Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6C8EAC7A195F11F08408FA45C4F9AE02.roa
File:                     6C8EAC7A195F11F08408FA45C4F9AE02.roa (raw, json)
Hash identifier:          J7qEAv1WbFva9ld355AgpkVAVXjZXnSyCfh4AU7ldBI=
Subject key identifier:   C9:97:78:FC:A4:D8:DB:B6:0A:89:C8:6A:E1:79:82:91:D7:9C:50:38
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       0287
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6C8EAC7A195F11F08408FA45C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 06:32:00 +0000
ROA not before:           Thu 09 Jul 2026 06:32:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        2400:7aa0:2701::/48 maxlen: 48
                          2400:7aa0:2702::/48 maxlen: 48
                          2400:7aa0:2703::/48 maxlen: 48
                          2400:7aa0:2704::/48 maxlen: 48
                          2400:7aa0:2705::/48 maxlen: 48
                          2400:7aa0:2706::/48 maxlen: 48
                          2400:7aa0:2707::/48 maxlen: 48
                          2400:7aa0:2708::/48 maxlen: 48
                          2400:7aa0:2709::/48 maxlen: 48
                          2400:7aa0:270a::/48 maxlen: 48
                          2400:7aa0:270b::/48 maxlen: 48
                          2400:7aa0:270c::/48 maxlen: 48
                          2400:7aa0:270d::/48 maxlen: 48
                          2400:7aa0:270e::/48 maxlen: 48
                          2400:7aa0:270f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Jul  9 06:32:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4f4060-a0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:d4:2d:27:f3:11:76:7d:8b:61:e3:be:6b:
                    f7:65:ca:58:78:8c:33:4a:85:75:0d:73:cf:21:a7:
                    57:cb:72:fd:f9:19:81:5f:59:94:c5:1c:6d:85:21:
                    24:8a:1c:0f:fb:92:5f:e0:44:74:11:6c:90:7b:b8:
                    e3:28:80:f1:06:94:6a:1d:0e:6a:01:39:31:e9:1a:
                    c6:8f:f2:46:a0:64:c7:f3:5b:80:e4:33:a4:e4:a1:
                    14:bd:32:4d:81:dc:c0:37:86:1a:de:04:28:2d:ce:
                    ac:b4:e0:0b:5a:a8:11:77:98:6a:f1:d8:f8:17:59:
                    8d:4c:28:19:c6:46:39:de:b3:4a:fc:13:08:ad:fa:
                    cf:92:53:9b:08:14:55:b0:71:25:cb:fd:07:71:80:
                    d3:75:38:a9:91:1c:d1:a1:9e:4e:ce:af:2d:74:59:
                    e2:5b:c6:83:46:94:cc:f1:9c:05:8f:04:08:f6:c9:
                    7c:9e:43:f0:4d:b7:22:f8:97:ad:54:54:eb:57:b4:
                    86:62:50:36:4a:57:7e:8c:d6:04:06:ec:ac:c4:1d:
                    c1:67:bb:6b:4a:25:a4:cc:84:cc:78:50:c2:9e:17:
                    4e:4b:1b:07:cf:df:52:a2:46:9c:34:16:97:2f:d3:
                    91:a3:98:0f:05:f5:75:e4:3d:b1:01:8b:4e:80:37:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:97:78:FC:A4:D8:DB:B6:0A:89:C8:6A:E1:79:82:91:D7:9C:50:38
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6C8EAC7A195F11F08408FA45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7aa0:2701::-2400:7aa0:270f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:09:e3:e7:91:87:94:fb:65:f8:2c:d5:44:d1:a3:d8:6e:
         28:97:bb:26:59:7f:42:29:cb:f8:0b:6f:a8:ba:b1:31:9b:b0:
         ce:06:13:48:88:28:0f:fa:79:5e:bf:45:fd:f7:3d:9d:f5:0a:
         bd:bb:e0:35:c1:75:c5:bb:2e:68:3f:49:6f:d2:b7:5b:73:ae:
         35:ef:b4:b3:47:4b:ce:a7:d9:dd:a8:94:bc:01:f4:2d:ff:93:
         85:c1:dc:e4:6b:04:ae:90:ab:30:98:82:91:b4:ed:d9:0c:bb:
         b4:41:98:fe:a8:a8:7b:ed:bd:31:9f:3c:fb:43:53:6b:e8:29:
         84:38:48:d1:dd:ec:04:e6:17:65:10:a1:e2:df:9f:00:eb:c3:
         a1:19:86:01:a6:3b:3c:26:9a:bb:41:04:ed:c9:80:da:95:ad:
         36:19:d5:84:ec:f8:e1:f0:de:49:37:c1:8c:f7:a3:3e:e2:a9:
         b0:e5:b3:79:77:18:29:17:0a:b5:a7:b4:60:42:25:34:b4:cd:
         3a:e1:79:3c:ee:63:43:21:d0:6e:57:f3:71:1e:89:b4:9e:55:
         e1:cd:b6:1d:db:d7:ea:98:7f:fe:a5:c9:23:92:b4:6b:07:97:
         08:7d:01:a8:58:c0:43:10:df:67:03:e4:af:ae:87:4c:bf:7f:
         33:eb:cb:da
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcxNjkxMTAvBgNVBAUTKEU1MENCMjUwQkZBRDA4NjNFODVDMjkwMkVBMDIxOUQ1
M0NDMDgxMkUwHhcNMjYwNzA5MDYzMjAwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmNDA2MC1hMGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAylzULSfzEXZ9i2Hjvmv3ZcpYeIwzSoV1DXPPIadXy3L9+RmBX1mUxRxthSEk
ihwP+5Jf4ER0EWyQe7jjKIDxBpRqHQ5qATkx6RrGj/JGoGTH81uA5DOk5KEUvTJN
gdzAN4Ya3gQoLc6stOALWqgRd5hq8dj4F1mNTCgZxkY53rNK/BMIrfrPklObCBRV
sHEly/0HcYDTdTipkRzRoZ5Ozq8tdFniW8aDRpTM8ZwFjwQI9sl8nkPwTbci+Jet
VFTrV7SGYlA2Sld+jNYEBuysxB3BZ7trSiWkzITMeFDCnhdOSxsHz99SokacNBaX
L9ORo5gPBfV15D2xAYtOgDdOKwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFMmXePyk
2Nu2ConIauF5gpHXnFA4MB8GA1UdIwQYMBaAFOUMslC/rQhj6FwpAuoCGdU8wIEu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82QjdGOTkzQ0VC
QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENHUG9YQ2tDNmdJWjFUekFn
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTcxNjkvNkI3Rjk5M0NFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvNkM4RUFDN0Ex
OTVGMTFGMDg0MDhGQTQ1QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAAjAUMBIDBwAkAHqgJwEDBwQkAHqgJwAwDQYJKoZIhvcNAQELBQADggEBAHxb
CePnkYeU+2X4LNVE0aPYbiiXuyZZf0Ipy/gLb6i6sTGbsM4GE0iIKA/6eV6/Rf33
PZ31Cr274DXBdcW7Lmg/SW/St1tzrjXvtLNHS86n2d2olLwB9C3/k4XB3ORrBK6Q
qzCYgpG07dkMu7RBmP6oqHvtvTGfPPtDU2voKYQ4SNHd7ATmF2UQoeLfnwDrw6EZ
hgGmOzwmmrtBBO3JgNqVrTYZ1YTs+OHw3kk3wYz3oz7iqbDls3l3GCkXCrWntGBC
JTS0zTrheTzuY0Mh0G5X83EeibSeVeHNth3b1+qYf/6lySOStGsHlwh9AahYwEMQ
32cD5K+uh0y/fzPry9o=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:36 2026 by rpki-client