Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/41527E061CFB11F1BAE9C5A3413D8C67.roa
File:                     41527E061CFB11F1BAE9C5A3413D8C67.roa (raw, json)
Hash identifier:          AA4gBjxlDFvAHeJBtHXm9algpg/YYgqK825E6bjNQcI=
Subject key identifier:   0B:6E:52:59:9A:A3:2F:91:C8:53:7E:B8:36:09:CB:96:E1:6F:D4:91
Certificate issuer:       /CN=A91918AB/serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
Certificate serial:       2E
Authority key identifier: 66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/41527E061CFB11F1BAE9C5A3413D8C67.roa
Signing time:             Wed 11 Mar 2026 03:38:03 +0000
ROA not before:           Wed 11 Mar 2026 03:38:03 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142168
IP address blocks:        198.56.24.0/23 maxlen: 23
                          198.56.24.0/24 maxlen: 24
                          198.56.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl
                          rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91918AB, serialNumber=662EC9A2B7B6CE42D23A5238534C657622325372
        Validity
            Not Before: Mar 11 03:38:03 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69b0e39b-0098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d8:3a:b5:79:16:56:40:8a:ce:ed:8b:46:7f:
                    56:b2:f5:05:ec:a8:3b:a4:3f:44:b0:15:b3:82:91:
                    16:3b:2a:0a:84:9b:51:16:c1:5f:9b:e3:41:01:e9:
                    1a:14:56:99:e0:4c:8e:50:47:92:d2:e3:0e:7d:c4:
                    51:ba:76:34:c4:5d:17:51:5d:8f:02:4c:4b:81:ed:
                    9a:8c:28:f7:0f:cb:df:5d:e5:c4:ed:dd:9d:1e:d1:
                    67:a2:0c:3a:92:29:35:e4:c7:4c:29:8f:65:03:f9:
                    d5:02:41:be:9f:28:b6:af:cf:d8:74:8f:8d:4e:fe:
                    27:5c:c3:a1:9b:d5:46:15:21:36:be:ba:f5:2c:83:
                    a9:b5:72:71:4d:68:03:a2:c9:a3:3d:ff:7e:5e:cb:
                    e9:f7:72:39:1d:d1:6c:bd:1a:73:a0:9c:14:53:b4:
                    aa:75:c8:14:8c:66:a7:07:14:cb:80:db:99:2d:40:
                    ea:28:42:b2:3f:f7:d9:97:2e:66:5c:85:0b:dd:c1:
                    c8:d4:95:d8:88:4f:4e:1c:9b:ea:1e:aa:15:6e:2b:
                    5c:5c:38:6d:a8:1f:91:1a:dc:15:4e:f3:df:b6:31:
                    dc:cc:d8:76:a2:3b:3b:64:88:a6:73:c6:ca:cd:4a:
                    21:15:12:68:03:87:e4:6e:bb:f5:20:da:af:6c:13:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6E:52:59:9A:A3:2F:91:C8:53:7E:B8:36:09:CB:96:E1:6F:D4:91
            X509v3 Authority Key Identifier:
                keyid:66:2E:C9:A2:B7:B6:CE:42:D2:3A:52:38:53:4C:65:76:22:32:53:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/Zi7Jore2zkLSOlI4U0xldiIyU3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zi7Jore2zkLSOlI4U0xldiIyU3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91918AB/8A5797DCE94111F0BFD6CE333C6F56BC/41527E061CFB11F1BAE9C5A3413D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.56.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:19:0c:6f:d7:6d:bf:d6:89:9e:56:af:e1:d6:3e:9c:62:ae:
         1c:27:56:5a:d9:d4:a0:ad:7d:03:49:f9:76:92:48:e4:e1:5f:
         f0:1b:dc:fa:06:db:86:bc:de:c4:ac:de:79:ac:b8:fd:18:64:
         9f:5a:6d:25:d8:2f:f5:d7:70:79:64:a2:ec:03:df:70:4c:9e:
         0e:0d:6c:e3:4a:1c:0f:ad:c4:ac:26:92:37:39:97:49:ae:de:
         b6:81:ff:52:6c:a8:8a:82:85:d4:6a:8d:39:bd:de:8d:bf:f6:
         46:fb:d4:4b:55:31:fc:55:99:13:e4:ef:2d:fd:b9:cb:58:68:
         e0:6a:a5:64:38:05:82:af:1e:df:4f:54:76:ed:fa:e2:0c:ff:
         1f:c8:5b:f8:be:3e:23:d4:f3:26:c0:a5:98:3f:f3:ad:2c:ae:
         fe:41:11:5c:1c:ff:46:3a:be:f1:76:50:ef:27:bb:01:a2:78:
         ac:26:cc:1d:ee:ac:87:4f:82:60:2c:24:48:ba:49:16:2f:0e:
         f5:87:b6:37:f2:04:00:f7:72:8f:14:d1:8d:98:a5:2f:8f:78:
         a8:96:1d:e2:4a:b5:27:e7:dd:ac:e0:f3:dd:cf:10:39:dc:8e:
         76:3f:49:b1:d7:d7:f3:10:86:42:ab:ec:c2:3c:c3:ac:cd:ab:
         1e:ba:1f:5d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MThBQjExMC8GA1UEBRMoNjYyRUM5QTJCN0I2Q0U0MkQyM0E1MjM4NTM0QzY1NzYy
MjMyNTM3MjAeFw0yNjAzMTEwMzM4MDNaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YjBlMzliLTAwOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDT2Dq1eRZWQIrO7YtGf1ay9QXsqDukP0SwFbOCkRY7KgqEm1EWwV+b40EB6RoU
VpngTI5QR5LS4w59xFG6djTEXRdRXY8CTEuB7ZqMKPcPy99d5cTt3Z0e0WeiDDqS
KTXkx0wpj2UD+dUCQb6fKLavz9h0j41O/idcw6Gb1UYVITa+uvUsg6m1cnFNaAOi
yaM9/35ey+n3cjkd0Wy9GnOgnBRTtKp1yBSMZqcHFMuA25ktQOooQrI/99mXLmZc
hQvdwcjUldiIT04cm+oeqhVuK1xcOG2oH5Ea3BVO89+2MdzM2HaiOztkiKZzxsrN
SiEVEmgDh+Ruu/Ug2q9sE7ZxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUC25SWZqj
L5HIU364NgnLluFv1JEwHwYDVR0jBBgwFoAUZi7Jore2zkLSOlI4U0xldiIyU3Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxOEFCLzhBNTc5N0RDRTk0
MTExRjBCRkQ2Q0UzMzNDNkY1NkJDL1ppN0pvcmUyemtMU09sSTRVMHhsZGlJeVUz
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWmk3Sm9yZTJ6a0xTT2xJNFUweGxkaUl5VTNJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MThBQi84QTU3OTdEQ0U5NDExMUYwQkZENkNFMzMzQzZGNTZCQy80MTUyN0UwNjFD
RkIxMUYxQkFFOUM1QTM0MTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAHGOBgwDQYJKoZIhvcNAQELBQADggEBAAYZDG/Xbb/WiZ5Wr+HWPpxi
rhwnVlrZ1KCtfQNJ+XaSSOThX/Ab3PoG24a83sSs3nmsuP0YZJ9abSXYL/XXcHlk
ouwD33BMng4NbONKHA+txKwmkjc5l0mu3raB/1JsqIqChdRqjTm93o2/9kb71EtV
MfxVmRPk7y39uctYaOBqpWQ4BYKvHt9PVHbt+uIM/x/IW/i+PiPU8ybApZg/860s
rv5BEVwc/0Y6vvF2UO8nuwGieKwmzB3urIdPgmAsJEi6SRYvDvWHtjfyBAD3co8U
0Y2YpS+PeKiWHeJKtSfn3azg893PEDncjnY/SbHX1/MQhkKr7MI8w6zNqx66H10=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:18:24 2026 by rpki-client