Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
File:                     6D3C9D30195F11F08408FA45C4F9AE02.roa (raw, json)
Hash identifier:          5sXZmYnyKRamMIM1TpFMCcTJVL+lG30Xxz2REpS04A4=
Subject key identifier:   A5:83:FF:FB:87:55:A4:64:DB:B0:93:EC:BD:F4:FF:A0:04:DB:D9:BD
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       0288
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 06:32:02 +0000
ROA not before:           Thu 09 Jul 2026 06:32:02 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        2400:7aa0:2701::/48 maxlen: 48
                          2400:7aa0:2702::/48 maxlen: 48
                          2400:7aa0:2703::/48 maxlen: 48
                          2400:7aa0:2704::/48 maxlen: 48
                          2400:7aa0:2705::/48 maxlen: 48
                          2400:7aa0:2706::/48 maxlen: 48
                          2400:7aa0:2707::/48 maxlen: 48
                          2400:7aa0:2708::/48 maxlen: 48
                          2400:7aa0:2709::/48 maxlen: 48
                          2400:7aa0:270a::/48 maxlen: 48
                          2400:7aa0:270b::/48 maxlen: 48
                          2400:7aa0:270c::/48 maxlen: 48
                          2400:7aa0:270d::/48 maxlen: 48
                          2400:7aa0:270e::/48 maxlen: 48
                          2400:7aa0:270f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 08:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Jul  9 06:32:02 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4f4062-1059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:aa:b6:e6:76:f2:c5:e9:a0:e4:2a:0f:59:
                    21:71:f8:bf:be:60:b5:97:4b:57:99:3b:93:01:af:
                    02:b4:c8:61:14:4c:d9:43:6f:7a:93:11:e5:9f:76:
                    f1:fd:52:7c:df:16:18:33:d9:d5:24:ac:30:f9:3d:
                    27:39:01:b2:cb:be:75:e9:41:9d:7b:38:b3:49:d6:
                    44:5a:90:b7:66:09:22:a3:c2:68:b1:78:31:63:d9:
                    aa:15:a9:9e:3e:d6:10:b9:c5:09:02:c3:68:42:78:
                    f1:b1:97:14:48:2d:6a:40:52:04:76:0a:29:34:0f:
                    29:39:49:65:c3:70:68:39:6f:d9:89:9c:75:40:84:
                    f9:1c:8e:5f:ce:73:4f:10:76:32:15:f5:37:c2:9d:
                    a9:d3:43:b1:02:2b:4e:d1:c3:18:1a:03:6f:a7:b1:
                    ba:f2:27:8f:bf:41:2b:b2:3d:ef:9b:97:62:75:89:
                    ca:08:f2:f7:03:5d:43:90:af:5a:90:df:57:bf:0a:
                    4b:88:9e:7c:99:65:91:bd:ba:87:ac:76:6e:9b:25:
                    d6:6f:a5:65:65:56:d7:bb:9c:36:c4:01:65:48:bf:
                    17:9f:72:07:0f:ab:9f:44:5a:dd:aa:75:2a:65:e0:
                    41:e3:87:fe:f3:2e:87:88:de:e8:ae:6f:78:54:ae:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:83:FF:FB:87:55:A4:64:DB:B0:93:EC:BD:F4:FF:A0:04:DB:D9:BD
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7aa0:2701::-2400:7aa0:270f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:04:48:27:47:bc:8d:fd:11:05:22:b7:f4:c5:2c:b4:98:
         07:f7:ad:c8:c6:0c:71:3b:c8:1f:04:15:2a:60:2c:73:0e:25:
         20:6d:ad:7e:fb:39:7a:4c:69:3c:df:32:7d:4e:2a:94:91:fb:
         09:b6:e0:9b:e0:c7:33:82:6e:31:45:9c:e7:85:6e:aa:89:27:
         bb:f0:0e:44:91:71:8f:35:6f:ee:ff:da:a9:fe:3e:b5:d5:6d:
         5f:b3:db:f1:38:24:12:fa:dc:c2:af:22:bc:e4:03:db:a0:76:
         89:c2:ac:9b:6e:69:9f:29:6c:b6:26:99:be:f0:5f:e6:fe:6e:
         66:11:f3:60:6c:c3:34:6b:12:b0:d7:f7:7d:7e:d7:71:e4:a1:
         33:80:a6:a0:5b:98:5f:34:1a:69:dc:54:5d:2b:b0:7b:9e:d4:
         34:7b:2e:df:eb:9e:73:37:b2:c6:9b:f5:39:0b:fd:3f:a2:98:
         8c:ea:4e:08:f0:a1:34:a2:6e:97:81:a8:ff:ce:bf:bf:02:10:
         e4:ea:1b:1b:1b:49:c1:ef:8a:92:94:77:b2:e7:f6:db:e6:6a:
         8e:9a:95:c3:41:88:0a:21:94:ae:6e:be:e1:2a:f2:94:2c:80:
         77:07:93:d5:d3:e8:1b:a3:4f:1f:83:96:8d:f3:04:d2:70:fb:
         86:4b:79:2e
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcxNjkxMTAvBgNVBAUTKEU1MENCMjUwQkZBRDA4NjNFODVDMjkwMkVBMDIxOUQ1
M0NDMDgxMkUwHhcNMjYwNzA5MDYzMjAyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmNDA2Mi0xMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYWqtuZ28sXpoOQqD1khcfi/vmC1l0tXmTuTAa8CtMhhFEzZQ296kxHln3bx
/VJ83xYYM9nVJKww+T0nOQGyy7516UGdezizSdZEWpC3Zgkio8JosXgxY9mqFame
PtYQucUJAsNoQnjxsZcUSC1qQFIEdgopNA8pOUllw3BoOW/ZiZx1QIT5HI5fznNP
EHYyFfU3wp2p00OxAitO0cMYGgNvp7G68iePv0Ersj3vm5didYnKCPL3A11DkK9a
kN9XvwpLiJ58mWWRvbqHrHZumyXWb6VlZVbXu5w2xAFlSL8Xn3IHD6ufRFrdqnUq
ZeBB44f+8y6HiN7orm94VK6rTwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFKWD//uH
VaRk27CT7L30/6AE29m9MB8GA1UdIwQYMBaAFOUMslC/rQhj6FwpAuoCGdU8wIEu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82QjdGOTkzQ0VC
QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi81UXl5VUwtdENHUG9YQ2tDNmdJWjFUekFn
UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVReXlVTC10Q0dQb1hDa0M2Z0laMVR6QWdTNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTcxNjkvNkI3Rjk5M0NFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvNkQzQzlEMzAx
OTVGMTFGMDg0MDhGQTQ1QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAAjAUMBIDBwAkAHqgJwEDBwQkAHqgJwAwDQYJKoZIhvcNAQELBQADggEBAA4t
BEgnR7yN/REFIrf0xSy0mAf3rcjGDHE7yB8EFSpgLHMOJSBtrX77OXpMaTzfMn1O
KpSR+wm24JvgxzOCbjFFnOeFbqqJJ7vwDkSRcY81b+7/2qn+PrXVbV+z2/E4JBL6
3MKvIrzkA9ugdonCrJtuaZ8pbLYmmb7wX+b+bmYR82BswzRrErDX931+13HkoTOA
pqBbmF80GmncVF0rsHue1DR7Lt/rnnM3ssab9TkL/T+imIzqTgjwoTSibpeBqP/O
v78CEOTqGxsbScHvipKUd7Ln9tvmao6alcNBiAohlK5uvuEq8pQsgHcHk9XT6Buj
Tx+Dlo3zBNJw+4ZLeS4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:42 2026 by rpki-client