Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/7AE952421D4211F19FBF55241C3D8C67.roa
File:                     7AE952421D4211F19FBF55241C3D8C67.roa (raw, json)
Hash identifier:          f7UWN7jQlsHW7Pox7uXkyxX9g+BJkY1p57/O1WWygtI=
Subject key identifier:   86:DA:66:AE:06:2A:42:5C:E9:28:CA:C2:EB:EE:53:5D:2C:60:FE:73
Certificate issuer:       /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial:       64
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/7AE952421D4211F19FBF55241C3D8C67.roa
Signing time:             Wed 11 Mar 2026 12:04:39 +0000
ROA not before:           Wed 11 Mar 2026 12:04:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154160
IP address blocks:        155.35.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
                          rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
        Validity
            Not Before: Mar 11 12:04:39 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69b15a57-3257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:7d:61:c9:3c:aa:c4:4e:59:58:2d:39:e5:
                    a3:80:f5:13:a7:27:45:0b:f2:c9:1d:7d:04:8d:44:
                    ff:7e:23:92:b1:85:90:d9:c2:0d:f8:e6:4c:71:ad:
                    7f:d3:da:f1:f3:53:93:fd:d7:bd:ec:ab:09:69:35:
                    f9:bf:23:8b:a2:53:96:66:24:c2:ac:16:97:fd:42:
                    6b:d3:fa:b9:d0:bb:43:f6:7e:5c:ac:c5:36:c9:97:
                    ba:d5:cd:e8:6f:3b:ca:c8:7c:0c:42:5e:d5:f1:df:
                    0d:61:3d:72:bc:a3:12:47:de:e9:f7:66:99:cc:99:
                    0a:3a:3d:b0:fa:bf:d6:22:93:cc:b5:c8:c0:6c:d9:
                    29:2a:81:6c:eb:9e:d2:c1:ac:28:09:d4:41:59:0e:
                    c2:14:32:b7:d2:e5:83:cf:7a:26:f2:b0:88:68:ec:
                    1a:59:ef:10:78:cd:d9:33:70:9e:80:39:4e:59:ec:
                    25:3f:c8:54:8e:d0:32:4d:3a:ea:f4:b7:4f:bb:a7:
                    14:a2:26:36:13:2b:20:6f:d5:38:bd:81:40:3c:cc:
                    9a:74:0d:ff:4e:b0:eb:2e:2d:b7:65:8f:82:5b:45:
                    28:ff:3e:85:1e:56:57:c4:a1:79:3c:fc:c1:b1:ec:
                    4f:a1:ff:79:3d:dd:7a:ef:50:0f:88:07:b6:21:1b:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DA:66:AE:06:2A:42:5C:E9:28:CA:C2:EB:EE:53:5D:2C:60:FE:73
            X509v3 Authority Key Identifier:
                keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/7AE952421D4211F19FBF55241C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.35.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:85:4b:55:99:6d:92:db:00:36:06:14:64:ac:14:3c:28:3e:
         7b:6b:25:05:5c:c7:50:c9:8e:1d:44:4c:5f:4a:79:8e:58:9a:
         a1:32:61:40:1f:d6:42:79:7d:d9:a1:3f:4a:35:ea:ae:0b:64:
         5f:28:18:15:96:7c:34:48:2b:93:f2:f8:4c:f4:ea:4c:e6:dc:
         ff:32:34:8b:1e:d6:6a:c1:c4:25:c5:c4:35:69:cc:fd:bb:bc:
         64:c7:37:b5:76:e8:ba:e7:77:9d:c0:a2:6f:b7:00:4e:1e:d1:
         35:d8:00:aa:aa:93:e9:62:24:e0:ba:7a:12:4c:f1:2a:2f:e7:
         d0:9c:89:be:b0:35:f2:7a:5f:9b:46:73:e4:2b:ec:fd:64:86:
         c8:71:15:33:14:c6:6f:92:ac:b4:e0:81:3b:9b:09:8f:72:b9:
         77:bc:76:b9:b6:02:1e:d3:cb:7e:a3:e4:96:28:63:9e:b4:1e:
         bf:d4:43:6d:16:f8:08:e1:6a:82:d6:f9:f8:a9:d3:d1:90:11:
         23:a2:a6:77:d3:1a:81:51:85:bb:8c:e7:1e:59:3e:62:09:88:
         a9:b0:74:5e:05:14:41:b4:aa:a3:f0:69:2b:b2:84:88:7f:d7:
         b9:07:62:74:bc:be:f8:6d:4c:0c:39:b2:8b:86:00:8f:02:92:
         30:74:ed:c4
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz
RDE5RTFDMzAeFw0yNjAzMTExMjA0MzlaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YjE1YTU3LTMyNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDqn1hyTyqxE5ZWC055aOA9ROnJ0UL8skdfQSNRP9+I5KxhZDZwg345kxxrX/T
2vHzU5P9173sqwlpNfm/I4uiU5ZmJMKsFpf9QmvT+rnQu0P2flysxTbJl7rVzehv
O8rIfAxCXtXx3w1hPXK8oxJH3un3ZpnMmQo6PbD6v9Yik8y1yMBs2SkqgWzrntLB
rCgJ1EFZDsIUMrfS5YPPeibysIho7BpZ7xB4zdkzcJ6AOU5Z7CU/yFSO0DJNOur0
t0+7pxSiJjYTKyBv1Ti9gUA8zJp0Df9OsOsuLbdlj4JbRSj/PoUeVlfEoXk8/MGx
7E+h/3k93XrvUA+IB7YhG9m5AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUhtpmrgYq
QlzpKMrC6+5TXSxg/nMwHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB
NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTlFMy80NENFNEVEMkEzQTQxMUYwOTIwMTNFMjlDNEY5QUUwMi83QUU5NTI0MjFE
NDIxMUYxOUZCRjU1MjQxQzNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACbIyIwDQYJKoZIhvcNAQELBQADggEBAHiFS1WZbZLbADYGFGSsFDwo
PntrJQVcx1DJjh1ETF9KeY5YmqEyYUAf1kJ5fdmhP0o16q4LZF8oGBWWfDRIK5Py
+Ez06kzm3P8yNIse1mrBxCXFxDVpzP27vGTHN7V26Lrnd53Aom+3AE4e0TXYAKqq
k+liJOC6ehJM8Sov59Ccib6wNfJ6X5tGc+Qr7P1khshxFTMUxm+SrLTggTubCY9y
uXe8drm2Ah7Ty36j5JYoY560Hr/UQ20W+AjhaoLW+fip09GQESOipnfTGoFRhbuM
5x5ZPmIJiKmwdF4FFEG0qqPwaSuyhIh/17kHYnS8vvhtTAw5souGAI8CkjB07cQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:31:48 2026 by rpki-client