Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
File:                     3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (raw, json)
Hash identifier:          +WUBdF5XyO/0Wp7ZryTUO15zQkPiK5sz2M+4YcvCha0=
Subject key identifier:   5C:E6:45:E6:5F:7C:BD:65:4B:04:F8:15:33:87:87:C1:8A:75:31:94
Certificate issuer:       /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial:       03EB
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:25:05 +0000
ROA not before:           Tue 17 Jun 2025 00:57:56 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138986
IP address blocks:        2402:e940::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
                          rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
        Validity
            Not Before: Jun 17 00:57:56 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47671-b5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:df:51:56:14:12:47:a6:36:2b:e4:65:30:
                    da:58:4c:25:3a:6a:6c:4e:ae:1d:f6:42:9b:d7:2c:
                    94:ab:de:da:95:f6:ce:2f:e5:27:d9:04:26:fb:c2:
                    62:98:16:ae:3b:05:21:9b:99:29:d9:43:3e:6d:70:
                    39:cc:5c:72:28:a9:b1:78:f8:96:25:22:f4:f1:cf:
                    a5:4e:83:63:31:76:31:df:a6:f6:3a:24:f4:e7:b2:
                    8e:64:d3:b0:34:d3:16:07:e9:02:6a:4a:88:d9:bd:
                    83:36:4a:d4:ef:28:7f:a4:6c:bb:5e:f1:54:9e:e2:
                    0d:6d:a8:9f:2f:28:c3:58:4e:8f:b4:92:1d:a0:9b:
                    60:b8:f7:e5:7b:b8:4a:7f:cd:20:6a:8c:f7:e2:bb:
                    4a:99:85:20:59:d1:07:43:6d:c8:1b:a9:dd:5c:f1:
                    b6:80:df:6f:57:0d:46:fd:71:51:8d:63:fd:44:f9:
                    45:e6:05:aa:16:35:d2:b8:fc:b1:6d:ca:2b:cd:95:
                    76:26:a7:ac:ce:3a:bc:2c:7e:61:da:da:0f:09:63:
                    71:5b:c0:12:71:ac:a5:1f:e7:12:21:17:b6:ea:60:
                    11:22:1a:7f:68:81:04:47:80:bc:48:2e:0a:9f:f2:
                    3a:38:ee:e2:8d:71:10:6a:5e:74:46:59:66:c9:cc:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E6:45:E6:5F:7C:BD:65:4B:04:F8:15:33:87:87:C1:8A:75:31:94
            X509v3 Authority Key Identifier:
                keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e940::/44

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:87:b3:4c:3c:45:35:34:86:d9:6e:50:56:df:2f:10:58:
         6b:1c:3c:41:b8:a4:72:70:55:03:e3:50:b9:12:4a:c3:00:86:
         09:f3:dd:06:b9:81:ad:b4:83:ea:83:0d:cd:e8:6e:74:16:a7:
         39:e9:8c:4a:a4:a8:04:40:0b:c8:7a:34:91:69:9c:85:de:bf:
         6b:69:35:f6:86:ea:fb:05:1b:f4:e6:5a:3f:cd:a2:0e:fa:fd:
         c1:ab:61:66:25:7e:cf:18:c3:ac:9d:ec:8d:6a:cf:cb:10:ef:
         32:52:1e:fb:60:23:11:50:34:58:dd:87:6c:e3:ce:c2:f1:95:
         7d:9c:73:e1:10:04:81:9f:d4:8a:4c:3c:71:c9:e5:3f:b7:88:
         06:57:c0:ee:fa:49:1a:0f:c5:08:67:4e:e9:ca:a8:1c:b7:6f:
         e7:46:c1:df:5c:eb:8d:cf:a0:df:91:ee:2e:a6:06:08:d5:6c:
         97:d0:33:55:e9:f5:b5:58:ce:c0:2a:51:e3:4c:6f:c9:26:05:
         84:e4:7c:d1:09:83:a6:cc:5e:a3:8d:5a:69:37:ba:1e:e7:57:
         4c:2e:23:4c:2e:b7:51:63:2a:24:1e:10:ad:cd:d3:cf:aa:d1:
         6b:fa:f9:f6:9e:59:7a:81:f5:be:62:4b:7e:b2:2e:83:b4:1e:
         fb:77:b9:fb
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICA+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg5OTYxMTAvBgNVBAUTKDY5MjEzNTYwODY4Mzc1NUU5NEQ4RUNBNTdEOEIwQjM1
OEVDRTE3MTgwHhcNMjUwNjE3MDA1NzU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzY3MS1iNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApwDfUVYUEkemNivkZTDaWEwlOmpsTq4d9kKb1yyUq97alfbOL+Un2QQm+8Ji
mBauOwUhm5kp2UM+bXA5zFxyKKmxePiWJSL08c+lToNjMXYx36b2OiT057KOZNOw
NNMWB+kCakqI2b2DNkrU7yh/pGy7XvFUnuINbaifLyjDWE6PtJIdoJtguPfle7hK
f80gaoz34rtKmYUgWdEHQ23IG6ndXPG2gN9vVw1G/XFRjWP9RPlF5gWqFjXSuPyx
bcorzZV2Jqeszjq8LH5h2toPCWNxW8AScaylH+cSIRe26mARIhp/aIEER4C8SC4K
n/I6OO7ijXEQal50RllmycyaXQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFzmReZf
fL1lSwT4FTOHh8GKdTGUMB8GA1UdIwQYMBaAFGkhNWCGg3VelNjspX2LCzWOzhcY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODk5Ni82NjAzMEY1RUQw
NjAxMUVDQkE0MEZDODNDNEY5QUUwMi9hU0UxWUlhRGRWNlUyT3lsZllzTE5ZN09G
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTRTFZSWFEZFY2VTJPeWxmWXNMTlk3T0Z4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg5OTYvNjYwMzBGNUVEMDYwMTFFQ0JBNDBGQzgzQzRGOUFFMDIvM0U2RTdBMEM1
RkZCMTFFREJERjVBNjI3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJALpQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQABu4ezTDxFNTSG2W5Q
Vt8vEFhrHDxBuKRycFUD41C5EkrDAIYJ890GuYGttIPqgw3N6G50Fqc56YxKpKgE
QAvIejSRaZyF3r9raTX2hur7BRv05lo/zaIO+v3Bq2FmJX7PGMOsneyNas/LEO8y
Uh77YCMRUDRY3Yds487C8ZV9nHPhEASBn9SKTDxxyeU/t4gGV8Du+kkaD8UIZ07p
yqgct2/nRsHfXOuNz6Dfke4upgYI1WyX0DNV6fW1WM7AKlHjTG/JJgWE5HzRCYOm
zF6jjVppN7oe51dMLiNMLrdRYyokHhCtzdPPqtFr+vn2nll6gfW+Ykt+si6DtB77
d7n7
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:37 2026 by rpki-client