Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/32A3B5E229E811F18CA8F3909F833773.roa
File:                     32A3B5E229E811F18CA8F3909F833773.roa (raw, json)
Hash identifier:          oZR2FpzGAe6Sy8Hoz7BhQ2SDTppygN2h+ztgxLfV0mE=
Subject key identifier:   4C:08:1D:F5:83:C7:07:04:F1:F8:34:7D:13:76:ED:7F:E2:90:10:77
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       31
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/32A3B5E229E811F18CA8F3909F833773.roa
Signing time:             Fri 27 Mar 2026 14:21:08 +0000
ROA not before:           Fri 27 Mar 2026 14:21:08 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     6621
IP address blocks:        205.177.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 17:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Mar 27 14:21:08 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69c69254-b450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:b6:d1:b5:e7:e1:ea:ed:39:60:2c:30:80:
                    7a:99:4e:88:82:2e:35:34:47:b5:41:bc:24:e9:27:
                    e1:77:a9:a4:4e:1d:63:5b:2b:01:66:a3:4a:97:c9:
                    91:b7:61:56:e1:bb:5b:5b:5b:24:90:2d:b0:e0:7d:
                    ca:d5:6f:22:7f:aa:46:cb:fa:ea:33:14:ef:eb:df:
                    46:5b:bd:09:14:ac:d0:61:38:32:6e:3f:2c:63:52:
                    f9:a8:93:48:ac:4b:11:2b:7f:13:6e:26:cb:91:6e:
                    2f:c5:b7:01:41:4f:67:57:2a:3a:0d:b8:8c:52:37:
                    2b:ee:b6:71:48:43:17:2e:66:ae:94:23:fd:2d:fc:
                    34:f6:ca:8d:1a:7e:6f:16:b8:9b:3b:c7:af:de:de:
                    44:47:07:4f:10:bb:8a:37:1f:0d:1d:11:4a:e9:fe:
                    55:35:7c:87:ea:d4:b4:24:1e:c5:df:ed:e1:1b:34:
                    4c:f6:6f:61:e0:5f:17:fc:45:a1:0e:2c:dd:fc:2a:
                    d2:0e:a1:43:84:f7:43:df:5d:2f:f3:54:65:57:16:
                    a6:e5:28:ac:f3:66:81:17:a1:29:4b:a7:e0:9c:c9:
                    70:61:8c:b8:85:ac:21:3a:30:f7:aa:8f:00:ac:50:
                    ae:4a:bc:8d:80:79:8c:10:ae:5f:f5:90:20:e8:10:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:08:1D:F5:83:C7:07:04:F1:F8:34:7D:13:76:ED:7F:E2:90:10:77
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/32A3B5E229E811F18CA8F3909F833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.177.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:d4:1d:8f:31:8e:9a:a9:03:05:d7:e9:8f:64:58:e7:d4:04:
         50:43:3b:a3:ee:8a:f3:df:70:14:a7:e4:e2:88:44:2e:a2:00:
         74:81:1b:ad:25:31:55:f6:04:56:7a:ef:5b:1f:52:e3:c3:4e:
         c8:3f:ce:8d:04:97:76:9b:cf:8d:0d:02:e5:56:f6:b6:4a:23:
         bd:30:62:e4:55:98:ed:67:03:f7:ea:8c:d4:bc:55:fa:fb:10:
         ef:fd:ac:ae:e0:00:5a:7c:34:e1:6a:30:2e:54:bb:ed:49:fb:
         aa:8e:3c:06:cc:55:ea:fc:78:9a:33:b4:07:51:a6:e0:20:37:
         05:42:ad:e1:1d:e2:ab:64:6c:58:84:77:62:0a:e9:b8:dd:66:
         91:1d:d1:c6:51:fc:68:55:98:f3:1e:9b:b8:dd:ef:5d:0e:84:
         72:a2:8d:17:2b:74:f7:bb:6f:6d:a6:93:60:f5:a6:cf:1c:8a:
         df:c0:3c:6a:f7:16:95:17:59:66:9f:44:b8:24:fd:9f:f1:73:
         30:6b:91:36:a0:79:b0:91:3c:41:ba:9a:dc:cb:ec:b5:11:7b:
         4e:02:f8:8e:7b:5b:27:42:ae:0a:7a:b0:50:34:c2:fc:23:7f:
         93:96:01:5e:bc:3a:b2:6f:20:ad:1c:90:d3:5b:81:d5:b8:a0:
         48:2e:2b:45
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky
OTFFNjgzQTAeFw0yNjAzMjcxNDIxMDhaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YzY5MjU0LWI0NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDMLbRtefh6u05YCwwgHqZToiCLjU0R7VBvCTpJ+F3qaROHWNbKwFmo0qXyZG3
YVbhu1tbWySQLbDgfcrVbyJ/qkbL+uozFO/r30ZbvQkUrNBhODJuPyxjUvmok0is
SxErfxNuJsuRbi/FtwFBT2dXKjoNuIxSNyvutnFIQxcuZq6UI/0t/DT2yo0afm8W
uJs7x6/e3kRHB08Qu4o3Hw0dEUrp/lU1fIfq1LQkHsXf7eEbNEz2b2HgXxf8RaEO
LN38KtIOoUOE90PfXS/zVGVXFqblKKzzZoEXoSlLp+CcyXBhjLiFrCE6MPeqjwCs
UK5KvI2AeYwQrl/1kCDoECd7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUTAgd9YPH
BwTx+DR9E3btf+KQEHcwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0
NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS8zMkEzQjVFMjI5
RTgxMUYxOENBOEYzOTA5RjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADNsT4wDQYJKoZIhvcNAQELBQADggEBAH/UHY8xjpqpAwXX6Y9kWOfU
BFBDO6PuivPfcBSn5OKIRC6iAHSBG60lMVX2BFZ671sfUuPDTsg/zo0El3abz40N
AuVW9rZKI70wYuRVmO1nA/fqjNS8Vfr7EO/9rK7gAFp8NOFqMC5Uu+1J+6qOPAbM
Ver8eJoztAdRpuAgNwVCreEd4qtkbFiEd2IK6bjdZpEd0cZR/GhVmPMem7jd710O
hHKijRcrdPe7b22mk2D1ps8cit/APGr3FpUXWWafRLgk/Z/xczBrkTagebCRPEG6
mtzL7LURe04C+I57WydCrgp6sFA0wvwjf5OWAV68OrJvIK0ckNNbgdW4oEguK0U=
-----END CERTIFICATE-----
Generated at Sat Mar 28 18:55:04 2026 by rpki-client