Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa
File:                     5A0D98C829F211F18AB4C1A0A2833773.roa (raw, json)
Hash identifier:          oLYEfALKF8GBDPFwMg7ZHd8g3AeCNND0wejQq9C4azs=
Subject key identifier:   D7:20:42:7D:F4:F2:F9:C5:5B:38:2A:2C:E8:3F:AA:50:67:68:E3:E2
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       0103
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa
Signing time:             Tue 28 Apr 2026 11:50:09 +0000
ROA not before:           Tue 28 Apr 2026 11:50:09 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     59217
IP address blocks:        63.222.127.0/24 maxlen: 24
                          209.8.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Apr 28 11:50:09 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69f09ef1-3845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:95:f6:8a:28:bc:38:2f:a6:5b:f0:50:02:
                    f5:b0:57:58:7e:0e:a6:08:f5:9a:40:d2:aa:7c:89:
                    b5:25:72:85:59:32:46:43:3d:23:29:cc:51:3a:4d:
                    9c:82:50:9c:c1:68:2c:ec:ff:15:0d:25:07:0c:08:
                    c2:05:d4:bb:6e:40:d2:9f:7a:02:7c:42:d4:c9:ec:
                    be:cf:f5:fb:fd:8d:f2:73:1b:a9:c6:de:0a:72:5e:
                    60:0b:0c:04:75:f9:1f:56:24:2a:ce:d2:2e:c5:73:
                    00:7a:33:cf:40:96:6b:10:82:01:31:15:24:ca:fa:
                    27:8d:45:96:d9:3d:f5:c3:87:0c:60:25:18:3d:0d:
                    0b:9c:87:bd:a3:a1:e1:10:9f:05:cd:6a:30:50:a9:
                    08:b7:3c:10:db:34:90:7d:28:ad:f3:3f:bd:b0:3b:
                    93:fb:61:2a:29:39:23:e7:94:2a:4f:14:2d:58:4d:
                    fb:99:36:0f:ff:ec:8f:ec:7e:83:bf:dd:17:12:88:
                    c0:4f:ad:6d:25:38:84:9c:d0:ad:dd:06:30:26:7b:
                    03:cd:b4:1f:9d:84:93:16:84:0e:53:0d:e9:d6:eb:
                    80:b5:e9:16:59:02:c9:64:d7:c4:34:c2:2c:74:36:
                    7e:af:e7:a6:84:3b:c9:bc:83:a1:91:b1:b5:8b:2b:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:20:42:7D:F4:F2:F9:C5:5B:38:2A:2C:E8:3F:AA:50:67:68:E3:E2
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/5A0D98C829F211F18AB4C1A0A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.222.127.0/24
                  209.8.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:7f:00:73:13:6d:2a:1f:e9:71:e2:b6:41:21:20:06:dc:
         2a:5a:6b:36:c7:3e:46:dd:ea:45:11:64:e4:2c:04:b2:86:d8:
         c9:5f:04:2b:15:ad:78:6f:b9:19:59:e7:99:46:43:6c:b8:b9:
         1f:f3:c5:d8:00:99:17:43:49:ab:fd:a7:20:fa:96:1a:48:87:
         10:19:89:0f:c7:54:a7:79:ca:a3:aa:93:89:58:39:df:98:9a:
         2e:b3:1f:49:9c:52:5e:41:35:70:d6:82:77:94:57:37:e7:ac:
         2b:a3:45:a6:47:a0:59:1b:b7:18:02:04:e9:96:d7:5d:e2:8e:
         8e:17:37:3d:64:3f:a3:5f:b1:92:b6:d9:31:52:cb:f7:59:46:
         7a:f8:07:bd:60:fb:17:e1:68:d8:04:38:91:89:64:ce:1d:0c:
         81:f8:a6:61:77:5f:db:ea:f2:81:9f:3c:5b:5e:14:79:5d:61:
         96:ff:69:8c:6f:64:d9:3e:f8:13:b2:5c:57:5c:11:29:3c:37:
         31:12:54:72:7a:b9:55:1b:cd:21:62:e3:e7:26:71:bb:18:53:
         e6:36:0f:a9:93:d3:26:95:82:f2:0d:e2:25:18:ce:36:7f:4c:
         10:77:09:0d:ad:0f:24:96:51:b2:38:84:7a:04:7f:34:a6:f9:
         7f:91:87:6c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNDI4MTE1MDA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYwOWVmMS0zODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZOV9ooovDgvplvwUAL1sFdYfg6mCPWaQNKqfIm1JXKFWTJGQz0jKcxROk2c
glCcwWgs7P8VDSUHDAjCBdS7bkDSn3oCfELUyey+z/X7/Y3ycxupxt4Kcl5gCwwE
dfkfViQqztIuxXMAejPPQJZrEIIBMRUkyvonjUWW2T31w4cMYCUYPQ0LnIe9o6Hh
EJ8FzWowUKkItzwQ2zSQfSit8z+9sDuT+2EqKTkj55QqTxQtWE37mTYP/+yP7H6D
v90XEojAT61tJTiEnNCt3QYwJnsDzbQfnYSTFoQOUw3p1uuAtekWWQLJZNfENMIs
dDZ+r+emhDvJvIOhkbG1iysuIwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNcgQn30
8vnFWzgqLOg/qlBnaOPiMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvNUEwRDk4Qzgy
OUYyMTFGMThBQjRDMUEwQTI4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAP95/AwQA0Qh2MA0GCSqGSIb3DQEBCwUAA4IBAQBci38AcxNtKh/p
ceK2QSEgBtwqWms2xz5G3epFEWTkLASyhtjJXwQrFa14b7kZWeeZRkNsuLkf88XY
AJkXQ0mr/acg+pYaSIcQGYkPx1SnecqjqpOJWDnfmJousx9JnFJeQTVw1oJ3lFc3
56wro0WmR6BZG7cYAgTpltdd4o6OFzc9ZD+jX7GSttkxUsv3WUZ6+Ae9YPsX4WjY
BDiRiWTOHQyB+KZhd1/b6vKBnzxbXhR5XWGW/2mMb2TZPvgTslxXXBEpPDcxElRy
erlVG80hYuPnJnG7GFPmNg+pk9MmlYLyDeIlGM42f0wQdwkNrQ8kllGyOIR6BH80
pvl/kYds
-----END CERTIFICATE-----
Generated at Wed May 13 07:20:17 2026 by rpki-client