Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
File:                     D0680FF86AB211F0976F001AC4F9AE02.roa (raw, json)
Hash identifier:          xvCQat8cEUCOVzKUZe2Y4zreB9P77CYReFAzizbnP0s=
Subject key identifier:   3E:3F:9F:A4:11:37:76:EF:86:36:A1:58:B8:7A:E8:E6:83:72:C0:7C
Certificate issuer:       /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial:       011C
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 06:42:10 +0000
ROA not before:           Tue 03 Mar 2026 06:42:10 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140119
IP address blocks:        2401:e920:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
        Validity
            Not Before: Mar  3 06:42:10 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a682c2-cf5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:6a:5a:95:55:26:cd:56:6a:65:bc:44:88:
                    6b:fc:90:d5:09:79:78:f3:f9:e3:17:da:bb:64:d1:
                    52:ef:14:ce:23:5d:d3:63:45:4c:81:8d:2d:ad:50:
                    81:2f:8c:49:55:fb:81:fc:eb:50:df:fb:28:82:fe:
                    2d:e7:08:24:c1:64:0c:10:65:25:34:13:97:94:6b:
                    20:a1:c5:fe:12:d7:fb:73:8c:47:0e:8a:d9:8f:9e:
                    d9:7b:80:7a:ba:06:f4:b3:8b:ed:e9:94:1a:6b:00:
                    70:22:d7:46:7e:64:32:16:8a:12:a6:a2:34:71:60:
                    c4:ea:73:43:07:c8:97:bc:6f:3c:d6:b0:a6:7c:01:
                    02:ca:96:43:e1:3c:42:25:a5:07:d3:5b:f4:20:c2:
                    1d:df:8f:d0:d4:da:e1:d4:c9:4e:4a:78:11:79:f5:
                    d0:07:12:1c:8b:f4:2d:ea:0f:47:6a:42:ac:3a:f2:
                    db:82:21:81:b3:9d:c6:de:2e:23:52:30:80:bd:65:
                    6a:c0:3f:9d:86:a0:3a:af:f3:dc:9c:bb:3e:fd:c7:
                    71:59:b2:ac:bf:d7:d0:e8:58:12:d0:f6:04:11:71:
                    22:fe:66:13:d0:2d:6f:cf:ef:53:d1:40:90:9d:d7:
                    51:15:d3:9d:d5:d7:84:67:2b:51:da:aa:c0:40:4a:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3F:9F:A4:11:37:76:EF:86:36:A1:58:B8:7A:E8:E6:83:72:C0:7C
            X509v3 Authority Key Identifier:
                keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e920:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:50:ae:8c:21:46:6e:0d:c5:24:8b:45:21:92:8d:46:6c:
         94:9d:df:06:9e:94:10:72:c2:06:c0:8b:e3:dc:aa:e3:61:15:
         cb:5e:ec:26:88:0a:89:04:f0:33:72:e4:5e:f5:98:3c:d4:6a:
         c9:8e:fe:7d:b0:80:f5:14:e8:78:fa:dd:d3:9e:f9:53:2c:18:
         6d:81:0a:fd:ec:d9:db:2b:41:b6:ac:bb:89:0a:b4:40:5a:98:
         65:e7:a7:1d:d8:13:f5:18:67:55:71:01:18:6d:b5:91:6d:71:
         4d:08:88:90:e3:93:d9:c0:9a:31:63:11:fc:0d:ea:71:42:d5:
         0a:2c:50:79:7c:84:55:fa:e3:84:10:ac:4b:c5:a4:56:06:60:
         c6:87:7a:1b:46:84:18:7f:41:bc:80:2d:c3:5e:98:1f:e7:08:
         c7:9d:c9:da:dc:e8:e3:f3:8a:a3:95:c5:a0:79:e2:81:78:10:
         f0:d6:72:e3:c8:45:20:07:66:a7:31:4d:ed:70:d3:cd:56:a6:
         e9:d6:58:1d:77:3b:8a:f6:25:1c:89:ff:80:7c:0c:a8:61:ef:
         fd:40:8c:84:f7:24:60:f9:74:89:a0:ce:c7:2d:9f:37:02:2e:
         ca:9f:22:1d:82:10:a1:2f:07:79:1a:02:73:fd:97:62:6c:02:
         47:86:d6:af
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg1RTkxMTAvBgNVBAUTKEY2OThCNUI0N0EwNkQ1MzA3REVDNjA4OTY5MDYzMDc0
QjY4RkY1Q0EwHhcNMjYwMzAzMDY0MjEwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2ODJjMi1jZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA051qWpVVJs1WamW8RIhr/JDVCXl48/njF9q7ZNFS7xTOI13TY0VMgY0trVCB
L4xJVfuB/OtQ3/sogv4t5wgkwWQMEGUlNBOXlGsgocX+Etf7c4xHDorZj57Ze4B6
ugb0s4vt6ZQaawBwItdGfmQyFooSpqI0cWDE6nNDB8iXvG881rCmfAECypZD4TxC
JaUH01v0IMId34/Q1Nrh1MlOSngRefXQBxIci/Qt6g9HakKsOvLbgiGBs53G3i4j
UjCAvWVqwD+dhqA6r/PcnLs+/cdxWbKsv9fQ6FgS0PYEEXEi/mYT0C1vz+9T0UCQ
nddRFdOd1deEZytR2qrAQEq2DwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFD4/n6QR
N3bvhjahWLh66OaDcsB8MB8GA1UdIwQYMBaAFPaYtbR6BtUwfexgiWkGMHS2j/XK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DOTI4MDQzQUQx
NzYxMUVGOTVDNURFNUFDNEY5QUUwMi85cGkxdEhvRzFUQjk3R0NKYVFZd2RMYVA5
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlwaTF0SG9HMVRCOTdHQ0phUVl3ZExhUDljby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg1RTkvQzkyODA0M0FEMTc2MTFFRjk1QzVERTVBQzRGOUFFMDIvRDA2ODBGRjg2
QUIyMTFGMDk3NkYwMDFBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAHpIP/+MA0GCSqGSIb3DQEBCwUAA4IBAQAeKVCujCFGbg3FJItF
IZKNRmyUnd8GnpQQcsIGwIvj3KrjYRXLXuwmiAqJBPAzcuRe9Zg81GrJjv59sID1
FOh4+t3TnvlTLBhtgQr97NnbK0G2rLuJCrRAWphl56cd2BP1GGdVcQEYbbWRbXFN
CIiQ45PZwJoxYxH8DepxQtUKLFB5fIRV+uOEEKxLxaRWBmDGh3obRoQYf0G8gC3D
Xpgf5wjHncna3Ojj84qjlcWgeeKBeBDw1nLjyEUgB2anMU3tcNPNVqbp1lgddzuK
9iUcif+AfAyoYe/9QIyE9yRg+XSJoM7HLZ83Ai7KnyIdghChLwd5GgJz/ZdibAJH
htav
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:12:32 2026 by rpki-client