Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/739C8BDECB5A11EFBEE64062C4F9AE02.roa
File:                     739C8BDECB5A11EFBEE64062C4F9AE02.roa (raw, json)
Hash identifier:          zNeCIz79QyLjKaLa6KZk2f88rwvGe93u3cvB8Yfkn+Q=
Subject key identifier:   32:FE:0A:63:6B:2F:ED:46:89:ED:98:DD:34:A3:2B:28:1F:3B:20:90
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       FA
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/739C8BDECB5A11EFBEE64062C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 06:36:13 +0000
ROA not before:           Sat 25 Apr 2026 06:36:13 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133446
IP address blocks:        2401:e160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: Apr 25 06:36:13 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69ec60dd-b974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ad:86:c4:6a:92:be:f8:35:53:0b:81:8c:44:
                    92:a6:c9:05:df:2d:6d:7d:db:d5:cd:21:e2:f2:2e:
                    f0:fe:8e:91:df:53:c6:a6:84:50:fb:f4:41:94:84:
                    5f:57:81:68:bc:0a:18:e4:64:b5:2e:a6:c3:dc:59:
                    b3:72:69:de:ef:f6:67:39:a1:98:33:d3:33:a6:e1:
                    ab:ca:99:bf:46:e4:95:4d:70:d9:b3:12:b1:8f:33:
                    8d:11:82:c7:42:88:7a:f2:01:f7:72:bf:28:53:ad:
                    e7:28:61:3e:7a:40:6d:8b:aa:26:5e:6a:9d:aa:60:
                    fc:a2:de:6a:b2:c9:62:e6:77:32:1a:f0:4e:46:73:
                    a9:34:77:5a:b1:32:3c:da:1f:0a:07:77:c6:69:0d:
                    51:73:9d:f4:3b:1d:49:92:23:85:92:e8:c2:35:96:
                    39:3d:52:6f:3e:e6:97:dd:d2:a5:d8:bb:20:f1:a3:
                    1d:d6:7a:39:df:c2:c6:aa:f3:60:65:cf:94:0a:dc:
                    b9:c9:0b:83:e0:87:a4:88:ad:f6:8f:be:82:53:da:
                    40:2d:5b:cb:d9:69:8d:e2:bb:45:28:49:f1:0f:91:
                    d4:6c:24:76:1b:cd:d7:ea:7c:e0:e5:d2:1d:2e:e2:
                    71:b0:85:c3:f6:a2:cb:bf:ab:5a:5c:2a:e6:1b:0d:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FE:0A:63:6B:2F:ED:46:89:ED:98:DD:34:A3:2B:28:1F:3B:20:90
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/739C8BDECB5A11EFBEE64062C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e160::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:00:2f:09:c5:a5:dc:cc:de:86:ac:3c:7c:11:f5:50:6d:4f:
         36:b0:32:81:4e:d0:a3:72:e1:44:1a:45:e0:a1:0f:86:be:ca:
         2d:55:f9:f3:05:3f:94:85:bd:4b:64:40:46:01:9c:17:32:76:
         08:93:b5:66:ac:41:c9:cd:f8:12:3d:b2:48:c9:4c:bb:1d:8f:
         d7:96:97:c1:ef:ab:fa:34:f0:f7:56:a3:70:b2:c1:a9:61:a8:
         47:7f:eb:bb:48:ff:c8:95:7b:aa:2d:43:63:6c:2e:5c:29:d4:
         ee:6d:eb:7f:04:14:ea:ed:4e:67:2f:3f:96:79:a7:fb:a7:4d:
         e3:d9:a6:3f:51:e5:d2:01:6b:0f:74:46:ff:6e:c6:0f:0c:08:
         38:19:75:78:18:6f:b2:11:ca:26:3a:7d:ed:2b:a7:84:01:7a:
         e5:ad:ed:30:88:62:de:61:93:4e:c8:b6:94:fc:2e:38:61:70:
         9e:2d:10:dc:9a:82:eb:c7:59:89:20:63:44:69:51:29:2c:ff:
         53:58:b3:c4:19:a4:97:cd:dc:d9:da:61:13:e8:2a:3f:5b:dd:
         7b:e9:78:73:1b:0e:d0:c2:34:1d:91:36:7c:b6:b6:b7:3d:ff:
         d3:a0:a2:87:c1:26:23:9f:ef:87:e9:85:4e:c3:6f:d2:f5:83:
         82:5d:7b:fc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyQjYxMTAvBgNVBAUTKEVDNjc5MTY5MTc3QjlFMTMxRDBEQUEwMTM5OEQ3MDAz
OTgyN0QxRjYwHhcNMjYwNDI1MDYzNjEzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWVjNjBkZC1iOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2K2GxGqSvvg1UwuBjESSpskF3y1tfdvVzSHi8i7w/o6R31PGpoRQ+/RBlIRf
V4FovAoY5GS1LqbD3Fmzcmne7/ZnOaGYM9MzpuGrypm/RuSVTXDZsxKxjzONEYLH
Qoh68gH3cr8oU63nKGE+ekBti6omXmqdqmD8ot5qssli5ncyGvBORnOpNHdasTI8
2h8KB3fGaQ1Rc530Ox1JkiOFkujCNZY5PVJvPuaX3dKl2Lsg8aMd1no538LGqvNg
Zc+UCty5yQuD4IekiK32j76CU9pALVvL2WmN4rtFKEnxD5HUbCR2G83X6nzg5dId
LuJxsIXD9qLLv6taXCrmGw1kvwIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFDL+CmNr
L+1Gie2Y3TSjKygfOyCQMB8GA1UdIwQYMBaAFOxnkWkXe54THQ2qATmNcAOYJ9H2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJCNi9FNjRCMDNCNENC
NTkxMUVGODY5MTVCNjFDNEY5QUUwMi83R2VSYVJkN25oTWREYW9CT1kxd0E1Z24w
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdHZVJhUmQ3bmhNZERhb0JPWTF3QTVnbjBmWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgyQjYvRTY0QjAzQjRDQjU5MTFFRjg2OTE1QjYxQzRGOUFFMDIvNzM5QzhCREVD
QjVBMTFFRkJFRTY0MDYyQzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAHhYDANBgkqhkiG9w0BAQsFAAOCAQEAZwAvCcWl3Mzehqw8fBH1
UG1PNrAygU7Qo3LhRBpF4KEPhr7KLVX58wU/lIW9S2RARgGcFzJ2CJO1ZqxByc34
Ej2ySMlMux2P15aXwe+r+jTw91ajcLLBqWGoR3/ru0j/yJV7qi1DY2wuXCnU7m3r
fwQU6u1OZy8/lnmn+6dN49mmP1Hl0gFrD3RG/27GDwwIOBl1eBhvshHKJjp97Sun
hAF65a3tMIhi3mGTTsi2lPwuOGFwni0Q3JqC68dZiSBjRGlRKSz/U1izxBmkl83c
2dphE+gqP1vde+l4cxsO0MI0HZE2fLa2tz3/06Cih8EmI5/vh+mFTsNv0vWDgl17
/A==
-----END CERTIFICATE-----
Generated at Wed May 13 10:52:13 2026 by rpki-client