Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
File:                     6579B1188F5811F0BE083D3DC4F9AE02.roa (raw, json)
Hash identifier:          obQ1muZzlSAR/yzoM3A2VB9QL7USa5r6753HXKfwqfg=
Subject key identifier:   07:6F:84:B8:0D:2F:E0:7F:07:E1:A0:91:97:38:45:F2:E9:40:F7:5D
Certificate issuer:       /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial:       68
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:29:05 +0000
ROA not before:           Thu 11 Sep 2025 21:43:47 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     15224
IP address blocks:        2406:fb00:1000::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
                          rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
        Validity
            Not Before: Sep 11 21:43:47 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a590a0-24cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a6:1e:e4:72:0a:a6:0b:e7:5d:df:24:5e:f1:
                    2a:e2:f7:af:6a:22:9c:7c:cd:23:58:71:e2:97:22:
                    1e:15:42:6d:73:bf:93:72:11:df:8a:5d:6b:d0:58:
                    cf:fc:d0:91:48:51:cd:6a:95:77:b6:aa:dd:08:14:
                    46:df:04:c4:9c:a3:3c:22:a7:b7:e3:77:e0:da:b1:
                    2b:a4:cd:f6:d5:d6:19:d4:73:2b:a6:52:25:f4:74:
                    77:6d:28:55:59:19:e0:f2:4e:49:06:a0:ba:b7:4b:
                    54:31:88:9d:a6:76:fc:35:d1:c8:72:5d:b6:86:cd:
                    93:f4:a9:6e:a3:0b:56:fd:a8:0d:6e:ad:56:af:23:
                    1c:79:ea:46:29:a2:cc:c6:fe:7e:4d:1c:d3:6d:24:
                    0c:16:b3:81:32:af:01:3b:26:35:35:52:1d:b0:05:
                    14:73:bf:c3:03:d6:74:89:57:78:55:b1:1e:fd:ad:
                    a8:34:ca:0e:5c:56:8e:fb:96:6b:29:4c:16:69:17:
                    95:e6:21:0d:9b:ba:45:7b:3f:bb:71:52:61:b7:76:
                    ad:99:c5:e9:3c:eb:9e:6c:d1:47:38:ea:78:ff:ec:
                    7e:43:b8:33:ab:13:7d:ff:a1:96:d0:6f:0c:57:55:
                    b5:c3:0c:72:be:51:29:4f:ec:8d:5c:35:ea:ea:d6:
                    8f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:84:B8:0D:2F:E0:7F:07:E1:A0:91:97:38:45:F2:E9:40:F7:5D
            X509v3 Authority Key Identifier:
                keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:fb00:1000::/47

    Signature Algorithm: sha256WithRSAEncryption
         bf:16:a5:d3:7c:17:17:c3:68:aa:bc:60:e5:e7:27:18:35:ec:
         67:25:8e:c6:a4:8b:e2:0a:4e:ef:16:26:19:1c:ea:0c:59:de:
         0e:64:96:43:74:56:dd:9b:07:03:8d:90:88:e7:33:b7:49:cc:
         97:66:a4:07:12:95:7c:24:e7:06:db:3f:f7:71:84:d3:2e:92:
         ae:ea:8a:04:f4:4b:62:79:1e:68:67:d7:59:a5:d0:41:a1:87:
         43:08:e8:ec:62:ff:2b:b8:71:a2:b9:2b:85:8f:23:42:79:0c:
         57:ce:2b:fc:f2:18:28:e0:ba:74:21:89:33:63:bf:74:a7:79:
         48:23:d0:fb:a3:75:8a:25:cd:de:a6:94:9d:ab:c3:88:69:c6:
         81:3e:04:73:72:6b:73:90:71:de:fb:b3:87:55:d1:e0:17:75:
         b6:8e:19:45:60:c6:58:b9:46:4b:de:06:82:15:6c:41:73:13:
         54:ef:7f:f8:2f:47:6b:ee:2f:47:d5:28:f3:5a:3c:44:78:18:
         6d:c0:11:1b:02:19:c8:61:dc:bd:d7:80:47:2a:27:71:16:c0:
         d7:32:8c:d1:75:6e:44:d9:ef:14:36:93:89:b0:75:ab:95:f3:
         34:eb:41:1c:59:3c:82:41:09:e1:75:e6:77:35:26:55:5e:bc:
         26:b7:2c:d3
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QzBDQzExMC8GA1UEBRMoMERDQUZBQzE0NUIyMkYxNTYwNzgwMTY2Q0QxRjE1MTUw
NEVFRjhBMTAeFw0yNTA5MTEyMTQzNDdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5MGEwLTI0Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgph7kcgqmC+dd3yRe8Sri969qIpx8zSNYceKXIh4VQm1zv5NyEd+KXWvQWM/8
0JFIUc1qlXe2qt0IFEbfBMScozwip7fjd+DasSukzfbV1hnUcyumUiX0dHdtKFVZ
GeDyTkkGoLq3S1QxiJ2mdvw10chyXbaGzZP0qW6jC1b9qA1urVavIxx56kYposzG
/n5NHNNtJAwWs4EyrwE7JjU1Uh2wBRRzv8MD1nSJV3hVsR79rag0yg5cVo77lmsp
TBZpF5XmIQ2bukV7P7txUmG3dq2Zxek8655s0Uc46nj/7H5DuDOrE33/oZbQbwxX
VbXDDHK+USlP7I1cNerq1o9vAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUB2+EuA0v
4H8H4aCRlzhF8ulA910wHwYDVR0jBBgwFoAUDcr6wUWyLxVgeAFmzR8VFQTu+KEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMENDLzhGQ0NDN0Y4OEY1
NzExRjA5QzUxRUMzQkM0RjlBRTAyL0RjcjZ3VVd5THhWZ2VBRm16UjhWRlFUdS1L
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRGNyNndVV3lMeFZnZUFGbXpSOFZGUVR1LUtFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzBDQy84RkNDQzdGODhGNTcxMUYwOUM1MUVDM0JDNEY5QUUwMi82NTc5QjExODhG
NTgxMUYwQkUwODNEM0RDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwEkBvsAEAAwDQYJKoZIhvcNAQELBQADggEBAL8WpdN8FxfDaKq8YOXn
Jxg17Gcljsaki+IKTu8WJhkc6gxZ3g5klkN0Vt2bBwONkIjnM7dJzJdmpAcSlXwk
5wbbP/dxhNMukq7qigT0S2J5Hmhn11ml0EGhh0MI6Oxi/yu4caK5K4WPI0J5DFfO
K/zyGCjgunQhiTNjv3SneUgj0PujdYolzd6mlJ2rw4hpxoE+BHNya3OQcd77s4dV
0eAXdbaOGUVgxli5RkveBoIVbEFzE1Tvf/gvR2vuL0fVKPNaPER4GG3AERsCGchh
3L3XgEcqJ3EWwNcyjNF1bkTZ7xQ2k4mwdauV8zTrQRxZPIJBCeF15nc1JlVevCa3
LNM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:01 2026 by rpki-client