Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
File:                     E30E4FF605E511EF868E0F6DC4F9AE02.roa (raw, json)
Hash identifier:          fPHnV7tC8/TIuQ+hNAsVmv5SckAHXIfMYlrVkbpdH1g=
Subject key identifier:   07:E9:E6:F3:68:84:82:6C:2B:65:63:B3:DE:39:E2:35:1F:C3:32:0F
Certificate issuer:       /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial:       0164
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:05:00 +0000
ROA not before:           Sat 19 Apr 2025 05:31:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152650
IP address blocks:        202.6.86.0/24 maxlen: 24
                          2001:df3:8ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
        Validity
            Not Before: Apr 19 05:31:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5a71c-5530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:79:32:16:b8:6d:d4:55:7d:04:4d:3b:75:d5:
                    52:0c:e3:4e:d8:91:b5:ae:50:15:5d:fc:ec:0e:70:
                    3a:a9:a7:a1:4c:18:30:29:a4:3d:67:9f:49:cb:b9:
                    c9:50:c5:2d:27:55:1e:c9:ab:a7:18:20:65:b0:2b:
                    0d:1f:99:77:96:08:1a:16:d7:ea:af:e8:7f:93:bd:
                    ff:70:11:98:f6:5d:18:d4:56:b5:63:5d:c2:71:0f:
                    0e:72:3d:ec:84:db:60:7d:5e:48:9a:97:50:b0:56:
                    16:1b:ad:cb:b4:49:24:d8:54:c9:4a:54:c4:68:0f:
                    2c:11:5a:34:77:55:a3:30:37:92:c9:b8:6c:d9:e4:
                    a8:52:fa:1b:c2:ef:99:1b:c0:ca:76:7c:26:02:0e:
                    f8:37:ba:b6:f3:22:d3:54:69:ea:e0:d5:7a:34:63:
                    e2:7e:79:25:1a:fe:b4:2c:a2:df:d8:34:07:52:db:
                    10:ae:eb:29:3c:3e:4a:e0:1f:87:6a:a9:03:cf:20:
                    3d:ae:16:9c:1d:c4:c8:6a:ea:c0:4c:b9:2b:43:c2:
                    80:ba:bb:f8:82:0b:75:30:08:dc:92:46:e8:d8:ce:
                    f1:6b:f3:af:0b:e6:31:0a:e6:27:68:d1:a0:75:6b:
                    e9:56:4e:bb:d0:15:50:49:bd:65:17:0d:03:e8:f4:
                    06:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E9:E6:F3:68:84:82:6C:2B:65:63:B3:DE:39:E2:35:1F:C3:32:0F
            X509v3 Authority Key Identifier:
                keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.86.0/24
                IPv6:
                  2001:df3:8ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:37:48:69:c2:e0:81:1c:39:48:de:63:06:81:b1:3f:92:
         27:ac:8d:3e:e2:14:28:fb:fa:6a:bb:7e:dc:e9:3e:8a:d6:15:
         c5:eb:d6:bc:7e:9d:94:01:ce:60:bc:32:6f:b6:8d:61:cb:6e:
         b6:27:71:ba:0a:6a:f8:98:8d:d0:20:80:c6:d3:67:9b:8c:f1:
         40:87:fb:18:ad:be:1f:00:8d:4b:f5:51:df:fb:b3:64:77:64:
         10:dd:8f:cc:34:93:0f:17:bd:31:87:ab:9a:43:53:93:60:5d:
         ab:31:9d:08:b9:ce:5d:75:ed:c5:4f:f9:ae:28:74:3b:75:76:
         35:5d:af:f6:c7:94:d0:17:d0:5d:eb:53:09:bb:9a:37:de:e5:
         2c:19:32:f0:02:12:2a:4e:4c:9f:f3:38:be:56:bc:6d:12:d7:
         01:3c:06:4c:35:a5:e9:5b:85:93:8e:58:ba:19:83:63:48:88:
         6f:f8:af:06:6f:c0:c3:fa:68:e1:3b:3f:c9:3f:aa:2c:82:f9:
         17:69:cb:18:ba:27:0e:b4:10:ab:5b:42:f5:ff:d2:bb:00:08:
         cc:17:07:7c:d9:6c:07:fc:c8:60:e3:64:05:5b:6e:b6:67:23:
         92:85:2b:5e:95:a8:a0:bc:5e:b8:6b:bd:50:f6:97:01:ca:89:
         fe:2f:60:e0
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3
QkU4NjU0MTYwHhcNMjUwNDE5MDUzMTIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTcxYy01NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXkyFrht1FV9BE07ddVSDONO2JG1rlAVXfzsDnA6qaehTBgwKaQ9Z59Jy7nJ
UMUtJ1UeyaunGCBlsCsNH5l3lggaFtfqr+h/k73/cBGY9l0Y1Fa1Y13CcQ8Ocj3s
hNtgfV5ImpdQsFYWG63LtEkk2FTJSlTEaA8sEVo0d1WjMDeSybhs2eSoUvobwu+Z
G8DKdnwmAg74N7q28yLTVGnq4NV6NGPifnklGv60LKLf2DQHUtsQruspPD5K4B+H
aqkDzyA9rhacHcTIaurATLkrQ8KAurv4ggt1MAjckkbo2M7xa/OvC+YxCuYnaNGg
dWvpVk670BVQSb1lFw0D6PQGZQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAfp5vNo
hIJsK2Vjs9454jUfwzIPMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1
RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW
QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTUyMTMvNTU0M0JDQzQwNUU1MTFFRkFCNDYxQzA5QzRGOUFFMDIvRTMwRTRGRjYw
NUU1MTFFRjg2OEUwRjZEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAygZWMA8EAgACMAkDBwAgAQ3zjsAwDQYJKoZIhvcNAQELBQADggEB
AGWdN0hpwuCBHDlI3mMGgbE/kiesjT7iFCj7+mq7ftzpPorWFcXr1rx+nZQBzmC8
Mm+2jWHLbrYncboKaviYjdAggMbTZ5uM8UCH+xitvh8AjUv1Ud/7s2R3ZBDdj8w0
kw8XvTGHq5pDU5NgXasxnQi5zl117cVP+a4odDt1djVdr/bHlNAX0F3rUwm7mjfe
5SwZMvACEipOTJ/zOL5WvG0S1wE8Bkw1pelbhZOOWLoZg2NIiG/4rwZvwMP6aOE7
P8k/qiyC+Rdpyxi6Jw60EKtbQvX/0rsACMwXB3zZbAf8yGDjZAVbbrZnI5KFK16V
qKC8XrhrvVD2lwHKif4vYOA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:54 2026 by rpki-client