Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/2434E2E24FAD11EDA19F8316C4F9AE02.roa
File:                     2434E2E24FAD11EDA19F8316C4F9AE02.roa (raw, json)
Hash identifier:          VjofNkEsDa1MLALZdcKSdEbZVEj3pcNgDcbgyz1PBzA=
Subject key identifier:   41:89:D8:FF:8A:DA:99:4E:7D:92:F5:43:7A:95:08:E8:F6:D2:EB:4B
Certificate issuer:       /CN=A917748E/serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
Certificate serial:       0335
Authority key identifier: 4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/2434E2E24FAD11EDA19F8316C4F9AE02.roa
Signing time:             Sat 31 Oct 2026 01:48:19 +0000
ROA not before:           Sat 31 Oct 2026 01:48:19 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     38719
IP address blocks:        65.254.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl
                          rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917748E, serialNumber=4B3B5A01A8952FB5642D2484B7F0205AE7DCC761
        Validity
            Not Before: Oct 31 01:48:19 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ae548e3-c945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:17:9c:d8:f4:ed:ea:bc:fa:1a:d6:e7:9f:b7:
                    81:e2:c4:81:2f:a1:f7:96:87:18:87:b8:12:1a:4c:
                    61:da:97:9b:5b:7d:85:af:80:e5:01:54:e7:2c:65:
                    dd:f7:31:c5:2b:1e:33:dd:ab:f5:5b:81:3a:6b:75:
                    8d:38:4f:e4:65:3a:ad:76:5f:bf:1b:f9:ab:46:d9:
                    cd:cb:f2:4a:b7:7a:5b:4a:2b:06:64:d8:55:60:94:
                    bb:90:f3:19:d8:0a:f7:88:fb:7e:c4:f4:50:82:4d:
                    ac:53:cc:33:1c:e2:23:94:1b:30:19:22:a1:82:d2:
                    7e:b6:1c:76:9f:44:68:68:cf:f3:4c:3e:5a:95:f0:
                    9a:bb:1c:8d:70:f4:66:33:df:52:0d:fe:4a:7b:c9:
                    60:29:6e:7c:75:b8:3b:e8:c7:ee:6b:85:45:bb:60:
                    48:d6:c7:2d:7c:90:0a:fd:c4:69:14:76:7f:80:78:
                    a9:ba:4c:8d:f8:56:9b:be:8b:d2:9c:84:89:ba:0f:
                    8a:fe:03:ea:11:e1:d2:4a:86:8b:b2:89:38:64:e1:
                    28:b2:26:f8:f2:d9:15:eb:81:3f:5f:76:92:3a:a8:
                    33:cd:e6:2c:b0:78:9d:b4:a7:e8:21:f3:b4:0a:b3:
                    95:5c:c4:76:6a:63:1c:75:62:8f:cc:4a:ab:db:de:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:D8:FF:8A:DA:99:4E:7D:92:F5:43:7A:95:08:E8:F6:D2:EB:4B
            X509v3 Authority Key Identifier:
                keyid:4B:3B:5A:01:A8:95:2F:B5:64:2D:24:84:B7:F0:20:5A:E7:DC:C7:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/SztaAaiVL7VkLSSEt_AgWufcx2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SztaAaiVL7VkLSSEt_AgWufcx2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/4D78926A4FA911EDADE5157CC4F9AE02/2434E2E24FAD11EDA19F8316C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c6:41:ae:3d:db:2a:93:db:6c:4f:d1:64:9d:88:b4:21:b4:
         10:a5:c5:94:de:22:93:82:6b:71:6f:88:dc:c1:59:2e:90:6d:
         65:88:3f:cd:30:0b:4c:58:91:63:84:48:db:4d:54:6f:1a:34:
         44:1e:e0:29:9f:aa:c7:fa:9a:51:7f:73:0d:2a:26:ea:7e:56:
         af:cd:b3:d8:da:51:e6:e0:0d:e5:0c:76:e2:b5:35:81:5f:4b:
         b8:d2:bf:3d:b1:9a:9d:57:48:cb:8c:03:e2:73:ee:55:26:4a:
         72:f5:ef:18:1b:32:91:ae:1a:ad:f0:b2:0c:33:a3:fd:67:3d:
         a2:aa:0c:f8:06:d4:64:3e:9f:f8:dd:b1:c6:88:f3:e8:83:21:
         8c:80:f2:65:c2:1d:c2:96:f1:32:35:5f:a4:81:cf:ba:f3:05:
         98:ae:c7:06:d2:fe:f4:f5:8d:b8:da:a8:36:e1:fc:ae:60:52:
         19:7b:82:87:2e:0e:f8:c3:ba:2e:40:41:f4:5f:47:98:46:4c:
         85:ab:00:56:4d:a8:12:8e:d6:9b:a7:1d:fb:13:25:2e:d2:38:
         2e:34:20:96:52:d2:49:c4:e9:1c:51:08:57:a4:92:e6:4d:90:
         36:fd:fb:bb:24:64:1f:c8:35:be:be:00:c8:d5:15:1c:be:1f:
         a6:d9:ff:9f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKDRCM0I1QTAxQTg5NTJGQjU2NDJEMjQ4NEI3RjAyMDVB
RTdEQ0M3NjEwHhcNMjYxMDMxMDE0ODE5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWU1NDhlMy1jOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Rec2PTt6rz6Gtbnn7eB4sSBL6H3locYh7gSGkxh2pebW32Fr4DlAVTnLGXd
9zHFKx4z3av1W4E6a3WNOE/kZTqtdl+/G/mrRtnNy/JKt3pbSisGZNhVYJS7kPMZ
2Ar3iPt+xPRQgk2sU8wzHOIjlBswGSKhgtJ+thx2n0RoaM/zTD5alfCauxyNcPRm
M99SDf5Ke8lgKW58dbg76Mfua4VFu2BI1sctfJAK/cRpFHZ/gHipukyN+FabvovS
nISJug+K/gPqEeHSSoaLsok4ZOEosib48tkV64E/X3aSOqgzzeYssHidtKfoIfO0
CrOVXMR2amMcdWKPzEqr297TPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEGJ2P+K
2plOfZL1Q3qVCOj20utLMB8GA1UdIwQYMBaAFEs7WgGolS+1ZC0khLfwIFrn3Mdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS80RDc4OTI2QTRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9TenRhQWFpVkw3VmtMU1NFdF9BZ1d1ZmN4
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6dGFBYWlWTDdWa0xTU0V0X0FnV3VmY3gyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzc0OEUvNEQ3ODkyNkE0RkE5MTFFREFERTUxNTdDQzRGOUFFMDIvMjQzNEUyRTI0
RkFEMTFFREExOUY4MzE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCQf5cMA0GCSqGSIb3DQEBCwUAA4IBAQAGxkGuPdsqk9tsT9FknYi0
IbQQpcWU3iKTgmtxb4jcwVkukG1liD/NMAtMWJFjhEjbTVRvGjREHuApn6rH+ppR
f3MNKibqflavzbPY2lHm4A3lDHbitTWBX0u40r89sZqdV0jLjAPic+5VJkpy9e8Y
GzKRrhqt8LIMM6P9Zz2iqgz4BtRkPp/43bHGiPPogyGMgPJlwh3ClvEyNV+kgc+6
8wWYrscG0v709Y242qg24fyuYFIZe4KHLg74w7ouQEH0X0eYRkyFqwBWTagSjtab
px37EyUu0jguNCCWUtJJxOkcUQhXpJLmTZA2/fu7JGQfyDW+vgDI1RUcvh+m2f+f
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:34:04 2026 by rpki-client