Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ECCA3004DAF511F1B6D296720366CEF9.roa
File:                     ECCA3004DAF511F1B6D296720366CEF9.roa (raw, json)
Hash identifier:          qk/1D18OHVddUqhyo3O3hneY5ZTMc69sLvwHhmQXWRQ=
Subject key identifier:   07:3A:6C:64:20:B7:F0:A1:31:DC:F5:A9:04:89:C9:46:6F:2A:A1:74
Certificate issuer:       /CN=A91A6D85/serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
Certificate serial:       27
Authority key identifier: 8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ECCA3004DAF511F1B6D296720366CEF9.roa
Signing time:             Sat 07 Nov 2026 21:55:20 +0000
ROA not before:           Sat 07 Nov 2026 21:55:20 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     152586
IP address blocks:        163.52.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 09:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D85, serialNumber=8B17C26151F1141D69C15834B44E18EB1867FE3B
        Validity
            Not Before: Nov  7 21:55:20 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aef9e48-0802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:88:9a:ef:a9:01:04:2a:da:3d:c5:51:1e:
                    1a:bb:6b:06:fb:14:53:76:01:ef:1c:6a:9f:44:d0:
                    e6:87:29:4a:92:8c:f1:6a:3b:1a:05:a3:92:19:99:
                    e5:16:af:46:db:6d:d4:f2:b8:00:0a:49:5a:03:fb:
                    84:fa:4a:5a:61:0a:7c:ba:f6:0d:c4:7a:35:82:e6:
                    05:b7:9d:54:9f:4a:6e:d0:80:85:a3:5c:e8:a8:cf:
                    69:2a:b7:7a:de:bd:8f:35:a0:7a:ca:6e:fd:d6:74:
                    26:34:c3:ca:c4:ca:33:0a:2b:76:09:69:32:9a:83:
                    be:1e:dc:80:b8:48:73:b8:ba:5e:4d:1b:d7:a0:c4:
                    00:dc:ec:60:e0:fa:91:54:a9:88:a5:04:84:94:9d:
                    e3:9c:f9:d7:f6:2d:d7:be:16:f3:d8:99:22:56:bd:
                    e4:80:9f:56:a7:30:6a:38:11:ef:03:6c:40:10:c9:
                    d3:67:97:22:34:f3:bc:08:73:20:ed:e1:e8:9d:aa:
                    8a:29:54:03:4b:0b:2b:7a:fb:37:bb:77:69:6e:70:
                    9f:88:ce:64:4f:94:b1:40:74:2f:f0:52:d1:84:14:
                    3a:ec:ea:cd:c1:49:38:fb:e5:b4:cc:94:3f:9f:cf:
                    ee:bc:37:54:a4:4c:73:a5:8b:58:0c:9f:04:46:da:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3A:6C:64:20:B7:F0:A1:31:DC:F5:A9:04:89:C9:46:6F:2A:A1:74
            X509v3 Authority Key Identifier:
                keyid:8B:17:C2:61:51:F1:14:1D:69:C1:58:34:B4:4E:18:EB:18:67:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ixfCYVHxFB1pwVg0tE4Y6xhn_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ixfCYVHxFB1pwVg0tE4Y6xhn_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D85/670AF18CAA3111F18B1F7B5D5011F970/ECCA3004DAF511F1B6D296720366CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f5:2f:ed:bb:ab:9d:0b:b5:96:b7:6a:88:80:e6:4b:f3:e9:ce:
         8d:f2:0f:32:87:57:4c:0e:8c:68:e4:f2:ea:5b:ea:d6:d3:7f:
         1d:19:62:68:b1:31:71:ed:29:d8:3f:17:b5:01:ea:5b:2d:12:
         df:e5:6e:b0:98:50:46:af:32:23:02:38:6b:07:90:a4:53:86:
         9d:ed:84:17:13:13:b9:9a:65:46:8e:34:0d:54:78:b6:cf:b7:
         a0:4d:ec:be:7e:72:be:ea:59:87:9a:2d:f7:d8:b2:b4:e5:42:
         92:f4:d4:51:a0:5c:aa:10:62:f3:4b:78:45:12:57:4c:18:12:
         7e:c7:5f:50:27:62:32:be:a7:f1:e4:70:24:ce:fd:24:30:2a:
         62:52:51:ae:23:3c:e1:25:37:a1:9b:a6:3c:4d:15:17:fc:43:
         0d:82:3b:5b:fd:a7:7a:ce:51:34:c7:7f:72:8d:c6:0b:e9:22:
         f7:2a:cc:db:c8:f5:53:76:5b:83:94:ba:f5:e9:d4:a2:47:1c:
         23:27:2c:da:80:1c:7c:e2:0f:83:43:1e:43:64:ab:5a:cf:68:
         71:c6:11:94:f5:d6:10:7d:75:a5:59:a4:81:10:5c:ff:ce:b0:
         5c:56:4b:20:f1:71:b8:04:30:1e:68:a4:b4:b3:07:45:22:99:
         db:af:3b:36
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
NkQ4NTExMC8GA1UEBRMoOEIxN0MyNjE1MUYxMTQxRDY5QzE1ODM0QjQ0RTE4RUIx
ODY3RkUzQjAeFw0yNjExMDcyMTU1MjBaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZWY5ZTQ4LTA4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCx+Yia76kBBCraPcVRHhq7awb7FFN2Ae8cap9E0OaHKUqSjPFqOxoFo5IZmeUW
r0bbbdTyuAAKSVoD+4T6SlphCny69g3EejWC5gW3nVSfSm7QgIWjXOioz2kqt3re
vY81oHrKbv3WdCY0w8rEyjMKK3YJaTKag74e3IC4SHO4ul5NG9egxADc7GDg+pFU
qYilBISUneOc+df2Lde+FvPYmSJWveSAn1anMGo4Ee8DbEAQydNnlyI087wIcyDt
4eidqoopVANLCyt6+ze7d2lucJ+IzmRPlLFAdC/wUtGEFDrs6s3BSTj75bTMlD+f
z+68N1SkTHOli1gMnwRG2pjBAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUBzpsZCC3
8KEx3PWpBInJRm8qoXQwHwYDVR0jBBgwFoAUixfCYVHxFB1pwVg0tE4Y6xhn/jsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RDg1LzY3MEFGMThDQUEz
MTExRjE4QjFGN0I1RDUwMTFGOTcwL2l4ZkNZVkh4RkIxcHdWZzB0RTRZNnhobl9q
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaXhmQ1lWSHhGQjFwd1ZnMHRFNFk2eGhuX2pzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkQ4NS82NzBBRjE4Q0FBMzExMUYxOEIxRjdCNUQ1MDExRjk3MC9FQ0NBMzAwNERB
RjUxMUYxQjZEMjk2NzIwMzY2Q0VGOS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGjNDgwDQYJKoZIhvcNAQELBQADggEBAPUv7burnQu1lrdqiIDmS/Pp
zo3yDzKHV0wOjGjk8upb6tbTfx0ZYmixMXHtKdg/F7UB6lstEt/lbrCYUEavMiMC
OGsHkKRThp3thBcTE7maZUaONA1UeLbPt6BN7L5+cr7qWYeaLffYsrTlQpL01FGg
XKoQYvNLeEUSV0wYEn7HX1AnYjK+p/HkcCTO/SQwKmJSUa4jPOElN6GbpjxNFRf8
Qw2CO1v9p3rOUTTHf3KNxgvpIvcqzNvI9VN2W4OUuvXp1KJHHCMnLNqAHHziD4ND
HkNkq1rPaHHGEZT11hB9daVZpIEQXP/OsFxWSyDxcbgEMB5opLSzB0UimduvOzY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:49:39 2026 by rpki-client