Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/98AEAB84B72111EF8A087D30C4F9AE02.roa
File:                     98AEAB84B72111EF8A087D30C4F9AE02.roa (raw, json)
Hash identifier:          j2Hz+mynGpqLJnmZlqehevWYxoqbcW99ZISJiOfwTiY=
Subject key identifier:   4B:90:48:EC:21:53:02:15:FA:54:36:F5:3E:BF:93:A8:40:4C:B7:E5
Certificate issuer:       /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial:       0110
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/98AEAB84B72111EF8A087D30C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:10:17 +0000
ROA not before:           Wed 09 Jul 2025 08:13:52 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        2402:2500:10a0::/44 maxlen: 44
                          2402:2500:10a0::/48 maxlen: 48
                          2402:2500:10a1::/48 maxlen: 48
                          2402:2500:10a2::/48 maxlen: 48
                          2402:2500:10a3::/48 maxlen: 48
                          2402:2500:10a4::/48 maxlen: 48
                          2402:2500:10a5::/48 maxlen: 48
                          2402:2500:10a6::/48 maxlen: 48
                          2402:2500:10a7::/48 maxlen: 48
                          2402:2500:10a8::/48 maxlen: 48
                          2402:2500:10a9::/48 maxlen: 48
                          2402:2500:10aa::/48 maxlen: 48
                          2402:2500:10ab::/48 maxlen: 48
                          2402:2500:10ac::/48 maxlen: 48
                          2402:2500:10ad::/48 maxlen: 48
                          2402:2500:10ae::/48 maxlen: 48
                          2402:2500:10af::/48 maxlen: 48
                          2402:2500:20a0::/44 maxlen: 44
                          2402:2500:20a0::/48 maxlen: 48
                          2402:2500:20a1::/48 maxlen: 48
                          2402:2500:20a2::/48 maxlen: 48
                          2402:2500:20a3::/48 maxlen: 48
                          2402:2500:20a4::/48 maxlen: 48
                          2402:2500:20a5::/48 maxlen: 48
                          2402:2500:20a6::/48 maxlen: 48
                          2402:2500:20a7::/48 maxlen: 48
                          2402:2500:20a8::/48 maxlen: 48
                          2402:2500:20a9::/48 maxlen: 48
                          2402:2500:20aa::/48 maxlen: 48
                          2402:2500:20ab::/48 maxlen: 48
                          2402:2500:20ac::/48 maxlen: 48
                          2402:2500:20ad::/48 maxlen: 48
                          2402:2500:20ae::/48 maxlen: 48
                          2402:2500:20af::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
                          rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 19:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
        Validity
            Not Before: Jul  9 08:13:52 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59a49-436c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:06:8f:36:72:a6:f1:e9:61:0f:63:ed:57:
                    86:b4:e6:81:46:27:97:3d:69:16:db:da:c9:f0:68:
                    52:98:c6:43:f0:89:ca:41:e0:06:fb:4d:0d:b1:3d:
                    de:53:4f:5e:de:ca:70:de:bd:77:60:ac:e6:3d:32:
                    a2:4e:19:f8:bd:62:9f:99:86:00:03:6e:c4:2d:0e:
                    31:00:15:23:a4:9e:e4:6b:4b:d4:b0:14:ea:3f:90:
                    7e:ad:50:be:ed:fa:42:fc:b3:b1:09:73:6b:0e:b6:
                    8c:99:87:48:e0:b0:12:23:3c:3f:91:06:2a:0a:a0:
                    cf:f5:c9:07:93:dd:ed:9d:c8:82:96:59:24:21:f6:
                    58:57:3a:21:67:1d:83:9b:d5:6d:6b:f7:93:99:09:
                    23:27:39:49:4b:3b:8c:3b:a5:59:6d:4e:e1:ea:e8:
                    08:20:bd:51:44:85:21:5c:41:c6:81:dd:4e:21:65:
                    f6:e9:8b:29:78:1e:9f:ab:30:ea:3c:3e:91:ea:c2:
                    e0:14:11:2d:4a:d3:b8:17:a9:a8:37:f2:2a:2a:3f:
                    1d:3a:9a:d3:0a:00:65:27:d0:61:f3:5d:32:81:42:
                    82:4c:99:f7:73:a1:3b:33:54:78:eb:69:54:09:76:
                    8e:fd:62:d0:4a:4b:fe:38:c4:c0:3a:da:54:6f:32:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:90:48:EC:21:53:02:15:FA:54:36:F5:3E:BF:93:A8:40:4C:B7:E5
            X509v3 Authority Key Identifier:
                keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/98AEAB84B72111EF8A087D30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2500:10a0::/44
                  2402:2500:20a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:e0:f7:f2:c1:7f:32:50:85:fc:76:78:5a:dc:b1:22:7d:d6:
         a2:6f:e4:e7:d0:6e:25:13:8d:66:4f:ad:ae:2c:34:87:85:0a:
         24:cf:21:d1:99:99:79:e6:54:44:e9:21:01:dd:ed:80:2d:33:
         42:c6:96:24:d5:26:d8:e0:5d:30:cc:9d:a7:06:1d:e5:d2:ef:
         4e:77:e3:1c:86:18:84:93:30:08:ee:f7:35:77:e7:e7:30:1b:
         12:71:81:18:4a:7f:80:19:20:6d:1e:11:46:6f:1d:8e:64:10:
         62:c9:e1:c3:d8:d3:cd:88:d8:77:e2:8d:7b:b4:a5:1a:56:67:
         3a:28:69:fb:36:45:a8:9a:23:d4:2e:66:c5:d8:af:f7:55:04:
         01:7c:30:95:b8:44:02:ec:fa:e7:e4:f4:5d:32:80:5b:94:0c:
         a5:d8:69:31:8e:1c:c7:2f:03:5d:bb:43:96:ba:4c:39:9f:f8:
         a5:ab:5f:44:cd:29:5f:5a:a7:4f:ff:8f:08:0c:d8:e6:8f:e6:
         42:44:c9:fb:83:26:17:c0:98:a9:b4:31:48:04:f8:c4:26:5e:
         70:6d:b0:fa:36:0d:45:9d:d7:b2:11:83:8e:b8:d0:02:c8:5d:
         3b:b1:32:41:50:d3:8d:1c:03:9c:00:95:bd:b0:43:ff:4e:22:
         00:89:24:b0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG
M0Q3MDI2NTYwHhcNMjUwNzA5MDgxMzUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWE0OS00MzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn7wGjzZypvHpYQ9j7VeGtOaBRieXPWkW29rJ8GhSmMZD8InKQeAG+00NsT3e
U09e3spw3r13YKzmPTKiThn4vWKfmYYAA27ELQ4xABUjpJ7ka0vUsBTqP5B+rVC+
7fpC/LOxCXNrDraMmYdI4LASIzw/kQYqCqDP9ckHk93tnciCllkkIfZYVzohZx2D
m9Vta/eTmQkjJzlJSzuMO6VZbU7h6ugIIL1RRIUhXEHGgd1OIWX26YspeB6fqzDq
PD6R6sLgFBEtStO4F6moN/IqKj8dOprTCgBlJ9Bh810ygUKCTJn3c6E7M1R462lU
CXaO/WLQSkv+OMTAOtpUbzIT7QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFEuQSOwh
UwIV+lQ29T6/k6hATLflMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3
MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgyRUYvRkM2NTBCNzJCNzFEMTFFRjg5ODJDNDBDQzRGOUFFMDIvOThBRUFCODRC
NzIxMTFFRjhBMDg3RDMwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAIlABCgAwcEJAIlACCgMA0GCSqGSIb3DQEBCwUAA4IBAQAO4Pfy
wX8yUIX8dnha3LEifdaib+Tn0G4lE41mT62uLDSHhQokzyHRmZl55lRE6SEB3e2A
LTNCxpYk1SbY4F0wzJ2nBh3l0u9Od+MchhiEkzAI7vc1d+fnMBsScYEYSn+AGSBt
HhFGbx2OZBBiyeHD2NPNiNh34o17tKUaVmc6KGn7NkWomiPULmbF2K/3VQQBfDCV
uEQC7Prn5PRdMoBblAyl2GkxjhzHLwNdu0OWukw5n/ilq19EzSlfWqdP/48IDNjm
j+ZCRMn7gyYXwJiptDFIBPjEJl5wbbD6Ng1FndeyEYOOuNACyF07sTJBUNONHAOc
AJW9sEP/TiIAiSSw
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:55:12 2026 by rpki-client