Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/E608220401A611F1B4D1E4C1696F56BC.roa
File:                     E608220401A611F1B4D1E4C1696F56BC.roa (raw, json)
Hash identifier:          wawCQ6JRiOixGpvfc0LMo+4eb9Efwa6i/GrCB4BU3/U=
Subject key identifier:   8C:25:3B:61:86:3D:33:44:FE:9D:EB:3A:0D:EF:42:46:79:C1:98:DD
Certificate issuer:       /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial:       0183
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/E608220401A611F1B4D1E4C1696F56BC.roa
Signing time:             Sun 01 Mar 2026 17:32:25 +0000
ROA not before:           Wed 04 Feb 2026 08:52:56 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     213734
IP address blocks:        2400:b8c1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
        Validity
            Not Before: Feb  4 08:52:56 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47829-a2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:91:d9:88:93:75:e9:37:d7:1b:1e:62:72:12:
                    f4:85:d7:21:b3:fb:8a:26:12:2c:7f:f8:73:1f:90:
                    31:1b:8c:bd:50:7d:76:20:73:01:c6:ce:77:30:82:
                    c5:c3:a6:53:b0:ea:da:71:41:57:5d:c5:a2:e6:af:
                    80:91:cd:ac:52:50:eb:72:6b:cd:da:37:a7:97:ff:
                    22:f4:fd:79:15:73:d5:5f:77:c3:62:88:7d:98:28:
                    b2:fe:60:be:22:72:6f:bd:07:a1:eb:7f:8a:c5:e2:
                    f7:e9:cc:96:aa:68:04:f8:62:81:3d:5f:48:f4:9c:
                    fb:f0:ee:29:78:d2:f0:f3:e0:4d:7d:c1:4f:7e:b3:
                    a5:c9:4e:48:9a:42:56:9b:99:4e:03:c3:a9:12:4c:
                    92:6b:7e:d9:ae:d7:ef:1e:85:89:1b:b6:3c:22:25:
                    2e:2e:4b:06:63:00:17:cc:07:ca:ed:06:33:c8:d0:
                    7f:9b:e1:f7:c1:5d:15:0b:f2:45:3d:4b:78:5c:61:
                    0d:3a:44:cb:a2:2e:ed:31:ca:64:0d:19:b4:b4:2c:
                    25:75:11:9d:78:73:4e:7d:35:0b:ba:41:61:20:86:
                    0a:8c:84:0b:80:3d:ac:ab:16:59:fb:d0:c8:73:83:
                    f5:71:c5:92:e0:f9:34:f2:4c:27:fd:16:06:ff:2d:
                    e6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:25:3B:61:86:3D:33:44:FE:9D:EB:3A:0D:EF:42:46:79:C1:98:DD
            X509v3 Authority Key Identifier:
                keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/E608220401A611F1B4D1E4C1696F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b8c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:60:8e:e3:9b:fd:b7:ea:54:df:2b:76:2c:96:48:20:9a:ec:
         cd:1c:3e:5f:ab:bc:ce:da:37:97:6f:9b:1c:36:ad:95:c0:69:
         0d:3e:8c:3f:90:bd:7b:79:45:50:e1:32:c2:a1:51:1b:27:6a:
         70:22:96:ce:83:24:a1:f7:7f:7d:cd:6d:bc:0b:76:4f:09:fc:
         0d:83:78:59:07:f4:ea:fc:e7:4a:e4:82:c0:b8:69:74:7c:1e:
         8f:dc:66:4d:6f:cc:90:19:9f:a8:f4:89:59:9c:71:22:0d:c3:
         f4:1e:0e:27:57:64:00:da:6d:64:8e:e9:f9:1b:14:42:32:a1:
         6d:e1:b3:12:e4:ec:bf:e7:b5:0e:52:fb:e3:5f:80:c7:dc:8a:
         7a:85:a0:ee:62:00:54:8d:9d:07:a5:58:bb:a6:95:34:2d:9d:
         03:62:25:e3:64:9d:95:fa:fa:d1:00:eb:f0:b7:89:b2:4d:6e:
         e9:6e:75:40:71:44:4d:6a:8c:4d:ba:c8:41:3a:72:91:e5:e4:
         ca:ce:fc:0d:e5:e1:13:67:d3:e7:a7:d2:c1:a1:d2:e8:6f:fd:
         ff:7a:90:e9:9e:73:26:55:09:ac:da:d8:21:d2:2d:cc:84:3e:
         10:ce:bd:cb:6f:75:fd:c1:6d:d9:10:4b:f5:7b:8a:83:84:92:
         2a:44:f3:00
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I4NkQxMTAvBgNVBAUTKDI1NkI1RDE3OTBEMjRDNEQ2Qzk3MjA2NEU5MUM2QUYw
MEJENjhFMzIwHhcNMjYwMjA0MDg1MjU2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzgyOS1hMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7pHZiJN16TfXGx5ichL0hdchs/uKJhIsf/hzH5AxG4y9UH12IHMBxs53MILF
w6ZTsOracUFXXcWi5q+Akc2sUlDrcmvN2jenl/8i9P15FXPVX3fDYoh9mCiy/mC+
InJvvQeh63+KxeL36cyWqmgE+GKBPV9I9Jz78O4peNLw8+BNfcFPfrOlyU5ImkJW
m5lOA8OpEkySa37ZrtfvHoWJG7Y8IiUuLksGYwAXzAfK7QYzyNB/m+H3wV0VC/JF
PUt4XGENOkTLoi7tMcpkDRm0tCwldRGdeHNOfTULukFhIIYKjIQLgD2sqxZZ+9DI
c4P1ccWS4Pk08kwn/RYG/y3mvQIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFIwlO2GG
PTNE/p3rOg3vQkZ5wZjdMB8GA1UdIwQYMBaAFCVrXReQ0kxNbJcgZOkcavAL1o4y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjg2RC82RjA1ODIwRUU1
M0UxMUVFQTM4RjA4NzdDNEY5QUUwMi9KV3RkRjVEU1RFMXNseUJrNlJ4cThBdldq
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pXdGRGNURTVEUxc2x5Qms2UnhxOEF2V2pqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0I4NkQvNkYwNTgyMEVFNTNFMTFFRUEzOEYwODc3QzRGOUFFMDIvRTYwODIyMDQw
MUE2MTFGMUI0RDFFNEMxNjk2RjU2QkMucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAC4wTANBgkqhkiG9w0BAQsFAAOCAQEAxWCO45v9t+pU3yt2LJZI
IJrszRw+X6u8zto3l2+bHDatlcBpDT6MP5C9e3lFUOEywqFRGydqcCKWzoMkofd/
fc1tvAt2Twn8DYN4WQf06vznSuSCwLhpdHwej9xmTW/MkBmfqPSJWZxxIg3D9B4O
J1dkANptZI7p+RsUQjKhbeGzEuTsv+e1DlL741+Ax9yKeoWg7mIAVI2dB6VYu6aV
NC2dA2Il42Sdlfr60QDr8LeJsk1u6W51QHFETWqMTbrIQTpykeXkys78DeXhE2fT
56fSwaHS6G/9/3qQ6Z5zJlUJrNrYIdItzIQ+EM69y291/cFt2RBL9XuKg4SSKkTz
AA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:46 2026 by rpki-client