Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
File:                     E30E4FF605E511EF868E0F6DC4F9AE02.roa (raw, json)
Hash identifier:          MmWFM1dURxQD1o2oF69cp1HxMUdsdeEfUuFqXRdwgSw=
Subject key identifier:   54:59:FE:54:AA:CB:6F:AF:EF:23:30:B4:0A:43:C6:61:0F:63:19:4C
Certificate issuer:       /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial:       0186
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 05:41:08 +0000
ROA not before:           Wed 29 Apr 2026 05:41:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152650
IP address blocks:        202.6.86.0/24 maxlen: 24
                          2001:df3:8ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
        Validity
            Not Before: Apr 29 05:41:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f199f3-13d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:47:7b:95:12:be:3c:91:e0:da:7d:04:80:
                    dc:6c:0c:eb:7b:3e:1e:d6:c7:a5:50:83:a1:f0:27:
                    d2:f0:72:3a:ff:b2:ec:61:f5:75:a1:22:c7:c5:81:
                    eb:81:6c:04:77:1d:39:c9:b0:62:85:a0:91:02:72:
                    46:8e:65:6e:0f:e0:0e:26:4f:5d:ab:da:2a:f3:c1:
                    ae:f2:0d:90:d8:58:cd:92:bb:4d:48:ff:2e:fc:31:
                    b6:d6:31:e1:81:2a:10:d6:4f:d6:ba:2b:89:bb:76:
                    03:dd:4d:8b:e2:b7:6e:5c:c2:f4:3a:ab:69:a5:d9:
                    69:b4:c4:e4:16:3f:61:d9:31:68:ee:10:9f:7a:95:
                    88:ff:37:4d:f5:0b:76:55:4f:50:2b:6a:f4:cd:0b:
                    6c:49:bd:04:9a:b4:39:b6:09:89:ee:71:b3:35:99:
                    b2:0f:ed:6e:e1:cd:ab:5e:28:25:4a:c7:82:c7:19:
                    2c:8e:d0:64:80:6b:82:dc:d3:cf:02:40:49:a4:ab:
                    c4:3c:23:46:1c:41:0a:5d:a7:ce:14:f7:13:35:73:
                    80:83:94:72:cd:00:ea:30:1c:6d:ba:ae:e0:5a:98:
                    60:f7:fa:32:4b:a1:c0:26:55:84:57:0b:f6:5e:72:
                    84:d3:d9:70:d9:49:ae:a8:2f:c5:4f:4b:7b:61:3a:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:59:FE:54:AA:CB:6F:AF:EF:23:30:B4:0A:43:C6:61:0F:63:19:4C
            X509v3 Authority Key Identifier:
                keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.86.0/24
                IPv6:
                  2001:df3:8ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:33:00:86:9d:01:56:95:da:16:b7:84:11:d1:ef:a2:67:1e:
         10:26:b6:3c:c1:ae:7d:43:c8:36:01:40:21:07:80:bc:4e:13:
         47:99:fc:ea:39:e8:dc:6d:bf:dc:0e:d7:87:18:8e:8e:28:1e:
         4e:70:db:74:7a:bd:d9:92:3d:83:bc:b4:2c:86:8b:d4:fe:ec:
         85:55:50:7c:9b:c2:ff:59:bb:68:cc:fc:e6:11:78:f1:81:9c:
         4e:d1:24:58:40:7b:2e:97:e4:cb:96:3e:f7:a6:73:ac:b7:6d:
         4a:d6:b6:2b:ec:68:3b:55:30:7d:8d:3a:64:e1:ab:50:6c:49:
         5b:5e:fd:e5:28:bf:d5:c0:d7:bd:00:ec:be:f7:63:29:27:0e:
         c7:b6:d5:31:35:f7:fd:a4:14:aa:df:5f:a9:b6:8c:da:3c:7d:
         d5:0f:80:e2:39:0b:14:c7:e8:2b:1e:f3:e3:5b:e6:b6:8a:ae:
         1a:cd:11:6d:12:3f:54:ac:c0:b8:a9:ad:8b:0f:d8:00:5a:da:
         20:1e:01:fd:2e:91:e8:23:3b:d6:be:ff:7c:6c:82:29:76:d1:
         9b:b3:d2:f7:af:e3:f4:5a:dc:5c:bf:75:47:25:7a:a9:c8:f4:
         14:8f:fe:b1:41:53:ca:44:02:66:23:37:95:79:cf:e3:f1:07:
         f0:9b:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:12 2026 by rpki-client