Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/07FC1866CE0211F1A5FD3EB60F66CEF9.roa
File:                     07FC1866CE0211F1A5FD3EB60F66CEF9.roa (raw, json)
Hash identifier:          S7Cq6Z48bF/WmdJmYAk7dw3LrKxw/zvp97GFPRY0fSc=
Subject key identifier:   3B:2A:43:62:EC:4F:A0:1A:62:6A:CE:95:46:DA:B0:93:37:58:4C:62
Certificate issuer:       /CN=A917778D/serialNumber=F505021055C6DC6C8BDA1A2E1F27F2F51E7658E5
Certificate serial:       02
Authority key identifier: F5:05:02:10:55:C6:DC:6C:8B:DA:1A:2E:1F:27:F2:F5:1E:76:58:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9QUCEFXG3GyL2houHyfy9R52WOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/07FC1866CE0211F1A5FD3EB60F66CEF9.roa
Signing time:             Thu 22 Oct 2026 10:19:15 +0000
ROA not before:           Thu 22 Oct 2026 10:19:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        137.92.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.crl
                          rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9QUCEFXG3GyL2houHyfy9R52WOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 09:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917778D, serialNumber=F505021055C6DC6C8BDA1A2E1F27F2F51E7658E5
        Validity
            Not Before: Oct 22 10:19:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ad9e322-4e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:41:ea:d5:ec:9b:ce:df:a8:05:83:11:6a:
                    6d:51:43:79:88:08:b7:c2:44:e1:bc:ac:db:1b:54:
                    67:cd:73:d1:d0:9d:7e:9a:c7:34:b0:b3:e3:2c:0a:
                    9a:0e:3a:0f:0c:ba:30:87:56:e1:19:20:41:e7:21:
                    e3:6d:83:f4:fb:00:75:15:02:3a:ea:5e:24:18:c0:
                    52:23:b9:99:61:6d:94:4a:61:35:3e:12:ad:26:60:
                    87:4a:60:f1:e4:3e:43:2f:b2:f5:4d:51:90:77:a5:
                    48:11:0e:3a:42:32:7d:9c:cd:8d:53:ca:c0:2f:95:
                    a5:15:17:a7:f0:48:72:29:c8:7b:72:a8:f0:e6:b8:
                    16:d7:b4:99:df:65:98:4c:cf:94:bc:ea:b3:4b:eb:
                    e8:73:c4:06:14:8e:bc:53:1a:80:9d:60:87:89:28:
                    a6:3b:f9:80:98:b3:95:0b:c5:d2:17:5a:af:89:28:
                    3d:1e:b2:43:b1:86:81:e7:df:cc:26:e8:a8:c0:1f:
                    6e:0d:8c:e2:c4:bf:97:9e:88:e2:8d:f4:c2:4c:7b:
                    3e:5f:6b:fd:91:2b:59:75:33:62:c3:ac:b5:97:29:
                    ec:7c:ff:2e:da:3e:c1:fe:4c:2f:c4:1b:a2:60:c2:
                    22:8e:75:1c:84:60:65:1c:4b:c6:ae:46:99:01:f4:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2A:43:62:EC:4F:A0:1A:62:6A:CE:95:46:DA:B0:93:37:58:4C:62
            X509v3 Authority Key Identifier:
                keyid:F5:05:02:10:55:C6:DC:6C:8B:DA:1A:2E:1F:27:F2:F5:1E:76:58:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/9QUCEFXG3GyL2houHyfy9R52WOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9QUCEFXG3GyL2houHyfy9R52WOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917778D/F6D3D6BACE0011F1AAF984BD0E66CEF9/07FC1866CE0211F1A5FD3EB60F66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.92.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:a1:58:ea:18:68:bb:4b:3f:8d:73:d9:09:35:e1:72:62:e6:
         79:37:62:e9:4b:a6:b6:06:4f:76:47:eb:68:c6:17:f4:42:c2:
         c6:20:97:b2:c5:ee:0c:d7:61:5e:3c:2a:93:8c:b4:8b:ca:79:
         33:cf:6d:3c:83:3b:77:d6:03:6b:eb:44:9c:3e:0b:ff:72:d7:
         09:69:be:f3:77:a6:82:78:fb:c2:cf:f0:f9:aa:cc:7b:e5:2e:
         6f:33:2d:49:55:4e:69:e3:9c:be:fa:ad:70:f3:34:ff:1b:22:
         ab:2f:8a:a7:6a:cc:5d:49:63:f2:f3:8b:ca:d1:91:6f:01:96:
         2b:8b:83:bb:5b:fa:8f:48:84:98:60:48:46:bd:e4:97:ea:03:
         7e:e2:4f:c8:01:27:4c:2d:14:54:fd:0a:7d:a1:63:97:9c:41:
         4a:fe:d3:ff:ae:66:2e:c7:fb:e0:e2:17:64:42:4d:10:9e:6a:
         2a:df:44:72:3f:a3:93:cd:36:5b:e6:dc:af:0a:95:5c:ad:84:
         43:46:5b:dd:83:59:42:b4:8e:4e:50:7e:98:9b:9f:29:33:7b:
         f1:71:66:90:3a:0b:b3:50:be:e9:23:28:f4:02:14:a2:16:5f:
         4f:c7:aa:ff:bb:76:0c:ce:ad:b8:9a:7f:e3:e2:27:48:70:3f:
         e4:b5:57:1e
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Nzc4RDExMC8GA1UEBRMoRjUwNTAyMTA1NUM2REM2QzhCREExQTJFMUYyN0YyRjUx
RTc2NThFNTAeFw0yNjEwMjIxMDE5MTVaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZDllMzIyLTRlM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmvEHq1eybzt+oBYMRam1RQ3mICLfCROG8rNsbVGfNc9HQnX6axzSws+MsCpoO
Og8MujCHVuEZIEHnIeNtg/T7AHUVAjrqXiQYwFIjuZlhbZRKYTU+Eq0mYIdKYPHk
PkMvsvVNUZB3pUgRDjpCMn2czY1TysAvlaUVF6fwSHIpyHtyqPDmuBbXtJnfZZhM
z5S86rNL6+hzxAYUjrxTGoCdYIeJKKY7+YCYs5ULxdIXWq+JKD0eskOxhoHn38wm
6KjAH24NjOLEv5eeiOKN9MJMez5fa/2RK1l1M2LDrLWXKex8/y7aPsH+TC/EG6Jg
wiKOdRyEYGUcS8auRpkB9FwNAgMBAAGjggJfMIICWzAdBgNVHQ4EFgQUOypDYuxP
oBpias6VRtqwkzdYTGIwHwYDVR0jBBgwFoAU9QUCEFXG3GyL2houHyfy9R52WOUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3NzhEL0Y2RDNENkJBQ0Uw
MDExRjFBQUY5ODRCRDBFNjZDRUY5LzlRVUNFRlhHM0d5TDJob3VIeWZ5OVI1MldP
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOVFVQ0VGWEczR3lMMmhvdUh5Znk5UjUyV09VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Nzc4RC9GNkQzRDZCQUNFMDAxMUYxQUFGOTg0QkQwRTY2Q0VGOS8wN0ZDMTg2NkNF
MDIxMUYxQTVGRDNFQjYwRjY2Q0VGOS5yb2EwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwCJXDANBgkqhkiG9w0BAQsFAAOCAQEACKFY6hhou0s/jXPZCTXhcmLm
eTdi6UumtgZPdkfraMYX9ELCxiCXssXuDNdhXjwqk4y0i8p5M89tPIM7d9YDa+tE
nD4L/3LXCWm+83emgnj7ws/w+arMe+UubzMtSVVOaeOcvvqtcPM0/xsiqy+Kp2rM
XUlj8vOLytGRbwGWK4uDu1v6j0iEmGBIRr3kl+oDfuJPyAEnTC0UVP0KfaFjl5xB
Sv7T/65mLsf74OIXZEJNEJ5qKt9Ecj+jk802W+bcrwqVXK2EQ0Zb3YNZQrSOTlB+
mJufKTN78XFmkDoLs1C+6SMo9AIUohZfT8eq/7t2DM6tuJp/4+InSHA/5LVXHg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:40:11 2026 by rpki-client