Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/94B0F0DE4C0B11F1996C5785A4833773.roa
File:                     94B0F0DE4C0B11F1996C5785A4833773.roa (raw, json)
Hash identifier:          01xIz/rgNcJT7guVWtVDsLnpVBDWMjTBSig7MAakmHY=
Subject key identifier:   DA:53:1E:93:60:02:15:FC:F0:8A:84:BB:50:45:14:8B:67:09:CF:E0
Certificate issuer:       /CN=A91629F2/serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
Certificate serial:       03
Authority key identifier: 3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/94B0F0DE4C0B11F1996C5785A4833773.roa
Signing time:             Sun 10 May 2026 01:00:05 +0000
ROA not before:           Sun 10 May 2026 01:00:05 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154653
IP address blocks:        162.4.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl
                          rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629F2, serialNumber=3F30FF1BBB26F102ED8A475A4BFBC942A1DF328A
        Validity
            Not Before: May 10 01:00:05 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=69ffd895-3bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:db:5c:f0:b3:af:02:0e:8d:4a:4e:ab:da:
                    6f:f7:32:11:18:f2:c9:ab:20:9a:0b:97:49:bf:73:
                    3c:f5:d1:4d:e9:a6:d8:c6:a6:84:19:82:ce:27:93:
                    eb:11:81:56:c5:48:70:50:36:8f:87:72:7a:bc:f7:
                    e2:86:c6:b0:b4:78:1c:cd:e5:b5:90:41:cf:96:07:
                    dc:77:23:53:0d:a2:65:6d:3e:d2:d2:e4:ef:92:b6:
                    08:00:fe:e9:be:03:1b:8b:78:7a:73:6b:ac:f5:29:
                    ca:b0:1c:d6:65:56:cf:28:2e:8b:2a:ae:ed:87:f3:
                    7f:26:71:fa:a7:5b:a0:75:d5:06:f7:ac:bc:0a:51:
                    fa:6f:52:6b:b2:97:6f:01:11:e6:0e:36:62:77:1e:
                    d7:29:ee:ae:5d:25:28:61:56:be:98:f0:9d:df:9f:
                    68:09:02:f9:bc:38:4b:14:54:e4:60:4b:0d:91:05:
                    5a:ab:6b:2b:1f:4d:27:7d:3d:a6:c7:ee:7e:f2:3e:
                    30:5b:37:8b:57:16:f0:59:f5:54:49:73:f0:a3:52:
                    28:37:8f:bb:c2:eb:49:fb:8d:db:e9:07:f9:62:ef:
                    43:a0:40:52:8c:04:2c:51:f5:29:9e:be:20:99:43:
                    b8:59:b2:bf:68:66:44:c4:74:1c:f6:de:24:a3:fc:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:53:1E:93:60:02:15:FC:F0:8A:84:BB:50:45:14:8B:67:09:CF:E0
            X509v3 Authority Key Identifier:
                keyid:3F:30:FF:1B:BB:26:F1:02:ED:8A:47:5A:4B:FB:C9:42:A1:DF:32:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/PzD_G7sm8QLtikdaS_vJQqHfMoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzD_G7sm8QLtikdaS_vJQqHfMoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629F2/E183CEC44C0411F18A6F8D79A1833773/94B0F0DE4C0B11F1996C5785A4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:1e:b0:15:f3:1b:e7:a3:98:ce:d3:1e:e5:5d:c8:38:98:
         88:62:71:56:1b:ee:e2:13:5b:8c:12:52:69:ed:39:90:f9:19:
         9e:cd:ce:57:1e:e1:1c:7b:63:d0:ea:32:c7:bf:22:1a:5b:f8:
         c4:be:82:55:a2:af:5e:90:df:53:5b:ba:4b:57:45:9a:e1:a2:
         8c:93:2a:d1:de:44:f1:40:b0:57:c9:69:0c:be:66:c3:f0:a5:
         9a:3f:be:61:cf:9e:e3:54:d0:76:f7:7d:0f:dd:42:b9:12:f0:
         00:f5:a0:90:c0:b3:fd:f4:8a:13:c4:0f:0c:8a:67:e1:c4:ff:
         77:f6:d6:b3:07:60:3f:0a:55:28:ea:a7:17:bb:b4:65:02:a2:
         96:dc:45:ea:75:d4:89:a2:3b:01:23:d7:2a:49:c6:a1:93:c0:
         d6:67:1b:3a:f2:92:c1:66:25:5b:32:ee:f3:56:93:7c:38:0b:
         f1:4a:26:9c:42:02:4d:44:64:e6:11:98:b3:1b:b7:d6:af:bd:
         15:20:02:90:a4:71:73:ed:7c:8c:c7:5b:1c:44:be:94:53:35:
         85:1a:16:9b:86:f6:4b:a9:e3:ee:5f:a9:0b:17:37:7f:65:a9:
         9f:1f:13:fd:3c:a5:26:74:c4:d0:8e:b9:83:ce:0e:87:48:4e:
         d8:9d:18:08
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MjlGMjExMC8GA1UEBRMoM0YzMEZGMUJCQjI2RjEwMkVEOEE0NzVBNEJGQkM5NDJB
MURGMzI4QTAeFw0yNjA1MTAwMTAwMDVaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZmZkODk1LTNiY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5kttc8LOvAg6NSk6r2m/3MhEY8smrIJoLl0m/czz10U3pptjGpoQZgs4nk+sR
gVbFSHBQNo+Hcnq89+KGxrC0eBzN5bWQQc+WB9x3I1MNomVtPtLS5O+StggA/um+
AxuLeHpza6z1KcqwHNZlVs8oLosqru2H838mcfqnW6B11Qb3rLwKUfpvUmuyl28B
EeYONmJ3Htcp7q5dJShhVr6Y8J3fn2gJAvm8OEsUVORgSw2RBVqraysfTSd9PabH
7n7yPjBbN4tXFvBZ9VRJc/CjUig3j7vC60n7jdvpB/li70OgQFKMBCxR9SmeviCZ
Q7hZsr9oZkTEdBz23iSj/BSfAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU2lMek2AC
FfzwioS7UEUUi2cJz+AwHwYDVR0jBBgwFoAUPzD/G7sm8QLtikdaS/vJQqHfMoow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUYyL0UxODNDRUM0NEMw
NDExRjE4QTZGOEQ3OUExODMzNzczL1B6RF9HN3NtOFFMdGlrZGFTX3ZKUXFIZk1v
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUHpEX0c3c204UUx0aWtkYVNfdkpRcUhmTW9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjlGMi9FMTgzQ0VDNDRDMDQxMUYxOEE2RjhENzlBMTgzMzc3My85NEIwRjBERTRD
MEIxMUYxOTk2QzU3ODVBNDgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACiBFQwDQYJKoZIhvcNAQELBQADggEBACnuHrAV8xvno5jO0x7lXcg4
mIhicVYb7uITW4wSUmntOZD5GZ7Nzlce4Rx7Y9DqMse/Ihpb+MS+glWir16Q31Nb
uktXRZrhooyTKtHeRPFAsFfJaQy+ZsPwpZo/vmHPnuNU0Hb3fQ/dQrkS8AD1oJDA
s/30ihPEDwyKZ+HE/3f21rMHYD8KVSjqpxe7tGUCopbcRep11ImiOwEj1ypJxqGT
wNZnGzryksFmJVsy7vNWk3w4C/FKJpxCAk1EZOYRmLMbt9avvRUgApCkcXPtfIzH
WxxEvpRTNYUaFpuG9kup4+5fqQsXN39lqZ8fE/08pSZ0xNCOuYPODodITtidGAg=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:41 2026 by rpki-client