Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa
File:                     5AD6391EBC1111EE92B7B02DC4F9AE02.roa (raw, json)
Hash identifier:          gE9R227CeOIkPZgQUQXn63u858AmZB8YiD8azOX5ReU=
Subject key identifier:   10:59:DD:82:B5:4D:97:04:A3:98:59:B8:79:49:00:A6:07:B4:11:26
Certificate issuer:       /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
Certificate serial:       0190
Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:28:50 +0000
ROA not before:           Thu 31 Jul 2025 05:41:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45960
IP address blocks:        192.82.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
        Validity
            Not Before: Jul 31 05:41:30 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59091-3e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:f2:e2:d5:a6:ef:cb:57:ce:11:85:46:10:
                    77:63:f1:15:31:55:2d:9b:e4:33:d1:a9:ce:de:98:
                    e3:98:da:3d:02:b8:d2:e5:07:73:52:8b:0f:32:b5:
                    ab:85:e8:f6:23:a6:ef:ed:53:a9:cb:d2:e3:1b:4f:
                    fd:2f:9a:e3:19:3c:bc:44:68:8f:57:1b:ba:55:41:
                    1c:3d:35:04:ef:6f:f7:59:58:8b:8f:0d:9d:1e:ee:
                    4f:0d:74:7b:3f:67:09:4f:69:62:fe:50:00:c8:0f:
                    2e:7f:09:fa:76:05:39:67:1a:5a:5e:32:1f:30:46:
                    44:23:ea:58:aa:82:0f:c1:0f:b9:b3:76:3b:a0:e2:
                    32:88:99:11:cd:bf:2d:df:fc:ca:c6:20:41:68:e0:
                    fc:fa:05:fb:6f:b4:46:39:ec:59:18:a7:d3:4b:f5:
                    cf:2e:41:d1:49:a1:18:f5:70:4f:16:2c:af:c1:7f:
                    97:31:91:e0:bf:a8:c2:3f:cd:53:c1:b3:bf:bb:5c:
                    28:b3:3a:97:c4:34:0b:78:af:ca:50:ae:ad:ad:ac:
                    49:1f:21:f3:5c:66:eb:77:35:f4:ad:26:58:cd:62:
                    24:e3:9e:26:c1:37:ed:ba:11:62:e6:ae:4a:7e:a9:
                    ac:ec:c0:d7:ed:52:59:93:d6:b4:1b:99:81:d9:02:
                    93:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:59:DD:82:B5:4D:97:04:A3:98:59:B8:79:49:00:A6:07:B4:11:26
            X509v3 Authority Key Identifier:
                keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/5AD6391EBC1111EE92B7B02DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:e2:89:d2:f8:73:4e:b7:23:1d:6d:fd:18:2f:b5:a6:4c:
         e8:ff:d9:87:47:45:ab:61:0d:6b:98:a4:06:52:70:81:90:9d:
         89:94:93:50:b9:c7:33:8a:db:5a:a1:14:7e:9b:04:17:24:d1:
         1b:15:c1:78:ed:46:72:28:65:92:fc:29:8b:2a:ce:71:ec:f3:
         60:20:4c:ca:c2:24:42:6d:28:6d:23:b6:6a:b1:60:cf:8e:0a:
         13:f6:ef:eb:82:08:d4:ae:ee:93:dd:a9:7c:13:e3:70:29:f1:
         a7:3b:b1:23:1c:cc:a7:b8:8f:90:7a:ef:45:a7:eb:42:e5:6b:
         81:ba:ea:94:aa:94:b7:7b:e0:83:8b:48:f5:0f:d5:6b:c9:9b:
         cd:a5:27:5b:57:21:12:a6:b6:e5:3d:2d:75:4c:d9:7a:80:c8:
         09:91:51:20:23:92:b8:a6:e4:60:fa:7a:27:1e:bd:42:ae:b1:
         66:0d:85:61:75:ab:46:47:d3:45:eb:14:47:c6:b6:4a:21:ed:
         d4:3a:a4:ec:b4:5b:22:28:6d:1a:99:f4:be:9c:f2:2e:ab:90:
         1d:44:0d:30:ba:3c:90:7a:f5:92:94:0f:5b:3f:73:06:77:91:
         66:13:c1:08:0a:af:e3:8b:76:81:17:55:d8:66:a8:d8:b7:b6:
         93:48:f8:00
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwNzAxMTAvBgNVBAUTKEMzNkNGNURFMjUzMzlCOTE0NTZFNUNDMjMxNzI0OEIz
NkVBNDVCN0QwHhcNMjUwNzMxMDU0MTMwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTA5MS0zZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjPfy4tWm78tXzhGFRhB3Y/EVMVUtm+Qz0anO3pjjmNo9ArjS5QdzUosPMrWr
hej2I6bv7VOpy9LjG0/9L5rjGTy8RGiPVxu6VUEcPTUE72/3WViLjw2dHu5PDXR7
P2cJT2li/lAAyA8ufwn6dgU5ZxpaXjIfMEZEI+pYqoIPwQ+5s3Y7oOIyiJkRzb8t
3/zKxiBBaOD8+gX7b7RGOexZGKfTS/XPLkHRSaEY9XBPFiyvwX+XMZHgv6jCP81T
wbO/u1woszqXxDQLeK/KUK6traxJHyHzXGbrdzX0rSZYzWIk454mwTftuhFi5q5K
fqms7MDX7VJZk9a0G5mB2QKTHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBBZ3YK1
TZcEo5hZuHlJAKYHtBEmMB8GA1UdIwQYMBaAFMNs9d4lM5uRRW5cwjFySLNupFt9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA3MC84MDhCNEQ2Q0JD
MTAxMUVFOEJFQjEzN0FDNEY5QUUwMi93MnoxM2lVem01RkZibHpDTVhKSXMyNmtX
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3cyejEzaVV6bTVGRmJsekNNWEpJczI2a1czMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEUwNzAvODA4QjRENkNCQzEwMTFFRThCRUIxMzdBQzRGOUFFMDIvNUFENjM5MUVC
QzExMTFFRTkyQjdCMDJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwFLeMA0GCSqGSIb3DQEBCwUAA4IBAQARCuKJ0vhzTrcjHW39GC+1
pkzo/9mHR0WrYQ1rmKQGUnCBkJ2JlJNQucczittaoRR+mwQXJNEbFcF47UZyKGWS
/CmLKs5x7PNgIEzKwiRCbShtI7ZqsWDPjgoT9u/rggjUru6T3al8E+NwKfGnO7Ej
HMynuI+Qeu9Fp+tC5WuBuuqUqpS3e+CDi0j1D9VryZvNpSdbVyESprblPS11TNl6
gMgJkVEgI5K4puRg+nonHr1CrrFmDYVhdatGR9NF6xRHxrZKIe3UOqTstFsiKG0a
mfS+nPIuq5AdRA0wujyQevWSlA9bP3MGd5FmE8EICq/ji3aBF1XYZqjYt7aTSPgA
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:25 2026 by rpki-client