Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/8EEE648AE63811EB91D48033C4F9AE02.roa
File:                     8EEE648AE63811EB91D48033C4F9AE02.roa (raw, json)
Hash identifier:          TBlyYgM+DcvFNapT40yw9if/xNsl7LZqhEtq12uGiME=
Subject key identifier:   20:AF:76:73:1B:73:F4:54:86:C0:AE:DE:1F:66:69:77:94:42:57:A9
Certificate issuer:       /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
Certificate serial:       3657
Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/8EEE648AE63811EB91D48033C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:18:26 +0000
ROA not before:           Wed 30 Apr 2025 14:50:21 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     17974
IP address blocks:        36.91.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13911 (0x3657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6
        Validity
            Not Before: Apr 30 14:50:21 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a474e2-5742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:46:84:21:d1:7a:da:fd:8f:da:83:3c:ae:
                    c1:df:a4:8f:eb:7e:61:00:5a:52:97:f9:fb:44:20:
                    f8:55:e7:d9:69:b6:d3:b3:b9:13:8c:0e:c7:27:01:
                    1c:f4:db:d0:5d:06:6f:74:25:1b:0f:ab:ee:97:c1:
                    1e:2f:74:8f:3b:ef:42:3b:16:c6:78:3e:b9:5b:60:
                    6b:60:b7:42:47:5b:bc:ad:5e:38:4b:26:93:50:a3:
                    e7:2a:96:ec:50:40:d7:02:c5:16:c6:2b:05:4f:47:
                    cc:34:b3:3d:75:84:27:42:69:69:08:02:30:88:51:
                    0c:85:4f:f8:6b:4e:8d:6c:c3:13:2b:a0:9a:7e:bc:
                    77:3f:61:cc:27:8d:68:14:8b:ed:c3:ca:13:c9:aa:
                    cc:a5:f2:b6:fd:b2:35:b8:08:36:46:b1:d2:35:d0:
                    d3:4c:f9:93:e8:cf:99:34:f4:fb:8b:be:29:08:2e:
                    f1:5d:a3:cf:2d:2b:05:35:ac:43:74:02:9e:09:3b:
                    02:5e:85:5c:d4:e8:1c:f3:94:4c:26:0e:0b:b3:ab:
                    2b:b9:41:b8:18:39:17:bb:18:0c:4b:4a:b6:30:82:
                    50:61:90:3d:cf:7b:f6:2c:89:27:81:65:39:79:cd:
                    31:1a:e1:fd:32:a6:5c:bf:77:af:d3:03:bb:58:26:
                    58:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AF:76:73:1B:73:F4:54:86:C0:AE:DE:1F:66:69:77:94:42:57:A9
            X509v3 Authority Key Identifier:
                keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/8EEE648AE63811EB91D48033C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:b8:4c:c7:87:08:43:97:da:2a:96:ce:f2:b5:05:1d:3b:
         85:78:fb:75:a5:a4:02:58:40:ad:01:5b:da:91:88:86:14:75:
         6c:b0:dd:ef:f2:be:77:b8:58:dd:c4:b1:6c:a6:65:74:2f:0c:
         3c:a1:cc:2e:f3:78:68:01:cd:f5:68:b2:f7:6b:21:e2:3d:8e:
         77:a8:ae:ed:97:33:ce:3a:b2:99:61:70:1d:5e:ba:ee:46:91:
         62:6a:c8:df:d9:cf:42:a4:79:e2:ee:4c:d0:29:06:ba:b2:8d:
         3e:bf:70:5d:e9:ec:58:d2:83:b0:9c:e0:ae:5c:f0:4c:70:4b:
         a1:c1:7a:4d:c2:95:0e:6a:1f:5a:ad:2d:be:0c:93:74:90:51:
         d0:f8:78:06:1c:c9:f8:ca:1a:65:ef:7b:09:66:6e:42:07:52:
         79:48:d4:6d:b1:09:29:66:6c:06:cb:95:47:d6:8f:9a:88:1f:
         4a:d6:0a:6d:32:9a:39:0f:27:f9:7b:24:c1:f6:63:d1:ec:80:
         55:be:c6:99:27:b6:cd:88:a5:f4:c5:ab:fe:19:7c:01:0b:1d:
         78:7c:bb:c8:77:7e:57:62:96:cb:7d:99:f3:d4:4f:46:fa:46:
         2a:1b:6b:8d:bd:5e:d2:dc:91:01:78:77:e4:e4:83:bc:09:21:
         81:47:b6:d0
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICNlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE
Q0E0RkM3RDYwHhcNMjUwNDMwMTQ1MDIxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzRlMi01NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/xGhCHRetr9j9qDPK7B36SP635hAFpSl/n7RCD4VefZabbTs7kTjA7HJwEc
9NvQXQZvdCUbD6vul8EeL3SPO+9COxbGeD65W2BrYLdCR1u8rV44SyaTUKPnKpbs
UEDXAsUWxisFT0fMNLM9dYQnQmlpCAIwiFEMhU/4a06NbMMTK6Cafrx3P2HMJ41o
FIvtw8oTyarMpfK2/bI1uAg2RrHSNdDTTPmT6M+ZNPT7i74pCC7xXaPPLSsFNaxD
dAKeCTsCXoVc1Ogc85RMJg4Ls6sruUG4GDkXuxgMS0q2MIJQYZA9z3v2LIkngWU5
ec0xGuH9MqZcv3ev0wO7WCZYMwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFCCvdnMb
c/RUhsCu3h9maXeUQlepMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE
ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4
OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkxMUMvQkJDNTRCQTQxRDgzMTFFMjhFN0UyREQ5MDhCMDJDRDIvOEVFRTY0OEFF
NjM4MTFFQjkxRDQ4MDMzQzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAJFswDQYJKoZIhvcNAQELBQADggEBAGKhuEzHhwhDl9oqls7ytQUd
O4V4+3WlpAJYQK0BW9qRiIYUdWyw3e/yvne4WN3EsWymZXQvDDyhzC7zeGgBzfVo
svdrIeI9jneoru2XM846splhcB1euu5GkWJqyN/Zz0KkeeLuTNApBrqyjT6/cF3p
7FjSg7Cc4K5c8ExwS6HBek3ClQ5qH1qtLb4Mk3SQUdD4eAYcyfjKGmXvewlmbkIH
UnlI1G2xCSlmbAbLlUfWj5qIH0rWCm0ymjkPJ/l7JMH2Y9HsgFW+xpknts2IpfTF
q/4ZfAELHXh8u8h3fldilst9mfPUT0b6Rioba429XtLckQF4d+Tkg7wJIYFHttA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:29 2026 by rpki-client