Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/FA82DFB83ACB11EC9FEBB367C4F9AE02.roa
File:                     FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (raw, json)
Hash identifier:          c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=
Subject key identifier:   A5:1E:0C:CA:6D:04:9A:E6:22:90:8C:01:0D:47:30:2F:ED:53:FC:13
Certificate issuer:       /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial:       0634
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/FA82DFB83ACB11EC9FEBB367C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 19:24:20 +0000
ROA not before:           Thu 30 Apr 2026 19:24:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133752
IP address blocks:        85.113.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
        Validity
            Not Before: Apr 30 19:24:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3ac64-a37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:f3:c0:42:0f:8f:1d:ed:af:cf:84:dc:97:
                    b9:e4:76:b8:1c:4e:f7:4c:10:e8:e8:88:a1:4a:41:
                    9f:c9:73:b5:cc:11:e6:23:8d:9a:fd:49:b0:bb:67:
                    d0:05:eb:31:54:76:2a:ff:62:ae:2c:91:28:76:13:
                    0f:1c:4a:a3:75:1b:42:2a:41:dc:be:a4:3d:99:b0:
                    db:cb:aa:1f:bf:33:e6:f3:bf:25:26:aa:de:fd:2a:
                    d0:ac:56:dd:b3:da:9c:6e:08:0e:61:92:73:a6:1e:
                    9a:9a:d7:86:93:fa:ea:49:0c:5e:7b:0a:a1:dc:a8:
                    62:07:3c:40:24:2e:51:ee:ba:4b:8a:08:24:2e:74:
                    ac:e3:c4:b4:a1:58:d2:97:bd:86:de:86:18:56:d5:
                    c2:3e:fd:88:cc:d4:dd:06:aa:7a:52:42:c6:53:88:
                    f8:a0:00:67:08:c0:63:76:c3:c3:e2:ab:ef:96:60:
                    da:a7:2b:63:d7:df:97:ea:72:d9:a9:39:ac:2c:c5:
                    36:78:c5:f7:bb:d9:3b:d8:bf:a5:f0:bf:56:ae:82:
                    6b:de:4a:d6:07:23:5c:f6:9f:f5:fb:cf:32:bd:d1:
                    cf:3a:a3:33:5d:a3:a6:3e:c4:6d:c5:b9:a1:38:7b:
                    9b:2d:0f:8e:ef:3e:40:8d:90:97:2f:d4:5b:e9:00:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1E:0C:CA:6D:04:9A:E6:22:90:8C:01:0D:47:30:2F:ED:53:FC:13
            X509v3 Authority Key Identifier:
                keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/FA82DFB83ACB11EC9FEBB367C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.113.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:18:bf:49:ee:71:c8:b0:2e:59:5a:09:75:29:3e:59:17:81:
         3f:eb:53:55:7c:d4:06:65:75:79:eb:21:1e:ef:be:58:9e:c1:
         02:3e:34:95:6b:fd:64:74:1c:85:a1:fd:1b:67:14:35:03:3a:
         17:8f:16:08:73:cf:f1:c1:3a:a8:40:9c:2e:99:43:68:b2:cb:
         38:9c:05:fa:47:0c:cb:5c:1a:4f:39:9b:fb:6e:80:e9:13:c3:
         70:a2:5f:7b:26:53:fe:46:5f:c7:99:f8:51:f0:7a:cd:5e:a3:
         55:ab:29:d5:00:f8:29:8b:6c:17:57:c7:fc:5b:4b:ab:73:32:
         c6:71:58:58:11:ee:2d:20:db:ec:0e:53:5f:9b:7e:90:69:cf:
         82:6e:82:8a:56:a3:40:37:81:13:ed:78:8c:23:e5:2d:cc:f7:
         b6:9a:96:aa:43:09:e9:55:b9:1c:f2:c4:31:2a:89:a8:8f:12:
         5d:36:dd:84:b5:bc:cf:f5:a9:c3:09:14:38:2f:31:e4:8b:62:
         5b:03:47:fb:e5:ef:1a:1d:c8:97:56:b8:aa:78:30:2f:00:ee:
         bf:f5:00:fd:9b:44:64:1a:17:59:5c:f9:d0:f6:bf:5c:29:81:
         7f:19:8f:57:03:22:ca:91:a6:e5:25:52:f2:5d:a4:af:d8:80:
         09:97:f4:2f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE
RUY4QzNEM0IwHhcNMjYwNDMwMTkyNDIwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYzYWM2NC1hMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGHzwEIPjx3tr8+E3Je55Ha4HE73TBDo6IihSkGfyXO1zBHmI42a/Umwu2fQ
BesxVHYq/2KuLJEodhMPHEqjdRtCKkHcvqQ9mbDby6ofvzPm878lJqre/SrQrFbd
s9qcbggOYZJzph6amteGk/rqSQxeewqh3KhiBzxAJC5R7rpLiggkLnSs48S0oVjS
l72G3oYYVtXCPv2IzNTdBqp6UkLGU4j4oABnCMBjdsPD4qvvlmDapytj19+X6nLZ
qTmsLMU2eMX3u9k72L+l8L9WroJr3krWByNc9p/1+88yvdHPOqMzXaOmPsRtxbmh
OHubLQ+O7z5AjZCXL9Rb6QCBhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKUeDMpt
BJrmIpCMAQ1HMC/tU/wTMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB
QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0UwQTgvMEM0NzQ5MEFFQUIzMTFFQjk4MTFBNDY1QzRGOUFFMDIvRkE4MkRGQjgz
QUNCMTFFQzlGRUJCMzY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAVXFHMA0GCSqGSIb3DQEBCwUAA4IBAQA2GL9J7nHIsC5ZWgl1KT5Z
F4E/61NVfNQGZXV56yEe775YnsECPjSVa/1kdByFof0bZxQ1AzoXjxYIc8/xwTqo
QJwumUNosss4nAX6RwzLXBpPOZv7boDpE8Nwol97JlP+Rl/HmfhR8HrNXqNVqynV
APgpi2wXV8f8W0urczLGcVhYEe4tINvsDlNfm36Qac+CboKKVqNAN4ET7XiMI+Ut
zPe2mpaqQwnpVbkc8sQxKomojxJdNt2EtbzP9anDCRQ4LzHki2JbA0f75e8aHciX
VriqeDAvAO6/9QD9m0RkGhdZXPnQ9r9cKYF/GY9XAyLKkablJVLyXaSv2IAJl/Qv
-----END CERTIFICATE-----
Generated at Wed May 13 06:07:21 2026 by rpki-client