Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa
File:                     B6369EA2521711EE899DAC80C4F9AE02.roa (raw, json)
Hash identifier:          pBkyHWFkM6Bp1DuSXF/Q9xSoibHsw8odP6PRWn8/I0I=
Subject key identifier:   FE:F5:08:AB:17:3D:55:8E:29:3F:B6:0F:7C:34:6F:DA:5B:D0:90:71
Certificate issuer:       /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
Certificate serial:       024A
Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa
Signing time:             Sat 19 Sep 2026 00:49:35 +0000
ROA not before:           Sat 19 Sep 2026 00:49:35 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55769
IP address blocks:        167.179.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl
                          rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA8C, serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02
        Validity
            Not Before: Sep 19 00:49:35 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aaddc1f-e56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:b1:95:f9:5a:53:2d:fc:9e:00:72:fb:e6:
                    ef:3f:5d:48:8f:43:a3:cc:a6:93:f3:ab:97:bd:ba:
                    86:1c:36:ba:97:12:fe:5a:11:0b:8f:7f:20:a4:35:
                    a2:31:b3:53:40:d3:ea:f0:65:fb:80:ff:48:8d:98:
                    b3:a6:27:4b:f6:0d:81:cc:d9:24:da:60:e1:7a:00:
                    c7:84:35:9f:7f:1a:e6:ed:a9:e7:31:71:0e:32:af:
                    d5:ad:cb:e0:e0:11:bf:92:38:03:b6:9d:8e:88:6a:
                    15:0e:13:0d:e3:43:86:b0:ae:0c:0d:6a:b4:b9:b2:
                    67:9e:51:1e:ef:36:75:45:70:1e:8e:ae:14:cc:79:
                    08:0f:7b:ba:b5:6d:db:d3:86:88:94:71:16:e2:96:
                    31:fd:52:70:23:6a:06:42:72:d6:76:3f:b1:2e:df:
                    c1:89:ec:08:6c:10:d1:ac:03:f9:d6:2a:09:21:ac:
                    de:09:db:e9:50:9d:31:71:e8:29:16:ff:50:17:35:
                    49:12:16:43:74:05:f4:c4:3a:05:fd:34:4a:9a:de:
                    d1:09:4f:8c:21:5d:d5:87:58:6d:a0:40:d2:2e:aa:
                    e7:6c:58:5e:59:20:c1:34:09:1a:fd:cd:dc:ac:8a:
                    8c:89:e2:3e:dc:86:cf:36:af:b8:a2:dc:6a:ad:26:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:08:AB:17:3D:55:8E:29:3F:B6:0F:7C:34:6F:DA:5B:D0:90:71
            X509v3 Authority Key Identifier:
                keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/B6369EA2521711EE899DAC80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:df:36:1c:9c:5e:6e:90:74:69:fe:57:7e:46:66:2f:19:ac:
         6e:be:ca:1b:dc:39:b6:d1:db:f0:25:fe:8e:f9:da:ed:dc:50:
         67:c3:3f:e2:6d:7e:4c:ee:cb:04:da:d8:c9:83:c5:58:ae:47:
         5c:03:97:2e:c6:e5:03:5a:e8:1a:4b:8f:b8:1e:04:c6:13:0a:
         42:1b:ca:21:08:7a:23:ad:0c:5f:4b:25:87:cc:a6:34:ad:b4:
         4d:f1:31:ca:d6:cb:ec:bc:ab:c6:27:85:94:9f:5a:be:75:56:
         96:82:f8:c9:a7:7b:27:8e:c3:0b:ca:4b:88:f6:99:94:0c:a1:
         3c:53:4d:31:04:af:16:6f:3d:ea:40:4b:e2:61:7c:b1:da:3f:
         26:09:69:5c:b5:0d:bd:58:dd:42:06:5a:5b:62:41:a9:f1:7a:
         16:d4:3f:f5:95:9d:40:d9:0c:c2:9f:2b:67:d1:ce:5b:16:6e:
         48:bc:37:a9:19:56:c3:12:bf:41:91:6b:e6:78:ea:15:91:7f:
         c6:8d:5c:93:89:f4:f1:17:07:ca:72:0e:63:e2:91:b8:1c:64:
         cd:45:c9:2d:4a:05:dd:6a:75:3d:52:99:72:f0:23:14:bb:ef:
         aa:00:0a:3f:c1:89:77:71:bb:80:3d:6e:1f:48:75:0d:8b:50:
         15:51:59:2d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw
RjdDQzRGMDIwHhcNMjYwOTE5MDA0OTM1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFkZGMxZi1lNTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr++xlflaUy38ngBy++bvP11Ij0OjzKaT86uXvbqGHDa6lxL+WhELj38gpDWi
MbNTQNPq8GX7gP9IjZizpidL9g2BzNkk2mDhegDHhDWffxrm7annMXEOMq/Vrcvg
4BG/kjgDtp2OiGoVDhMN40OGsK4MDWq0ubJnnlEe7zZ1RXAejq4UzHkID3u6tW3b
04aIlHEW4pYx/VJwI2oGQnLWdj+xLt/BiewIbBDRrAP51ioJIazeCdvpUJ0xcegp
Fv9QFzVJEhZDdAX0xDoF/TRKmt7RCU+MIV3Vh1htoEDSLqrnbFheWSDBNAka/c3c
rIqMieI+3IbPNq+4otxqrSahMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP71CKsX
PVWOKT+2D3w0b9pb0JBxMB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC
OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MURBOEMvNTQ2RUYzQkE0Qjk5MTFFRUJCMzYwQjU1QzRGOUFFMDIvQjYzNjlFQTI1
MjE3MTFFRTg5OURBQzgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCp7PAMA0GCSqGSIb3DQEBCwUAA4IBAQBT3zYcnF5ukHRp/ld+RmYv
Gaxuvsob3Dm20dvwJf6O+drt3FBnwz/ibX5M7ssE2tjJg8VYrkdcA5cuxuUDWuga
S4+4HgTGEwpCG8ohCHojrQxfSyWHzKY0rbRN8THK1svsvKvGJ4WUn1q+dVaWgvjJ
p3snjsMLykuI9pmUDKE8U00xBK8Wbz3qQEviYXyx2j8mCWlctQ29WN1CBlpbYkGp
8XoW1D/1lZ1A2QzCnytn0c5bFm5IvDepGVbDEr9BkWvmeOoVkX/GjVyTifTxFwfK
cg5j4pG4HGTNRcktSgXdanU9Uply8CMUu++qAAo/wYl3cbuAPW4fSHUNi1AVUVkt
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:02:16 2026 by rpki-client