Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/9D1F08CEDCCE11F1B5E1217D1066CEF9.roa
File:                     9D1F08CEDCCE11F1B5E1217D1066CEF9.roa (raw, json)
Hash identifier:          RfnIQvOkAsg7Z8CkgwWwwnHXEZvYMg5j7e9h59sNa1Q=
Subject key identifier:   A9:ED:F7:DB:85:FE:EB:F9:44:C9:71:0F:8B:5C:F7:34:55:3B:F1:FA
Certificate issuer:       /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
Certificate serial:       016C
Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/9D1F08CEDCCE11F1B5E1217D1066CEF9.roa
Signing time:             Tue 10 Nov 2026 06:18:58 +0000
ROA not before:           Tue 10 Nov 2026 06:18:58 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     32595
IP address blocks:        2001:df2:45c0::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl
                          rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 05:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B
        Validity
            Not Before: Nov 10 06:18:58 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6af2b752-d4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:5c:c7:8e:00:c0:41:e0:c4:fe:9e:5b:b2:
                    2d:3c:b2:b5:0d:9a:c3:9e:61:7c:ab:4d:91:dd:3d:
                    a0:ea:f5:61:4b:1d:0d:6d:2f:46:0d:8e:5d:e2:ac:
                    16:26:e0:70:74:7a:b6:16:a7:fa:a7:cd:95:28:7a:
                    24:63:27:b2:af:cc:44:d6:e4:4c:c9:4a:3d:db:b7:
                    2e:5d:68:9d:53:cc:18:16:e2:58:63:82:b9:7d:09:
                    b6:85:fc:cb:91:de:38:f3:aa:eb:41:88:0d:ba:c6:
                    71:2a:06:88:98:09:3b:f5:3f:20:b2:15:79:d5:27:
                    5c:58:0c:f8:56:fa:f4:f9:15:4d:29:71:98:6a:42:
                    45:3d:02:5a:c6:55:4b:97:dd:e9:76:3d:0b:46:10:
                    7d:ee:bd:33:c2:5a:d3:75:6a:f1:5a:cd:1a:b5:18:
                    12:14:52:5a:64:3f:a9:95:75:a2:67:24:5a:d2:b4:
                    08:5e:b6:b9:1c:16:58:7c:7c:eb:be:e5:ce:c2:55:
                    32:b6:81:38:43:43:0b:67:4b:3b:6a:2e:6f:f1:c9:
                    e8:28:c7:47:b8:16:13:c6:8a:4f:e7:82:8f:09:72:
                    46:89:5d:cc:39:95:d5:43:1a:fc:6e:05:c5:81:fd:
                    7c:33:04:4e:ed:6c:36:1c:aa:63:c8:e8:28:bd:13:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:ED:F7:DB:85:FE:EB:F9:44:C9:71:0F:8B:5C:F7:34:55:3B:F1:FA
            X509v3 Authority Key Identifier:
                keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/9D1F08CEDCCE11F1B5E1217D1066CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:45c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         5b:35:62:71:34:6b:05:0f:20:35:3f:ab:77:be:a8:27:74:76:
         c4:32:33:61:be:90:19:e2:b6:44:17:c1:8c:18:66:b2:8b:bc:
         d8:2c:e6:20:4b:08:e6:f4:1e:09:eb:fe:68:e6:80:89:45:d6:
         17:06:de:9b:ab:74:7e:07:fd:72:35:8e:3c:43:bd:29:50:41:
         aa:2b:77:c2:27:e8:85:d8:2e:d1:5c:a4:bb:09:d8:6b:a8:63:
         7d:62:91:c7:89:3a:ba:56:bd:48:98:15:90:6b:e1:75:01:c0:
         47:ee:1e:d6:e7:26:17:08:ac:0f:94:82:5a:cc:31:11:84:e6:
         e0:04:e8:86:e3:bb:9f:d5:bc:5f:01:5f:25:f5:3d:2b:83:ee:
         6c:cd:d7:ad:b5:6c:98:9c:bb:2d:9a:53:5f:bd:91:17:a2:9a:
         6b:5d:08:fd:cf:04:65:14:4a:55:2d:29:fe:fc:2f:82:47:4d:
         9c:24:20:87:a9:41:f8:06:2b:d7:d5:b9:5a:14:68:16:d2:6c:
         93:73:70:a7:e3:d7:ff:e0:a1:0e:c0:a3:c2:c3:63:a9:bf:c2:
         02:0e:e0:1c:ba:2f:82:1f:f3:72:07:dc:75:23:93:4a:01:a5:
         74:b4:c9:4a:5c:ee:86:5f:bd:0e:fa:66:b6:c7:24:52:f2:b1:
         ce:24:71:70
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThERjUxMTAvBgNVBAUTKEM2Rjc1OEVDRERDNEM5QjBGNzJGMDY1QzM1QUQ1NDY5
NzQzMjcxMUIwHhcNMjYxMTEwMDYxODU4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWYyYjc1Mi1kNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbFcx44AwEHgxP6eW7ItPLK1DZrDnmF8q02R3T2g6vVhSx0NbS9GDY5d4qwW
JuBwdHq2Fqf6p82VKHokYyeyr8xE1uRMyUo927cuXWidU8wYFuJYY4K5fQm2hfzL
kd4486rrQYgNusZxKgaImAk79T8gshV51SdcWAz4Vvr0+RVNKXGYakJFPQJaxlVL
l93pdj0LRhB97r0zwlrTdWrxWs0atRgSFFJaZD+plXWiZyRa0rQIXra5HBZYfHzr
vuXOwlUytoE4Q0MLZ0s7ai5v8cnoKMdHuBYTxopP54KPCXJGiV3MOZXVQxr8bgXF
gf18MwRO7Ww2HKpjyOgovRO0jQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKnt99uF
/uv5RMlxD4tc9zRVO/H6MB8GA1UdIwQYMBaAFMb3WOzdxMmw9y8GXDWtVGl0MnEb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOERGNS8zMUUwRjE2QUY5
NjAxMUVGOUQ2NzlDN0FDNEY5QUUwMi94dmRZN04zRXliRDNMd1pjTmExVWFYUXlj
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RThERjUvMzFFMEYxNkFGOTYwMTFFRjlENjc5QzdBQzRGOUFFMDIvOUQxRjA4Q0VE
Q0NFMTFGMUI1RTEyMTdEMTA2NkNFRjkucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcBIAEN8kXAMA0GCSqGSIb3DQEBCwUAA4IBAQBbNWJxNGsFDyA1P6t3
vqgndHbEMjNhvpAZ4rZEF8GMGGayi7zYLOYgSwjm9B4J6/5o5oCJRdYXBt6bq3R+
B/1yNY48Q70pUEGqK3fCJ+iF2C7RXKS7CdhrqGN9YpHHiTq6Vr1ImBWQa+F1AcBH
7h7W5yYXCKwPlIJazDERhObgBOiG47uf1bxfAV8l9T0rg+5szdettWyYnLstmlNf
vZEXopprXQj9zwRlFEpVLSn+/C+CR02cJCCHqUH4BivX1blaFGgW0myTc3Cn49f/
4KEOwKPCw2Opv8ICDuAcui+CH/NyB9x1I5NKAaV0tMlKXO6GX70O+ma2xyRS8rHO
JHFw
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:49 2026 by rpki-client