Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa
File:                     0D0517EE716911EDA03D4A50C4F9AE02.roa (raw, json)
Hash identifier:          nakZIPQfffO0uZEHw27fT4z3k3GDCsWzaN+ntwn2Q8o=
Subject key identifier:   5F:BC:41:F8:2A:14:B7:67:E5:4F:73:32:69:19:D7:C8:7C:C9:D6:E0
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       0D93
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa
Signing time:             Wed 04 Nov 2026 23:45:50 +0000
ROA not before:           Wed 04 Nov 2026 23:45:50 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     23664
IP address blocks:        118.185.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
                          rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Nov  4 23:45:50 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aebc3ae-8485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:12:ac:d3:c9:55:ae:45:26:77:bb:49:7d:
                    8e:cd:4c:fa:fd:e6:e0:59:b4:3a:24:d1:c7:67:72:
                    ff:ef:32:8d:52:e1:0a:ed:e6:6c:35:01:39:bd:ce:
                    bb:5d:f8:25:b7:89:a5:39:9c:7c:71:30:ef:6a:67:
                    a8:07:c1:aa:93:e3:d2:99:28:ca:f0:db:9c:30:37:
                    d0:d9:b2:f9:1a:72:35:67:75:69:62:d9:b8:3f:cb:
                    85:05:57:a7:f3:f8:41:19:62:b1:b9:34:d0:1e:f7:
                    3a:cb:70:38:60:9c:b0:a9:42:cb:ce:3a:17:e3:a8:
                    64:a3:bf:de:a6:aa:20:bc:32:22:da:05:80:e7:10:
                    94:e1:10:1d:2d:6f:ce:bf:ab:30:40:f4:a9:c5:eb:
                    a0:57:08:0c:05:38:bd:76:a8:3e:0d:32:f0:3c:1c:
                    ea:ef:b4:3d:58:01:cf:c3:be:b9:58:ef:cb:f7:10:
                    03:0d:e0:a3:87:55:a2:07:73:4c:91:cb:90:c0:86:
                    88:24:e7:59:9d:83:4e:f9:97:eb:c0:33:4d:ce:f0:
                    5d:20:41:bb:a3:fc:bf:3b:18:7b:7b:3a:d1:4f:3b:
                    ca:c3:db:f9:ab:31:0d:85:2a:06:e3:15:b5:f9:29:
                    04:bf:78:33:6a:7b:99:27:a1:f6:83:16:01:ab:21:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BC:41:F8:2A:14:B7:67:E5:4F:73:32:69:19:D7:C8:7C:C9:D6:E0
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0D0517EE716911EDA03D4A50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.185.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:80:6a:d7:28:bb:58:0e:48:71:5a:a2:10:c3:42:15:84:0e:
         c4:46:7d:6d:e6:6a:ff:7d:9a:76:bf:1c:c3:ed:45:f4:27:98:
         eb:7b:2e:b8:0a:98:ad:74:a0:30:e5:2d:0d:a7:8a:8c:5d:53:
         13:2b:8d:a4:ab:3c:1f:3a:17:20:52:be:f0:9a:44:f3:c9:83:
         e4:7a:d6:fa:95:de:55:89:56:0a:39:cd:ed:33:4c:d1:44:e9:
         78:d8:d8:31:c4:0f:b3:8b:63:08:56:2f:6c:e1:f8:6a:27:d5:
         10:db:97:65:d8:bb:03:f6:17:57:2b:b0:ee:27:50:af:06:39:
         17:eb:4f:54:54:83:12:9a:04:c3:1c:cc:5a:fc:70:73:d4:26:
         8a:a1:94:41:24:a6:03:49:13:49:ee:2e:24:30:60:53:08:38:
         f1:ea:53:5a:01:e5:15:b6:09:42:3a:9e:fd:94:5e:9e:43:41:
         da:9c:d2:1e:9f:4b:00:bc:d5:2f:18:4f:c8:d1:7a:4f:5e:2e:
         43:9b:79:f1:53:66:75:4e:1e:3d:79:a8:6d:35:7f:49:18:05:
         d9:c2:ca:04:1d:df:89:17:bd:80:9a:c3:99:2f:b6:e8:0e:5b:
         2e:23:e4:6f:bc:5d:b7:1c:6d:4b:de:29:b2:c0:c8:80:5f:58:
         32:1b:ce:e2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjYxMTA0MjM0NTUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWViYzNhZS04NDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAphMSrNPJVa5FJne7SX2OzUz6/ebgWbQ6JNHHZ3L/7zKNUuEK7eZsNQE5vc67
Xfglt4mlOZx8cTDvameoB8Gqk+PSmSjK8NucMDfQ2bL5GnI1Z3VpYtm4P8uFBVen
8/hBGWKxuTTQHvc6y3A4YJywqULLzjoX46hko7/epqogvDIi2gWA5xCU4RAdLW/O
v6swQPSpxeugVwgMBTi9dqg+DTLwPBzq77Q9WAHPw765WO/L9xADDeCjh1WiB3NM
kcuQwIaIJOdZnYNO+ZfrwDNNzvBdIEG7o/y/Oxh7ezrRTzvKw9v5qzENhSoG4xW1
+SkEv3gzanuZJ6H2gxYBqyHmmQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF+8Qfgq
FLdn5U9zMmkZ18h8ydbgMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEQwNTE3RUU3
MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdrlgMA0GCSqGSIb3DQEBCwUAA4IBAQCKgGrXKLtYDkhxWqIQw0IV
hA7ERn1t5mr/fZp2vxzD7UX0J5jrey64CpitdKAw5S0Np4qMXVMTK42kqzwfOhcg
Ur7wmkTzyYPketb6ld5ViVYKOc3tM0zRROl42NgxxA+zi2MIVi9s4fhqJ9UQ25dl
2LsD9hdXK7DuJ1CvBjkX609UVIMSmgTDHMxa/HBz1CaKoZRBJKYDSRNJ7i4kMGBT
CDjx6lNaAeUVtglCOp79lF6eQ0HanNIen0sAvNUvGE/I0XpPXi5Dm3nxU2Z1Th49
eahtNX9JGAXZwsoEHd+JF72AmsOZL7boDlsuI+RvvF23HG1L3imywMiAX1gyG87i
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:37 2026 by rpki-client