Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
File:                     443241A0321B11EA83044473C4F9AE02.roa (raw, json)
Hash identifier:          HX+aYGof6uuUT5n6qyG5744PYZCEJDrFxYbRkwQ0maE=
Subject key identifier:   A1:DC:A8:6A:08:BC:35:2F:C4:37:E0:2B:F1:90:90:6D:7E:26:1D:86
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       13F7
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:19:13 +0000
ROA not before:           Wed 28 Jan 2026 17:14:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24474
IP address blocks:        2001:dd8:24::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5111 (0x13f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Jan 28 17:14:23 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5aa71-40f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7c:5c:8c:7a:c9:0b:89:62:25:80:4f:04:88:
                    55:35:70:fb:f7:0b:2c:b6:79:ec:81:7f:06:6e:52:
                    ee:9f:10:38:62:33:95:7c:e7:f4:ad:ad:ee:3a:29:
                    44:63:2e:c8:cc:00:cc:60:b9:23:3c:b7:a2:08:2e:
                    15:6d:96:58:a6:e1:57:51:68:10:88:96:9e:9f:83:
                    ba:26:d9:09:91:5e:e4:01:72:07:b7:66:0e:94:dc:
                    28:fa:40:35:14:79:d4:9a:f8:86:03:99:59:ef:c0:
                    67:27:8d:e7:d7:7e:a0:a2:f3:4d:bb:2a:86:09:29:
                    26:f8:2d:0f:b4:18:d3:f0:78:c9:67:0e:b3:8f:11:
                    e0:b4:49:b0:fd:1b:5c:eb:be:8e:d8:2e:98:10:a6:
                    e5:d1:f2:cf:11:85:69:67:b1:9d:80:e4:61:70:05:
                    87:4f:d0:3b:6d:be:63:54:09:97:ba:f0:2f:db:5e:
                    3d:8a:28:b9:41:fb:ac:10:2f:3d:fd:45:80:0f:06:
                    db:44:af:e8:cc:04:36:b8:af:8d:f0:78:e4:58:71:
                    cb:47:c6:0f:3b:c7:c4:4a:e0:38:f0:c0:97:81:20:
                    76:28:b3:4e:85:5e:24:a1:51:16:97:43:9b:78:74:
                    ce:bc:e9:de:8e:5b:93:ad:40:35:ea:4d:d6:15:69:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DC:A8:6A:08:BC:35:2F:C4:37:E0:2B:F1:90:90:6D:7E:26:1D:86
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dd8:24::/47

    Signature Algorithm: sha256WithRSAEncryption
         00:90:73:63:a5:7d:1b:1d:66:91:4f:b9:09:3c:29:d5:b4:f3:
         a0:40:7a:6d:c8:9f:91:b0:ff:f0:f3:e3:52:3c:68:9d:a4:62:
         f4:a4:3a:51:28:1d:db:42:24:c5:3b:24:7c:25:6e:42:3a:30:
         9c:7a:7d:dc:38:7b:bc:b1:4c:9d:ba:ed:46:ef:88:e5:3f:1f:
         55:dd:af:49:e1:32:94:8f:00:33:ed:26:59:9d:02:10:c4:d3:
         88:11:dc:3b:c4:e6:d3:c1:d0:e9:d8:89:e9:bc:10:90:45:0e:
         a1:43:16:51:96:b0:01:54:74:b8:b8:13:58:e0:18:fd:22:d8:
         b3:fa:73:1c:d2:34:db:93:a5:c7:05:02:f9:8b:70:ba:e6:89:
         14:9c:14:9b:3a:5b:5d:c4:e6:08:66:a3:94:33:9c:0e:a5:7c:
         5b:e9:e6:06:cb:0f:d0:c1:44:2a:2e:9c:97:0e:1b:42:4b:52:
         13:b9:9e:6e:38:7c:c0:46:ab:f1:ac:d8:5e:df:56:87:a6:ee:
         56:38:ff:b0:71:68:e8:ab:26:dc:81:21:7b:5c:20:cc:4c:a2:
         1b:3b:a9:b2:11:77:9d:64:25:41:26:12:05:62:55:ba:8e:3b:
         a4:ad:fa:e5:18:c2:b0:3c:4f:32:c7:ff:45:eb:48:6c:62:35:
         0e:2b:c7:44
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICE/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz
NDEzNzAxQTUwHhcNMjYwMTI4MTcxNDIzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YWE3MS00MGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6nxcjHrJC4liJYBPBIhVNXD79wsstnnsgX8GblLunxA4YjOVfOf0ra3uOilE
Yy7IzADMYLkjPLeiCC4VbZZYpuFXUWgQiJaen4O6JtkJkV7kAXIHt2YOlNwo+kA1
FHnUmviGA5lZ78BnJ43n136govNNuyqGCSkm+C0PtBjT8HjJZw6zjxHgtEmw/Rtc
676O2C6YEKbl0fLPEYVpZ7GdgORhcAWHT9A7bb5jVAmXuvAv2149iii5QfusEC89
/UWADwbbRK/ozAQ2uK+N8HjkWHHLR8YPO8fESuA48MCXgSB2KLNOhV4koVEWl0Ob
eHTOvOnejluTrUA16k3WFWnYxQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKHcqGoI
vDUvxDfgK/GQkG1+Jh2GMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE
NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzcxRTMvOTM4M0U2NDZBRDY1MTFFOEFDQkQwRDZBQzRGOUFFMDIvNDQzMjQxQTAz
MjFCMTFFQTgzMDQ0NDczQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcBIAEN2AAkMA0GCSqGSIb3DQEBCwUAA4IBAQAAkHNjpX0bHWaRT7kJ
PCnVtPOgQHptyJ+RsP/w8+NSPGidpGL0pDpRKB3bQiTFOyR8JW5COjCcen3cOHu8
sUyduu1G74jlPx9V3a9J4TKUjwAz7SZZnQIQxNOIEdw7xObTwdDp2InpvBCQRQ6h
QxZRlrABVHS4uBNY4Bj9Itiz+nMc0jTbk6XHBQL5i3C65okUnBSbOltdxOYIZqOU
M5wOpXxb6eYGyw/QwUQqLpyXDhtCS1ITuZ5uOHzARqvxrNhe31aHpu5WOP+wcWjo
qybcgSF7XCDMTKIbO6myEXedZCVBJhIFYlW6jjukrfrlGMKwPE8yx/9F60hsYjUO
K8dE
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:03:18 2026 by rpki-client