Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa
File:                     3524F8BCD75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier:          Lc4YME8skp8fONCgNP9FlElHrE/WnBABUYskf2DRHEI=
Subject key identifier:   9B:49:3C:4D:9F:18:CF:A9:80:A0:CE:DC:E4:D1:76:7C:D8:C4:81:BF
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       07C7
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 22:23:19 +0000
ROA not before:           Mon 06 Jul 2026 22:23:19 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138195
IP address blocks:        2401:e9e0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  6 22:23:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4c2ad7-a437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7c:bc:1c:7e:a9:ce:44:27:63:1d:2e:d0:3b:
                    c5:a4:72:ee:5d:a9:a5:f5:60:13:81:e4:76:91:1c:
                    82:2d:79:e2:ef:0f:a1:6d:60:6e:93:e4:2e:95:18:
                    70:91:8b:b0:bf:a2:a6:a2:6b:e0:16:be:9a:91:eb:
                    2b:14:88:61:be:49:15:da:2f:a6:2c:16:00:ad:f3:
                    ea:e7:3c:16:89:0b:f1:22:f2:79:2b:2f:97:c7:48:
                    ed:b2:20:f6:93:2b:54:4d:bd:65:e6:d6:11:4e:66:
                    1c:4b:24:bd:84:fe:05:92:5f:a8:43:3b:ea:c4:d4:
                    ac:13:35:79:42:00:41:b2:d5:46:b9:02:d1:43:81:
                    04:8b:25:cd:1b:ac:a5:ed:27:be:ee:d9:4e:2e:1b:
                    70:e6:05:c8:ed:ca:7b:9e:65:27:74:06:92:82:dd:
                    67:f1:23:23:cc:75:a8:4e:b2:1b:a0:53:e4:47:41:
                    e4:02:85:6e:d4:95:4a:78:e6:ac:16:37:32:a5:83:
                    af:28:cd:c8:cb:34:90:c6:bd:8f:84:c3:62:de:f8:
                    1d:1f:ec:41:78:c8:3d:0f:09:d4:74:06:57:80:99:
                    c5:f1:06:29:8b:85:e4:23:ef:38:e0:e0:6f:94:e2:
                    fa:3a:94:9f:9e:1e:2e:a8:aa:08:50:82:20:cb:15:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:49:3C:4D:9F:18:CF:A9:80:A0:CE:DC:E4:D1:76:7C:D8:C4:81:BF
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/3524F8BCD75511EF80E68A39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e9e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:29:ac:9a:18:a5:f6:cf:d6:c6:27:1b:0e:a2:bc:96:33:e3:
         d3:ee:21:5e:5c:de:14:e0:dc:88:05:b0:b4:60:87:42:dc:cb:
         c9:91:56:bc:77:48:d2:34:67:71:c2:7c:c9:5f:b2:47:fb:de:
         79:f4:d9:82:78:b6:0d:b6:56:fb:7c:bc:20:7c:9c:8b:5a:f2:
         55:55:fe:5c:42:50:18:b0:11:89:6b:55:74:2d:c8:56:8a:65:
         f1:1e:49:af:6e:cd:d6:55:76:c8:92:f4:3f:f2:7e:aa:35:35:
         24:32:5c:f6:d7:c3:f6:76:92:ff:a1:72:64:d7:c2:27:6a:9c:
         a5:14:78:13:16:35:55:dc:a7:04:e6:e2:3c:99:38:fa:c6:c4:
         16:0a:72:d0:91:87:8c:62:d3:3f:57:b2:30:87:48:2e:9a:11:
         3b:f2:c2:49:19:0b:12:42:80:5c:62:fe:d2:53:43:0d:ef:7b:
         6f:4d:6f:4c:15:c5:38:09:66:38:b2:fd:d7:5f:d0:dc:35:b6:
         88:f4:ea:c3:1c:af:e4:0c:fe:86:05:c9:70:4f:df:16:f1:de:
         e5:bf:d4:9b:b9:23:f4:e9:d4:4b:24:29:4b:78:6d:08:78:43:
         83:0c:2a:fd:e6:ef:1a:9f:ad:01:b4:5d:70:d9:a1:0e:85:87:
         10:8f:01:8c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0
QzkxNTRGMjQwHhcNMjYwNzA2MjIyMzE5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjMmFkNy1hNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7Hy8HH6pzkQnYx0u0DvFpHLuXaml9WATgeR2kRyCLXni7w+hbWBuk+QulRhw
kYuwv6KmomvgFr6akesrFIhhvkkV2i+mLBYArfPq5zwWiQvxIvJ5Ky+Xx0jtsiD2
kytUTb1l5tYRTmYcSyS9hP4Fkl+oQzvqxNSsEzV5QgBBstVGuQLRQ4EEiyXNG6yl
7Se+7tlOLhtw5gXI7cp7nmUndAaSgt1n8SMjzHWoTrIboFPkR0HkAoVu1JVKeOas
FjcypYOvKM3IyzSQxr2PhMNi3vgdH+xBeMg9DwnUdAZXgJnF8QYpi4XkI+844OBv
lOL6OpSfnh4uqKoIUIIgyxVTSQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFJtJPE2f
GM+pgKDO3OTRdnzYxIG/MB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1
MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvMzUyNEY4QkNE
NzU1MTFFRjgwRTY4QTM5QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAHp4CAwDQYJKoZIhvcNAQELBQADggEBAGIprJoYpfbP1sYnGw6i
vJYz49PuIV5c3hTg3IgFsLRgh0Lcy8mRVrx3SNI0Z3HCfMlfskf73nn02YJ4tg22
Vvt8vCB8nIta8lVV/lxCUBiwEYlrVXQtyFaKZfEeSa9uzdZVdsiS9D/yfqo1NSQy
XPbXw/Z2kv+hcmTXwidqnKUUeBMWNVXcpwTm4jyZOPrGxBYKctCRh4xi0z9XsjCH
SC6aETvywkkZCxJCgFxi/tJTQw3ve29Nb0wVxTgJZjiy/ddf0Nw1toj06sMcr+QM
/oYFyXBP3xbx3uW/1Ju5I/Tp1EskKUt4bQh4Q4MMKv3m7xqfrQG0XXDZoQ6FhxCP
AYw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:09 2026 by rpki-client