjO3tC
evTx7pLcjuP1UaN+piHs43RzQeBFGBc7j6ZkHtM/BvN6cUpN9GKtEZH1F3yGxZRa
Kd3ZDZDN9ozVnnUDJVXisICIV3DgKvSFWn1UOamLI1brdTy4OssWfC130CpyqVnj
kvnWdIYVvcy8lsnB43Ly2P2SUwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJ2mmKUM
HDLvwz/tD2Kn3hHCxQmCMB8GA1UdIwQYMBaAFBHVenV+1WV10EnkKcjsc3pWBQt5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJGMi9ERDhFQzFDODgw
RDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpYWFFTZVFweU94emVsWUZD
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VkVjZkWDdWWlhYUVNlUXB5T3h6ZWxZRkMzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjcyRjIvREQ4RUMxQzg4MEQ0MTFFOUE5QzlDNzVFQzRGOUFFMDIvNkY4OUVDQkU4
MEQ2MTFFOTlDNzZERjYzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQDc3wIMA0EAgACMAcDBQAkB6IAMA0GCSqGSIb3DQEBCwUAA4IBAQCV
12egpFNs3m5MwhOxNIfa0dFPAaRpresbik7haIjOgqYKRPmwBwiuBVsLiEv3rhRU
PST7YB2UXzS2Hv4ONqOBtn9d8v2X2Phb1Isv1dvRzReGND3OxxZ4W+1vhII9+KnE
5zjCXoTgF/hn/mJHwVJdT08kFkJySUAGTnAY9lbFKAqyKPubRjteKdT+/nDt5y9J
5bPjh/yXdXrRhL6WZf9xpjieAsZ1FMK6U/Sl6bmtZX10qn5odqhDXD++MVVaHrrR
MPD6g4rR6NEzOOr/O5N+UUk/sLt/bbNTz9uKOoxn3vs5UDaYZEibPIEe8zkzTiow
/3LPdfDVuhTRb6Qc+5J4
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:48:56 2026 by rpki-client