Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/ECE2E908B34C11F1902F4B313511F970.roa
File:                     ECE2E908B34C11F1902F4B313511F970.roa (raw, json)
Hash identifier:          VKdOcR7nd8Uy4p/yEaUCGqVIBZDXHU6mvcAdNqe4W5E=
Subject key identifier:   B1:80:4E:0B:B8:51:A4:16:77:B5:A9:1A:24:7A:97:4D:22:23:DF:C2
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       0231
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/ECE2E908B34C11F1902F4B313511F970.roa
Signing time:             Fri 18 Sep 2026 10:37:20 +0000
ROA not before:           Fri 18 Sep 2026 10:37:20 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152125
IP address blocks:        36.50.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Sep 18 10:37:20 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aad1460-ed52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:ac:3d:c1:e8:49:c8:0d:17:c9:a6:ac:3b:
                    52:13:3e:9b:f6:95:42:d1:c8:43:96:b1:3e:75:fc:
                    72:e4:9e:45:c2:d8:e2:eb:e8:4a:b4:26:00:66:b5:
                    72:f2:51:cc:8c:c2:da:ec:7e:07:c8:15:21:7e:fd:
                    79:d5:1b:86:ba:eb:30:05:94:68:c5:6e:3e:e4:12:
                    f6:fb:16:f4:24:f9:ac:14:d2:9a:4d:fe:80:44:d6:
                    57:36:21:2a:03:60:49:a7:4d:f2:86:c6:a2:6f:ff:
                    4a:1a:65:cd:85:f0:5b:a9:57:32:e9:7d:25:21:a7:
                    6a:94:a2:6e:13:29:f1:fe:7f:08:17:46:d9:57:ea:
                    e4:2e:e8:34:66:43:01:c8:44:a9:9e:0d:1c:31:5f:
                    d4:d0:06:8f:5b:f6:c0:aa:19:72:c1:1d:ce:ab:20:
                    92:d9:66:52:6d:c3:52:1c:00:72:5e:41:9e:3d:82:
                    fe:a1:66:92:da:93:7f:37:6c:3e:01:47:f8:f1:af:
                    6a:1c:8f:f0:00:7c:4a:fe:95:77:c0:57:08:9f:71:
                    70:26:5d:31:af:8d:b4:e4:28:5d:81:b4:ca:9b:17:
                    a4:bb:70:f9:ac:a5:f5:ef:f5:17:38:da:80:a9:b5:
                    27:f5:4e:53:8b:e8:ee:67:29:2d:cd:7c:1b:f4:1b:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:80:4E:0B:B8:51:A4:16:77:B5:A9:1A:24:7A:97:4D:22:23:DF:C2
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/ECE2E908B34C11F1902F4B313511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:6b:bc:fe:4b:ea:17:5d:f0:03:45:0a:82:63:47:d6:c0:
         49:3e:04:d8:63:4a:4d:77:5d:31:61:fb:ad:ef:1c:e4:4b:0e:
         45:1a:80:a5:9a:96:47:98:d8:1e:b3:06:18:58:c0:80:20:3f:
         46:1a:e8:b0:41:f2:1d:f2:2a:5a:f5:5b:87:8d:6d:05:c5:a0:
         12:ef:08:0f:ad:b6:02:b8:33:3a:6c:31:f9:3b:be:71:e4:ca:
         a9:58:c0:00:75:05:6a:8d:ad:08:50:e2:9f:8e:40:dd:20:3c:
         ff:42:cc:03:16:fe:d1:f5:17:f3:53:aa:f4:18:a6:6d:8d:d9:
         ac:d5:e0:cc:e6:f2:a3:9e:19:6d:29:b7:38:11:30:0b:b5:95:
         ab:42:51:70:40:5f:60:65:af:2e:de:9c:32:ed:f9:7d:34:50:
         4b:13:ec:0c:b8:d2:28:cb:c3:f3:5c:4d:ff:80:46:5e:f9:f9:
         e2:43:e6:3d:c2:c4:5a:f2:f1:c0:ac:89:e1:81:2e:13:49:18:
         45:cb:ab:fd:07:b9:72:3c:bb:86:70:f4:d2:4a:27:e2:53:89:
         75:a0:87:df:b5:ba:46:5c:87:a3:a5:aa:20:90:68:b5:aa:46:
         78:a6:47:e6:4c:35:73:de:51:a5:7b:10:7d:a8:15:01:55:b1:
         24:97:32:2f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzQzExMTAvBgNVBAUTKDQxNTNCQTQ5OUE0NEU3RUMxMDQxQzYwRUY3RjM2OUFD
NjIzNTdBQTgwHhcNMjYwOTE4MTAzNzIwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFkMTQ2MC1lZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXmsPcHoScgNF8mmrDtSEz6b9pVC0chDlrE+dfxy5J5Fwtji6+hKtCYAZrVy
8lHMjMLa7H4HyBUhfv151RuGuuswBZRoxW4+5BL2+xb0JPmsFNKaTf6ARNZXNiEq
A2BJp03yhsaib/9KGmXNhfBbqVcy6X0lIadqlKJuEynx/n8IF0bZV+rkLug0ZkMB
yESpng0cMV/U0AaPW/bAqhlywR3OqyCS2WZSbcNSHAByXkGePYL+oWaS2pN/N2w+
AUf48a9qHI/wAHxK/pV3wFcIn3FwJl0xr4205ChdgbTKmxeku3D5rKX17/UXONqA
qbUn9U5Ti+juZyktzXwb9BtpMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLGATgu4
UaQWd7WpGiR6l00iI9/CMB8GA1UdIwQYMBaAFEFTukmaROfsEEHGDvfzaaxiNXqo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS8wRTBERkE5ODhD
Q0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUtd1FRY1lPOV9OcHJHSTFl
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FWTzZTWnBFNS13UVFjWU85X05wckdJMWVxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDIzQzEvMEUwREZBOTg4Q0NGMTFFRTk2RjRFNjVBQzRGOUFFMDIvRUNFMkU5MDhC
MzRDMTFGMTkwMkY0QjMxMzUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAJDIfMA0GCSqGSIb3DQEBCwUAA4IBAQCTXGu8/kvqF13wA0UKgmNH
1sBJPgTYY0pNd10xYfut7xzkSw5FGoClmpZHmNgeswYYWMCAID9GGuiwQfId8ipa
9VuHjW0FxaAS7wgPrbYCuDM6bDH5O75x5MqpWMAAdQVqja0IUOKfjkDdIDz/QswD
Fv7R9RfzU6r0GKZtjdms1eDM5vKjnhltKbc4ETALtZWrQlFwQF9gZa8u3pwy7fl9
NFBLE+wMuNIoy8PzXE3/gEZe+fniQ+Y9wsRa8vHArInhgS4TSRhFy6v9B7lyPLuG
cPTSSifiU4l1oIfftbpGXIejpaogkGi1qkZ4pkfmTDVz3lGlexB9qBUBVbEklzIv
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:23 2026 by rpki-client