Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/47B75B3893EE11E9B1F2926AC4F9AE02.roa
File:                     47B75B3893EE11E9B1F2926AC4F9AE02.roa (raw, json)
Hash identifier:          rWIdUt0QV7XE1Z1Db6/TzOZnervJxxEdviXAUMODu4s=
Subject key identifier:   AD:C1:6B:81:F6:F3:23:FD:54:99:42:B6:15:48:C6:1D:33:3F:3E:2B
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       1017
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/47B75B3893EE11E9B1F2926AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:17:02 +0000
ROA not before:           Fri 02 May 2025 17:57:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     6939
IP address blocks:        2001:df0:3a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 17:24:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4119 (0x1017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: May  2 17:57:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42e3d-7515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:1a:f9:ab:6e:ea:ff:5b:37:ff:f3:7d:6b:
                    3e:01:89:f9:2c:c5:9a:ee:7a:32:f7:09:93:b0:5c:
                    cf:07:cd:d2:ef:67:68:a9:25:81:54:ee:00:4d:47:
                    a3:80:b0:b2:a1:b0:af:bb:38:8d:cd:07:7a:c2:02:
                    c8:20:a6:71:c1:6c:61:4c:2f:84:cc:0f:84:e9:9b:
                    57:7d:f0:70:60:c5:91:38:1c:56:ef:63:86:1b:81:
                    33:bb:7b:71:00:87:70:99:13:c8:c9:a2:e3:4f:fa:
                    17:56:c3:2b:94:62:22:4e:c9:2f:00:47:8b:be:ad:
                    17:20:95:5f:28:3a:3a:cf:2d:a2:c6:81:24:74:21:
                    df:ec:04:84:c5:42:36:78:2e:0e:29:77:f7:26:45:
                    cd:53:8c:b3:df:6b:db:50:c0:58:84:f1:33:a9:3c:
                    5f:db:f6:60:b5:95:07:50:d3:61:1f:c4:c2:ab:d4:
                    9c:15:40:aa:ca:6c:b7:01:06:34:8e:ce:17:60:7f:
                    6d:71:1a:2a:9f:90:13:5a:c0:7c:ca:4e:b8:d5:2c:
                    e5:87:5b:1b:dc:9d:0c:76:b9:4c:d2:2f:d6:0e:d7:
                    c1:7a:b6:d2:86:34:de:37:fa:2f:19:58:82:33:36:
                    24:3a:da:49:7c:9a:ba:ae:c6:fd:ce:e5:ee:71:a3:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C1:6B:81:F6:F3:23:FD:54:99:42:B6:15:48:C6:1D:33:3F:3E:2B
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/47B75B3893EE11E9B1F2926AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:3a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:1d:5c:ce:e7:6c:2c:0b:8e:61:bb:3d:62:ff:ad:78:88:
         9c:74:85:92:f3:c8:97:87:30:90:0d:a5:b7:2e:5f:9b:67:84:
         33:e8:44:97:77:7b:d8:fb:e3:e1:6f:ab:29:01:9e:5d:8e:a5:
         32:37:98:a5:73:5d:6b:2c:12:72:8a:7b:56:90:87:28:7c:33:
         7c:9c:75:41:9e:28:c6:4b:71:12:84:0a:8c:88:f1:bf:8f:f6:
         1b:b8:bb:07:ba:8e:8c:cf:10:94:2e:5a:99:f9:8d:b7:bb:ab:
         c5:c8:5e:c1:ed:0f:9a:4d:f2:e3:b4:1b:c1:49:c6:69:b1:70:
         de:39:c0:49:40:cc:7b:08:7a:13:ca:ea:73:58:aa:d4:af:6f:
         7b:f4:8c:fc:bc:ce:37:db:8f:c1:e8:d0:64:c5:a9:3b:cf:64:
         df:be:39:74:45:eb:12:75:98:18:95:33:1e:41:07:00:f9:e2:
         84:55:98:dc:b7:58:a8:8d:53:72:f9:67:0d:98:41:7f:ff:be:
         36:91:ab:57:9c:2c:c9:56:25:43:c0:64:e9:a3:82:da:78:e3:
         ce:74:51:6d:cf:4a:ef:10:19:34:71:9d:82:95:cf:40:63:aa:
         1c:5d:cd:36:4e:c4:5e:d4:ad:c9:8a:8d:c5:05:80:a3:07:43:
         4b:19:75:a7
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx
Njg4QjJCNzMwHhcNMjUwNTAyMTc1NzQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmUzZC03NTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1qUa+atu6v9bN//zfWs+AYn5LMWa7noy9wmTsFzPB83S72doqSWBVO4ATUej
gLCyobCvuziNzQd6wgLIIKZxwWxhTC+EzA+E6ZtXffBwYMWROBxW72OGG4Ezu3tx
AIdwmRPIyaLjT/oXVsMrlGIiTskvAEeLvq0XIJVfKDo6zy2ixoEkdCHf7ASExUI2
eC4OKXf3JkXNU4yz32vbUMBYhPEzqTxf2/ZgtZUHUNNhH8TCq9ScFUCqymy3AQY0
js4XYH9tcRoqn5ATWsB8yk641Szlh1sb3J0MdrlM0i/WDtfBerbShjTeN/ovGViC
MzYkOtpJfJq6rsb9zuXucaOW6wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFK3Ba4H2
8yP9VJlCthVIxh0zPz4rMB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1
NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlDRUIvN0RBNTgzRTQ2NTU2MTFFOTg1ODEwRDM3QzRGOUFFMDIvNDdCNzVCMzg5
M0VFMTFFOUIxRjI5MjZBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8DqAMA0GCSqGSIb3DQEBCwUAA4IBAQBGDB1czudsLAuOYbs9
Yv+teIicdIWS88iXhzCQDaW3Ll+bZ4Qz6ESXd3vY++Phb6spAZ5djqUyN5ilc11r
LBJyintWkIcofDN8nHVBnijGS3EShAqMiPG/j/YbuLsHuo6MzxCULlqZ+Y23u6vF
yF7B7Q+aTfLjtBvBScZpsXDeOcBJQMx7CHoTyupzWKrUr2979Iz8vM4324/B6NBk
xak7z2Tfvjl0ResSdZgYlTMeQQcA+eKEVZjct1iojVNy+WcNmEF//742katXnCzJ
ViVDwGTpo4LaeOPOdFFtz0rvEBk0cZ2Clc9AY6ocXc02TsRe1K3Jio3FBYCjB0NL
GXWn
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:59 2026 by rpki-client