Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/1A3A1E2C287D11F18C83C945A7833773.roa
File:                     1A3A1E2C287D11F18C83C945A7833773.roa (raw, json)
Hash identifier:          Ga/vGf3pYAE0aZeA1OVe1QY6DoiwmNjQ7QadAkBsWIc=
Subject key identifier:   F7:79:9A:15:2D:D2:BB:FC:24:18:40:98:7D:A3:CD:0D:C3:B6:DB:CB
Certificate issuer:       /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial:       0139
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/1A3A1E2C287D11F18C83C945A7833773.roa
Signing time:             Tue 12 May 2026 13:24:26 +0000
ROA not before:           Tue 12 May 2026 13:24:26 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9450
IP address blocks:        2402:2500:4000::/38 maxlen: 46
                          2402:2500:4400::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
                          rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 13:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
        Validity
            Not Before: May 12 13:24:26 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a032a0a-6e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:ce:61:f3:2a:41:37:83:03:30:8a:4d:e5:
                    c9:62:ea:9b:e5:0e:3c:5c:2d:c9:a3:74:f0:d8:be:
                    8a:aa:af:ee:f8:e5:06:ad:2e:17:93:71:89:04:d4:
                    8c:20:81:0d:88:19:d9:0a:9a:8c:6c:2f:5e:ee:b0:
                    50:22:44:55:11:4f:f5:bb:69:4e:58:27:31:d7:7e:
                    ec:c0:20:0a:bb:29:34:f8:fa:86:3d:85:6e:40:0e:
                    de:13:09:f5:72:b3:6a:4c:6c:23:f4:9d:b9:41:37:
                    73:c3:86:20:7d:98:dd:6e:bb:59:9e:cb:bd:c6:5d:
                    15:73:f3:f9:39:0f:37:60:19:a5:f3:e0:98:fd:eb:
                    8b:08:28:b3:b8:e6:ed:c7:1e:37:36:56:42:59:42:
                    0f:fa:1c:e4:50:5c:37:f6:7a:77:d5:9f:29:f4:a4:
                    7c:f9:ca:90:29:b8:91:10:df:d7:a5:70:66:35:df:
                    be:8e:37:05:ba:9d:d1:37:da:98:f6:d9:7e:5b:66:
                    16:9d:83:d5:72:18:59:b2:19:1f:0a:f6:0e:6b:b8:
                    1b:49:d0:eb:a3:33:7a:7e:75:a7:cb:e1:ad:6c:b0:
                    59:f5:bb:2d:08:da:32:0c:70:09:c6:f7:23:96:d4:
                    4a:6e:4e:57:35:e6:c5:11:d3:fe:6f:aa:18:2e:29:
                    cf:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:9A:15:2D:D2:BB:FC:24:18:40:98:7D:A3:CD:0D:C3:B6:DB:CB
            X509v3 Authority Key Identifier:
                keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/1A3A1E2C287D11F18C83C945A7833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2500:4000::-2402:2500:4403:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         a6:46:c5:f5:0c:6d:03:5e:ab:09:8b:d3:9b:56:2a:ec:0a:fa:
         e4:55:2b:d6:8f:70:a7:41:b2:ba:d2:fa:3f:32:5e:9b:39:a8:
         76:76:b5:c6:3c:14:87:2d:06:61:a9:71:dc:94:77:eb:43:04:
         56:fb:04:43:cc:d8:e4:78:8f:1d:c9:7b:59:1a:2f:6a:b4:93:
         52:8a:55:72:9b:d5:b1:eb:07:02:ae:c7:d7:33:bf:1b:3b:ed:
         08:71:d4:1f:76:4a:b4:e8:04:8c:f2:21:88:fa:50:47:97:4d:
         e3:d3:10:9a:39:80:3d:1b:cb:a4:2e:d2:81:f5:bd:cb:31:9d:
         57:03:6b:1a:2b:a6:ac:6d:c1:36:aa:5d:c6:66:7f:26:bb:00:
         78:c7:99:30:ed:fc:e6:e7:0f:cb:e2:aa:cc:bb:51:0d:d7:4d:
         1c:36:c3:5d:a8:4b:58:93:89:d0:3d:b9:24:d3:cc:85:b6:9b:
         8f:a2:1c:d4:5a:32:2a:fb:03:40:8c:32:81:b7:70:8a:ce:aa:
         43:a6:34:6a:a4:0b:19:11:7c:25:29:bd:9f:f0:70:e5:7d:07:
         9d:f5:ed:70:12:0a:bd:23:80:95:f3:98:de:b2:46:7c:53:25:
         15:c9:85:95:ea:d5:12:85:08:7d:21:28:c4:21:9b:c8:18:c3:
         21:3d:87:03
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG
M0Q3MDI2NTYwHhcNMjYwNTEyMTMyNDI2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAzMmEwYS02ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstDOYfMqQTeDAzCKTeXJYuqb5Q48XC3Jo3Tw2L6Kqq/u+OUGrS4Xk3GJBNSM
IIENiBnZCpqMbC9e7rBQIkRVEU/1u2lOWCcx137swCAKuyk0+PqGPYVuQA7eEwn1
crNqTGwj9J25QTdzw4YgfZjdbrtZnsu9xl0Vc/P5OQ83YBml8+CY/euLCCizuObt
xx43NlZCWUIP+hzkUFw39np31Z8p9KR8+cqQKbiREN/XpXBmNd++jjcFup3RN9qY
9tl+W2YWnYPVchhZshkfCvYOa7gbSdDrozN6fnWny+GtbLBZ9bstCNoyDHAJxvcj
ltRKbk5XNebFEdP+b6oYLinPYQIDAQABo4ICbTCCAmkwHQYDVR0OBBYEFPd5mhUt
0rv8JBhAmH2jzQ3DttvLMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3
MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgyRUYvRkM2NTBCNzJCNzFEMTFFRjg5ODJDNDBDQzRGOUFFMDIvMUEzQTFFMkMy
ODdEMTFGMThDODNDOTQ1QTc4MzM3NzMucm9hMCwGCCsGAQUFBwEHAQH/BB0wGzAZ
BAIAAjATMBEDBgYkAiUAQAMHAiQCJQBEADANBgkqhkiG9w0BAQsFAAOCAQEApkbF
9QxtA16rCYvTm1Yq7Ar65FUr1o9wp0GyutL6PzJemzmodna1xjwUhy0GYalx3JR3
60MEVvsEQ8zY5HiPHcl7WRovarSTUopVcpvVsesHAq7H1zO/GzvtCHHUH3ZKtOgE
jPIhiPpQR5dN49MQmjmAPRvLpC7SgfW9yzGdVwNrGiumrG3BNqpdxmZ/JrsAeMeZ
MO385ucPy+KqzLtRDddNHDbDXahLWJOJ0D25JNPMhbabj6Ic1FoyKvsDQIwygbdw
is6qQ6Y0aqQLGRF8JSm9n/Bw5X0HnfXtcBIKvSOAlfOY3rJGfFMlFcmFlerVEoUI
fSEoxCGbyBjDIT2HAw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:44:15 2026 by rpki-client