Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/94BE094C7D0B11F0BC79D46DC4F9AE02.roa
File:                     94BE094C7D0B11F0BC79D46DC4F9AE02.roa (raw, json)
Hash identifier:          LwhI9696UYBx9dSNsNoQOB3sU5UiuZPQHMyAKZeKCKk=
Subject key identifier:   C0:01:29:1A:D8:00:86:5F:C2:A3:5E:4A:99:77:C3:48:27:30:A2:74
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       02FA
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/94BE094C7D0B11F0BC79D46DC4F9AE02.roa
Signing time:             Thu 05 Nov 2026 03:49:20 +0000
ROA not before:           Thu 05 Nov 2026 03:49:20 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     150805
IP address blocks:        2402:be0:fefc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 02:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Nov  5 03:49:20 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aebfcc0-a6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:29:ce:3e:21:64:4a:36:8b:e9:25:cc:64:
                    62:98:74:ea:c6:e7:f5:56:45:3d:c6:1d:39:2c:23:
                    12:48:db:dc:29:63:1c:c1:c6:fa:30:f4:f3:78:8b:
                    e4:48:07:4a:62:42:e1:60:13:cf:9d:4b:0f:1e:14:
                    23:35:5e:27:a9:c3:69:b2:10:87:a5:fb:6e:a7:37:
                    37:f1:40:8b:01:6c:53:f7:ad:82:6c:a2:f9:ad:49:
                    e0:05:54:ac:05:08:e7:f3:0c:bb:4d:cf:b6:93:11:
                    fa:83:0f:de:09:61:08:f3:03:16:0d:dd:18:fa:18:
                    ac:ab:9c:1c:43:f7:00:88:50:9a:a0:ec:fa:88:8c:
                    d7:63:a4:c5:b9:20:c4:e8:ee:f3:2e:6f:9a:84:70:
                    43:74:4d:63:6d:25:57:06:66:ea:34:4b:4c:6a:b3:
                    a2:f1:bc:aa:66:b6:33:90:47:33:1b:e7:be:62:00:
                    72:85:c1:64:a9:1e:62:d6:69:6d:b8:27:12:bf:94:
                    85:f3:39:f9:d6:30:55:20:9f:45:44:c3:8c:2a:45:
                    30:c5:46:c2:6f:19:27:ef:88:b9:86:3b:93:2c:60:
                    10:9b:19:10:e3:14:71:b6:f6:69:6a:1f:91:8b:8d:
                    4b:e4:d2:85:d6:5d:70:e7:74:62:ef:a1:8e:7b:43:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:01:29:1A:D8:00:86:5F:C2:A3:5E:4A:99:77:C3:48:27:30:A2:74
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/94BE094C7D0B11F0BC79D46DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:fefc::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:e6:43:64:1f:47:b4:30:5d:f9:57:99:b6:4e:e4:dd:89:2b:
         8e:b6:de:27:ea:8e:2b:8b:f0:33:fc:5c:26:97:5d:5e:4b:d7:
         e3:2d:c9:d0:80:ff:ca:f6:ed:e4:93:a0:d0:4f:0c:95:17:12:
         37:56:11:f0:54:69:82:d0:5f:44:34:5e:c0:5d:a0:db:17:59:
         e5:6c:ec:22:f0:ca:58:fd:04:c8:c9:4c:2d:4f:f1:f6:b4:0e:
         8d:77:c8:f5:9f:52:78:92:81:97:fa:2c:bd:b1:6a:15:f4:d3:
         7a:57:b6:d1:0e:50:af:ac:6d:14:87:34:76:88:35:3c:2c:6b:
         ef:91:ca:04:ed:c6:60:d7:ec:a5:b7:2d:d2:5b:df:b1:b1:34:
         c1:33:a5:6a:2c:f7:3b:27:01:b4:63:8c:b9:07:51:fd:54:f5:
         d1:60:67:7f:ea:3a:09:3f:6b:58:a9:a4:67:79:63:a6:3a:f4:
         f6:98:3e:68:4a:68:07:c8:c0:cd:61:40:6a:bc:35:c4:5b:45:
         5b:da:ab:d0:71:40:9e:34:23:b7:8e:e7:94:27:c0:19:29:9b:
         bb:7d:f9:26:9e:80:24:b8:71:56:38:03:2d:39:02:0a:ef:69:
         e6:78:33:ed:f7:d1:63:72:77:8f:8e:21:7f:32:a4:6d:1b:d5:
         82:d1:eb:b6
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjYxMTA1MDM0OTIwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWViZmNjMC1hNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnGQpzj4hZEo2i+klzGRimHTqxuf1VkU9xh05LCMSSNvcKWMcwcb6MPTzeIvk
SAdKYkLhYBPPnUsPHhQjNV4nqcNpshCHpftupzc38UCLAWxT962CbKL5rUngBVSs
BQjn8wy7Tc+2kxH6gw/eCWEI8wMWDd0Y+hisq5wcQ/cAiFCaoOz6iIzXY6TFuSDE
6O7zLm+ahHBDdE1jbSVXBmbqNEtMarOi8byqZrYzkEczG+e+YgByhcFkqR5i1mlt
uCcSv5SF8zn51jBVIJ9FRMOMKkUwxUbCbxkn74i5hjuTLGAQmxkQ4xRxtvZpah+R
i41L5NKF1l1w53Ri76GOe0P6xwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFMABKRrY
AIZfwqNeSpl3w0gnMKJ0MB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE3QUEvNDFGMEY5N0U1MkI4MTFFRThFNDMwMDBEQzRGOUFFMDIvOTRCRTA5NEM3
RDBCMTFGMEJDNzlENDZEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAIL4P78MA0GCSqGSIb3DQEBCwUAA4IBAQCG5kNkH0e0MF35V5m2
TuTdiSuOtt4n6o4ri/Az/Fwml11eS9fjLcnQgP/K9u3kk6DQTwyVFxI3VhHwVGmC
0F9ENF7AXaDbF1nlbOwi8MpY/QTIyUwtT/H2tA6Nd8j1n1J4koGX+iy9sWoV9NN6
V7bRDlCvrG0UhzR2iDU8LGvvkcoE7cZg1+ylty3SW9+xsTTBM6VqLPc7JwG0Y4y5
B1H9VPXRYGd/6joJP2tYqaRneWOmOvT2mD5oSmgHyMDNYUBqvDXEW0Vb2qvQcUCe
NCO3jueUJ8AZKZu7ffkmnoAkuHFWOAMtOQIK72nmeDPt99FjcnePjiF/MqRtG9WC
0eu2
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:04:23 2026 by rpki-client