Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/041C4116C47C11F0A98A0F0AC4F9AE02.roa
File:                     041C4116C47C11F0A98A0F0AC4F9AE02.roa (raw, json)
Hash identifier:          BPY9qoNeYWzlLwvoaoRX50Iw3DoG+I+GVeT0e2qxzvk=
Subject key identifier:   31:E3:F6:F5:05:FD:B9:D0:95:E3:E3:30:71:92:AB:52:D9:B4:9D:17
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       0D9B
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/041C4116C47C11F0A98A0F0AC4F9AE02.roa
Signing time:             Wed 04 Nov 2026 23:48:58 +0000
ROA not before:           Wed 04 Nov 2026 23:48:58 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        124.247.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3483 (0xd9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Nov  4 23:48:58 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aebc46a-63e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:26:33:82:5a:dd:05:d5:e7:91:1e:ff:fd:
                    53:a0:da:b2:5a:f3:51:cb:0c:63:8e:48:7e:61:d4:
                    bb:aa:a1:f7:a5:b9:b2:5e:5b:74:21:d6:16:7b:55:
                    b1:f3:84:40:a9:48:bb:86:33:e4:7a:5e:8f:31:47:
                    3b:0c:ea:b6:22:b6:91:f9:8f:01:6a:40:b9:a9:05:
                    07:9e:d5:58:9f:52:fd:ae:c4:53:f4:a7:c7:55:ab:
                    60:2f:1e:97:27:76:ef:cb:cf:45:17:e3:e8:72:22:
                    0f:44:25:a8:a6:c8:62:13:78:11:0a:f5:eb:d3:56:
                    77:9a:17:33:81:b9:25:93:72:e5:f5:5b:27:38:36:
                    45:0b:fa:f4:d1:b9:5b:30:82:0e:47:28:dc:78:dd:
                    66:b0:31:95:05:5f:cd:63:3e:d5:e4:fe:e8:a9:4c:
                    b6:d3:1a:10:96:a6:53:e5:46:d9:f3:6a:26:b0:fe:
                    ae:16:7c:34:c9:eb:45:d6:e5:54:d1:01:67:4a:ab:
                    d3:42:b3:45:2f:f5:b0:13:d5:c3:a4:20:29:50:34:
                    4e:42:2e:79:40:ec:67:b9:59:08:6a:fb:9e:b8:bc:
                    33:fe:2f:22:46:5d:7d:f9:62:41:9b:07:c5:88:26:
                    6d:5e:a4:2e:5d:f8:af:3c:55:e9:25:d8:3b:a8:0d:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E3:F6:F5:05:FD:B9:D0:95:E3:E3:30:71:92:AB:52:D9:B4:9D:17
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/041C4116C47C11F0A98A0F0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b1:a8:34:bf:73:19:30:52:82:87:4a:ef:d7:fe:eb:a6:96:
         41:27:99:93:e1:35:3f:87:14:33:67:85:f9:f8:51:d8:1e:fe:
         a2:21:47:bd:95:8e:b9:56:52:bf:22:46:ba:fa:15:db:5c:47:
         26:63:5c:17:bb:a4:e2:af:50:f0:f0:9b:75:fe:1c:0b:04:66:
         6f:db:d3:3d:d3:05:39:21:e6:eb:99:04:01:e3:b0:ed:76:04:
         b5:5b:b9:e6:73:7a:33:56:ec:03:3e:80:d9:40:eb:8e:cf:b0:
         0d:a5:2a:4a:dc:f1:77:4a:71:95:29:6a:00:f7:f3:01:61:ad:
         1e:81:5e:87:cc:43:b8:d6:1d:e9:64:37:f7:b4:80:ad:3c:44:
         ac:d9:73:df:cf:e0:44:a6:37:88:59:7f:5b:d9:61:78:23:4e:
         2d:07:3f:4b:94:09:ba:5f:17:0d:6f:a4:3a:ac:d8:35:38:35:
         bf:9d:f0:73:fd:47:67:b5:c9:1d:31:bb:44:3f:93:71:b6:11:
         9e:f1:80:db:c1:b1:83:08:96:bc:2d:11:48:10:e3:8b:b0:51:
         40:0a:66:b0:12:c8:c4:28:a5:a3:8b:d1:72:aa:98:64:be:72:
         80:b1:5c:6d:72:ae:66:32:34:77:50:34:ec:43:40:7b:a1:d2:
         01:98:58:b7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjYxMTA0MjM0ODU4WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWViYzQ2YS02M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdMmM4Ja3QXV55Ee//1ToNqyWvNRywxjjkh+YdS7qqH3pbmyXlt0IdYWe1Wx
84RAqUi7hjPkel6PMUc7DOq2IraR+Y8BakC5qQUHntVYn1L9rsRT9KfHVatgLx6X
J3bvy89FF+PociIPRCWopshiE3gRCvXr01Z3mhczgbklk3Ll9VsnODZFC/r00blb
MIIORyjceN1msDGVBV/NYz7V5P7oqUy20xoQlqZT5UbZ82omsP6uFnw0yetF1uVU
0QFnSqvTQrNFL/WwE9XDpCApUDROQi55QOxnuVkIavueuLwz/i8iRl19+WJBmwfF
iCZtXqQuXfivPFXpJdg7qA0I4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDHj9vUF
/bnQlePjMHGSq1LZtJ0XMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMDQxQzQxMTZD
NDdDMTFGMEE5OEEwRjBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAfPfyMA0GCSqGSIb3DQEBCwUAA4IBAQA7sag0v3MZMFKCh0rv1/7r
ppZBJ5mT4TU/hxQzZ4X5+FHYHv6iIUe9lY65VlK/Ika6+hXbXEcmY1wXu6Tir1Dw
8Jt1/hwLBGZv29M90wU5IebrmQQB47DtdgS1W7nmc3ozVuwDPoDZQOuOz7ANpSpK
3PF3SnGVKWoA9/MBYa0egV6HzEO41h3pZDf3tICtPESs2XPfz+BEpjeIWX9b2WF4
I04tBz9LlAm6XxcNb6Q6rNg1ODW/nfBz/UdntckdMbtEP5NxthGe8YDbwbGDCJa8
LRFIEOOLsFFACmawEsjEKKWji9FyqphkvnKAsVxtcq5mMjR3UDTsQ0B7odIBmFi3
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:29:12 2026 by rpki-client