Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0F106C42E9BF11EB9287F045C4F9AE02.roa
File:                     0F106C42E9BF11EB9287F045C4F9AE02.roa (raw, json)
Hash identifier:          ImQGC/7LBUP+IHR55SxXrB6sYnhFgW4D92jiWXRtodU=
Subject key identifier:   EF:AB:94:13:0D:E7:33:1D:A2:A5:50:CF:9F:CC:60:87:38:A8:0F:A6
Certificate issuer:       /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial:       05FF
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0F106C42E9BF11EB9287F045C4F9AE02.roa
Signing time:             Mon 16 Mar 2026 22:29:33 +0000
ROA not before:           Mon 16 Mar 2026 22:29:33 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9408
IP address blocks:        192.69.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
                          rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
        Validity
            Not Before: Mar 16 22:29:33 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b8844d-8625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:1c:81:70:7d:6c:06:60:b6:c2:98:8d:bb:
                    a2:1b:3f:28:8d:dd:3c:cc:02:81:16:40:ee:c2:ef:
                    7b:6b:e8:25:e3:ad:34:e3:e2:50:9c:e8:69:9e:44:
                    ea:3d:1c:7e:ae:2a:7c:28:90:67:89:2b:7b:52:4b:
                    5a:68:3b:c4:73:92:48:b5:c8:82:ad:fe:3d:c8:ed:
                    a6:46:a4:21:e0:42:a4:b5:47:17:17:50:57:77:db:
                    13:6b:be:e6:de:fa:43:9d:8a:1e:9e:8c:09:82:b9:
                    4d:b1:e0:59:fd:31:b7:db:c1:32:68:e7:5f:c5:29:
                    b0:0f:67:01:2d:be:fc:e8:43:e3:cd:38:a2:6b:f2:
                    eb:14:e7:b8:19:39:0c:ec:11:23:c4:bc:e6:0a:d0:
                    c5:5b:ae:5d:0d:f9:ab:14:45:1e:e4:02:a8:df:30:
                    6b:43:c8:43:3b:4c:69:ad:3c:f9:c0:09:06:e9:0a:
                    85:f3:ab:2b:09:79:14:13:43:2f:d6:d2:a3:46:21:
                    32:24:14:0a:50:87:7a:ae:d3:b8:e7:12:8e:c6:eb:
                    2e:b2:43:f9:c0:6f:fd:8a:3c:08:7a:53:3f:16:9f:
                    86:68:49:b3:e8:a2:45:34:f0:2b:db:44:07:f1:87:
                    78:b4:6c:a0:cb:b7:50:8c:8c:cb:d5:bd:59:84:cd:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AB:94:13:0D:E7:33:1D:A2:A5:50:CF:9F:CC:60:87:38:A8:0F:A6
            X509v3 Authority Key Identifier:
                keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/0F106C42E9BF11EB9287F045C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:b8:2b:74:52:d9:d0:97:53:b8:c9:04:d1:94:e3:ad:88:
         a2:a9:6c:24:0c:fc:b8:8f:16:50:54:7e:16:4d:b2:ca:07:77:
         49:d9:da:7b:0e:24:49:59:3b:5e:60:66:e1:d7:58:59:9d:3e:
         04:46:38:6c:f0:17:fc:83:e3:8e:cc:ac:93:c8:4d:53:9f:58:
         1d:56:db:32:2d:83:59:43:97:79:66:be:7f:cf:1e:15:55:d8:
         5a:9c:ac:38:9b:7e:56:b9:79:37:c6:25:e8:8e:40:8d:62:39:
         55:75:b6:f8:fd:f4:de:43:21:35:d8:37:c2:7f:41:ea:9a:f2:
         58:96:8e:12:08:7f:54:c4:bf:fb:44:bc:66:e0:bb:73:52:ad:
         96:0a:e5:64:52:e8:70:92:57:ec:bb:82:5f:6e:b9:d7:6e:aa:
         75:50:1f:5c:0e:36:a8:0c:bf:8f:fa:81:a4:bb:e7:05:d5:d7:
         f1:cb:90:bf:ca:27:a8:64:b4:12:b4:10:05:db:6e:0c:2b:2c:
         bf:be:4d:f3:29:29:90:6a:93:47:e6:57:e4:fe:77:dd:0f:aa:
         ee:40:cd:c8:86:0e:45:6e:04:e4:7f:7d:d9:3b:72:ab:2e:f9:
         07:b6:1c:9f:b7:0d:71:ea:27:93:55:0c:ae:66:59:7a:be:ed:
         3b:6b:68:e9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCMzMxMTAvBgNVBAUTKEUzQ0QyNjI2MDdDQjc0MzRDOTg5OEY3QUVDRjZFN0Mz
NkEzNEY2OTMwHhcNMjYwMzE2MjIyOTMzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWI4ODQ0ZC04NjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA320cgXB9bAZgtsKYjbuiGz8ojd08zAKBFkDuwu97a+gl46004+JQnOhpnkTq
PRx+rip8KJBniSt7UktaaDvEc5JItciCrf49yO2mRqQh4EKktUcXF1BXd9sTa77m
3vpDnYoenowJgrlNseBZ/TG328EyaOdfxSmwD2cBLb786EPjzTiia/LrFOe4GTkM
7BEjxLzmCtDFW65dDfmrFEUe5AKo3zBrQ8hDO0xprTz5wAkG6QqF86srCXkUE0Mv
1tKjRiEyJBQKUId6rtO45xKOxususkP5wG/9ijwIelM/Fp+GaEmz6KJFNPAr20QH
8Yd4tGygy7dQjIzL1b1ZhM3uDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO+rlBMN
5zMdoqVQz5/MYIc4qA+mMB8GA1UdIwQYMBaAFOPNJiYHy3Q0yYmPeuz258NqNPaT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9CMkFCMzc1OEU5
QkQxMUVCODI1Qzc1MjZDNEY5QUUwMi80ODBtSmdmTGREVEppWTk2N1BibncybzA5
cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzQ4MG1KZ2ZMZERUSmlZOTY3UGJudzJvMDlwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCMzMvQjJBQjM3NThFOUJEMTFFQjgyNUM3NTI2QzRGOUFFMDIvMEYxMDZDNDJF
OUJGMTFFQjkyODdGMDQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwEV0MA0GCSqGSIb3DQEBCwUAA4IBAQA4q7grdFLZ0JdTuMkE0ZTj
rYiiqWwkDPy4jxZQVH4WTbLKB3dJ2dp7DiRJWTteYGbh11hZnT4ERjhs8Bf8g+OO
zKyTyE1Tn1gdVtsyLYNZQ5d5Zr5/zx4VVdhanKw4m35WuXk3xiXojkCNYjlVdbb4
/fTeQyE12DfCf0HqmvJYlo4SCH9UxL/7RLxm4LtzUq2WCuVkUuhwklfsu4JfbrnX
bqp1UB9cDjaoDL+P+oGku+cF1dfxy5C/yieoZLQStBAF224MKyy/vk3zKSmQapNH
5lfk/nfdD6ruQM3Ihg5FbgTkf33ZO3KrLvkHthyftw1x6ieTVQyuZll6vu07a2jp
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:55 2026 by rpki-client