Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa
File:                     BFEE74284D9811F0930F6465C4F9AE02.roa (raw, json)
Hash identifier:          40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=
Subject key identifier:   C7:F1:AD:DC:FB:7E:04:69:5C:C2:41:4B:BF:68:D3:00:FD:89:F4:7A
Certificate issuer:       /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Certificate serial:       A5
Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa
Signing time:             Tue 21 Apr 2026 07:41:04 +0000
ROA not before:           Tue 21 Apr 2026 07:41:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132584
IP address blocks:        203.56.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
                          rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
        Validity
            Not Before: Apr 21 07:41:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e72a0f-97fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:13:09:05:2f:6e:78:82:f6:d7:ae:c9:f9:
                    82:6d:3f:ba:83:f0:aa:29:19:f6:bf:9b:5a:78:5b:
                    ec:03:e3:ca:46:64:71:a6:2f:8c:10:c9:49:6b:7f:
                    29:5c:b5:ea:ee:c4:6c:3c:c2:62:5c:22:aa:89:64:
                    c8:55:56:b5:0a:a9:14:9b:09:f8:46:fd:3a:aa:5d:
                    ac:c8:1c:76:99:11:25:6a:37:9c:bc:e7:4b:e1:00:
                    2f:3e:d5:e3:ac:b0:c4:c3:c6:85:06:8e:5b:7f:22:
                    98:cb:73:f9:8e:df:89:2d:74:41:96:2d:44:ee:d8:
                    95:bd:2e:18:41:71:ec:6f:34:1f:21:62:3f:65:67:
                    d8:e7:5e:65:0a:9f:de:2b:db:75:29:a7:fc:9b:55:
                    20:01:8f:99:9b:55:b9:fe:f1:36:15:14:9f:9e:47:
                    b1:c8:de:7a:8c:d9:78:92:e1:76:ad:1b:90:fd:a0:
                    e7:26:26:a9:d8:44:3c:c2:5d:1f:66:31:3b:e7:8c:
                    73:0c:1a:86:dd:8a:1b:06:42:0f:2a:41:1f:ef:2a:
                    4d:12:aa:98:e3:f1:04:18:94:02:94:33:7f:e2:73:
                    b2:a5:0e:b5:1d:f6:45:f9:71:c6:31:bf:f7:a0:39:
                    ca:97:fd:09:2f:50:c0:af:08:91:b7:f2:ea:8d:8d:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F1:AD:DC:FB:7E:04:69:5C:C2:41:4B:BF:68:D3:00:FD:89:F4:7A
            X509v3 Authority Key Identifier:
                keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/BFEE74284D9811F0930F6465C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:3f:44:bc:62:d2:b4:63:5f:3b:8d:6d:22:e5:4b:cb:b1:
         8c:ca:66:35:e2:31:35:37:d5:02:67:7a:09:04:09:e9:58:c4:
         99:8e:36:4b:fd:21:8b:00:93:a9:3b:f1:3f:c5:dc:72:04:3a:
         65:23:59:23:0b:67:9d:df:a3:83:90:78:43:53:a1:7f:c2:3d:
         2a:7b:85:c4:9d:b6:d4:ed:de:af:a0:28:89:44:11:da:95:ef:
         4f:c6:28:f9:7e:9d:b4:e6:a6:90:1c:7e:2d:59:79:1b:60:c8:
         87:88:f6:19:f4:c5:ea:29:c8:83:99:74:e2:2b:4e:0f:b1:cf:
         82:d3:7b:64:cf:54:6d:93:67:58:26:0d:7d:f2:38:00:a5:f8:
         3b:6d:80:89:39:ac:11:0a:8e:fe:4e:20:99:b4:a4:6f:9f:ce:
         d5:e1:3f:5e:29:c7:cd:71:29:23:66:c4:14:aa:8d:af:46:1b:
         05:d8:9c:3a:83:7e:9c:d4:6a:90:4a:73:ec:06:3a:73:91:30:
         eb:f2:e8:72:6d:76:9a:c5:90:07:57:30:cd:14:c8:5a:cf:04:
         3e:b4:a1:1e:0f:19:2b:5c:30:24:2f:e1:6a:76:29:61:26:db:
         87:1a:44:7c:65:1d:85:5b:c3:0e:01:4f:cc:42:41:ef:78:95:
         89:46:1c:36
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU3RkUxMTAvBgNVBAUTKEM4MDk3M0QxNkNDQ0M5RTE4QzEzQTY4ODAzM0RDNEQw
RjBFNjFDNEEwHhcNMjYwNDIxMDc0MTA0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU3MmEwZi05N2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAprwTCQUvbniC9teuyfmCbT+6g/CqKRn2v5taeFvsA+PKRmRxpi+MEMlJa38p
XLXq7sRsPMJiXCKqiWTIVVa1CqkUmwn4Rv06ql2syBx2mRElajecvOdL4QAvPtXj
rLDEw8aFBo5bfyKYy3P5jt+JLXRBli1E7tiVvS4YQXHsbzQfIWI/ZWfY515lCp/e
K9t1Kaf8m1UgAY+Zm1W5/vE2FRSfnkexyN56jNl4kuF2rRuQ/aDnJiap2EQ8wl0f
ZjE754xzDBqG3YobBkIPKkEf7ypNEqqY4/EEGJQClDN/4nOypQ61HfZF+XHGMb/3
oDnKl/0JL1DArwiRt/LqjY0eswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMfxrdz7
fgRpXMJBS79o0wD9ifR6MB8GA1UdIwQYMBaAFMgJc9FszMnhjBOmiAM9xNDw5hxK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdGRS9DMDg3NTcyMjRE
OEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXllR01FNmFJQXozRTBQRG1I
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lBbHowV3pNeWVHTUU2YUlBejNFMFBEbUhFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU3RkUvQzA4NzU3MjI0RDhCMTFGMDhFQUM1ODIzQzRGOUFFMDIvQkZFRTc0Mjg0
RDk4MTFGMDkzMEY2NDY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyzjDMA0GCSqGSIb3DQEBCwUAA4IBAQCh4T9EvGLStGNfO41tIuVL
y7GMymY14jE1N9UCZ3oJBAnpWMSZjjZL/SGLAJOpO/E/xdxyBDplI1kjC2ed36OD
kHhDU6F/wj0qe4XEnbbU7d6voCiJRBHale9Pxij5fp205qaQHH4tWXkbYMiHiPYZ
9MXqKciDmXTiK04Psc+C03tkz1Rtk2dYJg198jgApfg7bYCJOawRCo7+TiCZtKRv
n87V4T9eKcfNcSkjZsQUqo2vRhsF2Jw6g36c1GqQSnPsBjpzkTDr8uhybXaaxZAH
VzDNFMhazwQ+tKEeDxkrXDAkL+FqdilhJtuHGkR8ZR2FW8MOAU/MQkHveJWJRhw2
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:23 2026 by rpki-client