Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/78D4FFEEEAB411EB95BFB566C4F9AE02.roa
File:                     78D4FFEEEAB411EB95BFB566C4F9AE02.roa (raw, json)
Hash identifier:          564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=
Subject key identifier:   20:70:44:BB:10:E5:D0:30:B3:27:41:9D:8E:D0:2B:33:FD:8F:9E:86
Certificate issuer:       /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial:       0635
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/78D4FFEEEAB411EB95BFB566C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 19:24:22 +0000
ROA not before:           Thu 30 Apr 2026 19:24:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     23959
IP address blocks:        85.113.70.0/24 maxlen: 24
                          91.199.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1589 (0x635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
        Validity
            Not Before: Apr 30 19:24:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3ac65-350b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:c0:7b:a3:fd:ab:b6:20:a6:85:25:75:b7:
                    14:4d:a7:1b:99:f1:d7:9d:08:8e:06:6d:d2:89:9a:
                    f6:04:f1:ab:75:2b:ff:33:b1:1e:2e:4f:75:4f:88:
                    46:0c:d9:9e:e0:72:ab:6f:5d:f0:ba:22:b0:3c:71:
                    4c:db:6c:16:43:7e:1e:7e:58:6f:78:bf:f7:df:6d:
                    24:01:6d:0b:69:3e:59:f5:f4:c9:3c:38:41:f8:86:
                    ba:86:6d:74:e8:4b:44:64:d5:9a:ec:50:92:74:49:
                    24:04:92:f7:c8:af:e3:8e:5b:a6:1c:4e:bf:87:c5:
                    57:83:96:b3:6b:e0:92:a5:42:2b:94:56:c8:a2:47:
                    0d:a7:93:fe:c0:bb:48:bb:7b:b1:26:b5:e2:56:c4:
                    e5:4a:8b:2c:9c:6e:9e:2a:98:5f:08:08:b4:ef:f3:
                    10:95:22:7e:9f:4c:36:2c:75:29:e2:44:4e:87:be:
                    83:32:ec:9d:b8:91:28:e9:a7:b2:d3:75:d3:97:95:
                    80:32:f8:2e:d4:b6:39:39:7e:fe:c3:df:8b:69:f7:
                    6d:86:67:56:da:c5:66:fb:a0:3c:ee:d3:9d:e2:9f:
                    4e:0e:27:7c:c7:31:c0:49:0a:ed:f0:83:b4:6b:20:
                    fc:50:32:18:b2:21:83:09:cb:30:22:48:7f:11:b8:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:70:44:BB:10:E5:D0:30:B3:27:41:9D:8E:D0:2B:33:FD:8F:9E:86
            X509v3 Authority Key Identifier:
                keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/78D4FFEEEAB411EB95BFB566C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.70.0/24
                  91.199.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:02:7a:4a:3d:c6:ce:8a:44:c3:78:a0:a7:31:2b:02:a0:
         43:a2:5a:c7:8b:26:75:45:3a:fe:9f:10:26:31:a4:ab:ab:f4:
         15:a3:2c:37:d9:7e:73:9b:d8:b0:af:6c:0a:26:3b:51:e0:4a:
         88:5a:75:c9:b9:5c:cc:e2:8d:6e:01:1c:3d:9b:c9:e3:08:ed:
         2a:82:75:88:a2:e5:85:5a:9f:81:f6:e6:68:4b:f3:7e:22:e0:
         97:8f:7b:f7:f6:37:66:d8:18:be:fe:ec:8f:56:f7:13:e5:da:
         d2:ec:3c:ec:de:4e:ec:d0:a8:0f:70:86:34:30:ca:0e:7c:d7:
         d3:14:ff:c5:d8:d1:aa:7a:e8:ad:69:1b:fa:05:bd:3e:d1:06:
         a4:68:e2:5e:54:ac:2a:7e:ef:e4:54:89:b9:4e:6c:3d:4a:61:
         3d:cc:d0:a4:86:52:ed:54:ca:34:d7:62:16:21:d9:87:87:b3:
         77:db:c7:e3:06:8a:ef:62:ee:cf:6e:e8:4f:1a:13:e3:17:11:
         e3:7b:ee:6a:95:d0:1d:5d:3e:83:74:98:40:45:f3:c9:01:5d:
         3d:a8:6f:5d:d1:e4:09:93:a3:8d:b5:3f:90:80:34:08:da:d0:
         de:10:1c:82:89:0f:79:8d:1c:f4:5c:e2:2d:ce:71:64:46:df:
         0c:fe:9b:96
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE
RUY4QzNEM0IwHhcNMjYwNDMwMTkyNDIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYzYWM2NS0zNTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoevAe6P9q7YgpoUldbcUTacbmfHXnQiOBm3SiZr2BPGrdSv/M7EeLk91T4hG
DNme4HKrb13wuiKwPHFM22wWQ34eflhveL/3320kAW0LaT5Z9fTJPDhB+Ia6hm10
6EtEZNWa7FCSdEkkBJL3yK/jjlumHE6/h8VXg5aza+CSpUIrlFbIokcNp5P+wLtI
u3uxJrXiVsTlSossnG6eKphfCAi07/MQlSJ+n0w2LHUp4kROh76DMuyduJEo6aey
03XTl5WAMvgu1LY5OX7+w9+LafdthmdW2sVm+6A87tOd4p9ODid8xzHASQrt8IO0
ayD8UDIYsiGDCcswIkh/EbgiOQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFCBwRLsQ
5dAwsydBnY7QKzP9j56GMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB
QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UwQTgvMEM0NzQ5MEFFQUIzMTFFQjk4MTFBNDY1QzRGOUFFMDIvNzhENEZGRUVF
QUI0MTFFQjk1QkZCNTY2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAVXFGAwQAW8fRMA0GCSqGSIb3DQEBCwUAA4IBAQBucgJ6Sj3GzopE
w3igpzErAqBDolrHiyZ1RTr+nxAmMaSrq/QVoyw32X5zm9iwr2wKJjtR4EqIWnXJ
uVzM4o1uARw9m8njCO0qgnWIouWFWp+B9uZoS/N+IuCXj3v39jdm2Bi+/uyPVvcT
5drS7Dzs3k7s0KgPcIY0MMoOfNfTFP/F2NGqeuitaRv6Bb0+0QakaOJeVKwqfu/k
VIm5Tmw9SmE9zNCkhlLtVMo012IWIdmHh7N328fjBorvYu7PbuhPGhPjFxHje+5q
ldAdXT6DdJhARfPJAV09qG9d0eQJk6ONtT+QgDQI2tDeEByCiQ95jRz0XOItznFk
Rt8M/puW
-----END CERTIFICATE-----
Generated at Wed May 13 03:36:36 2026 by rpki-client