Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa
File:                     6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (raw, json)
Hash identifier:          p9m+Ky6KPaxoCxqhurBlkPRkCfywo+5r7qphI33Ipdo=
Subject key identifier:   E9:5B:4D:D5:97:91:5F:82:97:CB:FB:6D:DC:7E:19:E3:8C:6D:9D:8A
Certificate issuer:       /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
Certificate serial:       01B2
Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:05:30 +0000
ROA not before:           Sun 11 Jan 2026 03:23:10 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        36.50.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4
        Validity
            Not Before: Jan 11 03:23:10 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4399a-f346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ab:67:f7:f7:97:86:27:d4:ab:dd:88:16:00:
                    31:cd:2c:8c:82:91:ef:08:17:ac:81:84:72:dc:ee:
                    de:c5:48:d1:7f:59:2b:25:6b:22:25:7c:24:37:25:
                    1b:59:1c:b9:b0:b5:76:98:4b:6b:e9:80:1f:32:e7:
                    de:29:c1:a0:76:8c:70:d6:68:2e:30:b7:62:8f:6a:
                    1f:60:77:bd:15:ed:d9:1f:44:35:21:52:3f:c0:e0:
                    6c:1c:86:00:eb:e4:c2:15:90:f4:64:fc:37:89:31:
                    18:ca:98:52:54:6b:33:b4:e0:35:cf:9c:90:b0:53:
                    88:85:cf:08:e3:81:97:b6:2e:ec:cd:09:f1:94:66:
                    03:ce:71:20:9d:d6:1d:99:e6:99:2e:19:d9:50:d4:
                    32:82:35:46:6e:b4:25:81:31:38:56:a7:ed:8f:b3:
                    30:ba:b8:fc:ab:97:ba:29:fb:7d:10:a0:cb:07:3b:
                    b5:e6:15:63:04:47:17:f7:bb:a1:06:f2:89:c5:f3:
                    6e:cf:cc:0d:5a:48:9e:44:12:5e:e0:6d:d4:a0:60:
                    3a:2b:5c:3d:91:6e:4b:26:3b:ca:72:24:6d:d9:da:
                    f3:d0:41:c0:d9:f1:3b:9d:82:e3:44:05:f3:a7:4f:
                    6c:ef:13:26:69:0b:5e:da:56:34:84:ee:f9:74:57:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5B:4D:D5:97:91:5F:82:97:CB:FB:6D:DC:7E:19:E3:8C:6D:9D:8A
            X509v3 Authority Key Identifier:
                keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:80:17:bf:fc:1c:53:53:a0:1f:7f:cc:31:2c:1a:91:91:df:
         f6:26:b1:45:07:8a:50:b3:46:58:29:05:d7:4a:86:66:bf:31:
         95:cf:3f:b0:76:b3:70:6f:0c:74:94:37:83:10:f0:9b:e7:79:
         68:03:49:97:d0:58:db:e0:a8:98:f7:86:40:cf:98:40:6e:99:
         cd:b4:9d:c7:55:a1:d7:e4:87:22:a5:83:56:a2:d2:e4:2a:47:
         fd:9c:8e:05:d2:eb:4b:42:ee:44:88:58:64:45:85:8c:fc:0f:
         a0:c3:72:a1:53:7b:ca:9c:b6:58:86:23:06:64:0a:ba:52:07:
         69:35:5f:2d:8a:80:9f:74:7d:6e:77:56:5f:e2:de:fe:2a:f6:
         98:8f:94:3b:42:4c:0c:2c:4d:ad:31:cd:78:42:73:65:95:a1:
         91:54:ac:6d:c0:fd:ce:ad:cb:8c:ad:4b:ea:d1:96:1d:85:a6:
         21:de:e0:c4:81:8e:76:f2:34:9c:f7:d5:28:1e:a6:c0:26:6c:
         00:4e:73:d4:1c:7d:eb:18:a7:82:ef:06:f8:a4:58:95:94:0c:
         57:62:eb:1e:ae:67:b1:c7:95:5f:91:af:43:fd:c0:ac:a2:4e:
         f1:f9:b2:d7:fc:e4:45:e3:57:92:a3:f7:35:01:75:be:ae:f7:
         12:08:c6:da
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5
ODkzQjg3RDQwHhcNMjYwMTExMDMyMzEwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mzk5YS1mMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+6tn9/eXhifUq92IFgAxzSyMgpHvCBesgYRy3O7exUjRf1krJWsiJXwkNyUb
WRy5sLV2mEtr6YAfMufeKcGgdoxw1mguMLdij2ofYHe9Fe3ZH0Q1IVI/wOBsHIYA
6+TCFZD0ZPw3iTEYyphSVGsztOA1z5yQsFOIhc8I44GXti7szQnxlGYDznEgndYd
meaZLhnZUNQygjVGbrQlgTE4Vqftj7Mwurj8q5e6Kft9EKDLBzu15hVjBEcX97uh
BvKJxfNuz8wNWkieRBJe4G3UoGA6K1w9kW5LJjvKciRt2drz0EHA2fE7nYLjRAXz
p09s7xMmaQte2lY0hO75dFel4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOlbTdWX
kV+Cl8v7bdx+GeOMbZ2KMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE
NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzRGMjgvRjU3RkQwQjg4RDU2MTFFRTk3ODdFNzgzQzRGOUFFMDIvNkRBQjEwOUU4
REYxMTFFRUE1QkI0QTFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAJDICMA0GCSqGSIb3DQEBCwUAA4IBAQBZgBe//BxTU6Aff8wxLBqR
kd/2JrFFB4pQs0ZYKQXXSoZmvzGVzz+wdrNwbwx0lDeDEPCb53loA0mX0Fjb4KiY
94ZAz5hAbpnNtJ3HVaHX5IcipYNWotLkKkf9nI4F0utLQu5EiFhkRYWM/A+gw3Kh
U3vKnLZYhiMGZAq6UgdpNV8tioCfdH1ud1Zf4t7+KvaYj5Q7QkwMLE2tMc14QnNl
laGRVKxtwP3OrcuMrUvq0ZYdhaYh3uDEgY528jSc99UoHqbAJmwATnPUHH3rGKeC
7wb4pFiVlAxXYusermexx5Vfka9D/cCsok7x+bLX/ORF41eSo/c1AXW+rvcSCMba
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:57 2026 by rpki-client