Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/09820DBA626411EEB46F7861C4F9AE02.roa
File:                     09820DBA626411EEB46F7861C4F9AE02.roa (raw, json)
Hash identifier:          ZCeCkuNAMK9rwX4/TECTij2fUOVdG//HOrl/aGbqzoQ=
Subject key identifier:   FF:60:0B:70:3B:B0:EA:06:1C:DA:09:F2:83:E6:B7:44:C0:B6:ED:F0
Certificate issuer:       /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial:       01E6
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/09820DBA626411EEB46F7861C4F9AE02.roa
Signing time:             Mon 09 Mar 2026 03:37:04 +0000
ROA not before:           Mon 09 Mar 2026 03:37:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        192.245.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
        Validity
            Not Before: Mar  9 03:37:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ae4060-24c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:5c:38:b8:fe:38:3b:f0:0b:4f:71:3b:95:
                    9a:e4:c1:fc:78:7c:66:63:b8:ed:6b:44:b4:50:0c:
                    96:80:9e:25:75:e3:67:12:97:90:c4:d5:d8:04:9b:
                    06:72:88:6e:25:55:dc:84:e7:35:bd:94:c3:fc:16:
                    99:48:3b:a3:54:8f:bd:8c:29:4c:8a:c8:65:a6:fc:
                    20:b9:0d:2a:c5:7e:3b:a3:25:b1:7a:e7:8b:3b:6e:
                    35:27:ac:cb:f2:34:d2:35:76:c6:4c:74:fe:63:36:
                    68:71:45:0c:28:b3:50:9e:5e:4a:f2:9d:d4:77:55:
                    98:6c:c9:4a:8c:ac:79:a4:99:4d:91:d8:a2:32:26:
                    46:c9:3a:03:7e:d5:88:e1:7b:6b:fb:2f:30:87:4a:
                    b3:b5:51:49:b1:1f:03:09:c5:ab:37:d7:2d:4b:7c:
                    d4:b1:f1:2b:8b:ef:57:9b:0a:13:bf:ed:88:87:e2:
                    4c:9c:2f:67:75:fe:01:77:9b:f1:eb:fc:5a:01:b7:
                    ea:7c:7f:fc:15:89:ac:52:f9:ee:4e:81:65:08:6a:
                    14:1d:14:51:99:4f:71:9f:52:9d:c2:58:bf:4d:ce:
                    13:6e:e4:a3:08:b3:58:38:f4:d6:7f:38:93:87:41:
                    06:38:28:7e:d3:70:67:0c:76:be:24:d0:fc:73:d8:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:60:0B:70:3B:B0:EA:06:1C:DA:09:F2:83:E6:B7:44:C0:B6:ED:F0
            X509v3 Authority Key Identifier:
                keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/09820DBA626411EEB46F7861C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:ab:32:06:19:a3:62:24:ad:d0:50:ef:d0:87:62:3f:1f:
         a6:7c:01:15:2b:e7:9c:2e:05:63:ac:b3:01:eb:60:29:0b:b1:
         12:5a:de:f2:a2:96:44:a0:44:77:23:1a:25:22:02:3e:8d:7d:
         a4:31:5c:21:20:a9:fa:74:38:f9:67:4b:29:48:a6:7c:ed:0a:
         dc:72:8b:1f:bc:27:a1:3a:ee:e4:5f:69:53:51:a6:94:a1:37:
         6e:c4:20:3b:72:3c:31:a0:a8:30:e9:db:f9:c7:e0:32:c3:24:
         e5:6b:ee:f2:b5:59:35:7c:db:88:c1:56:de:83:a5:8c:5a:72:
         3d:82:20:37:83:36:ba:36:17:32:04:7e:27:0f:43:e9:cd:da:
         92:1b:22:a0:dd:a9:8a:25:5a:1d:fb:05:1d:e5:9f:f3:c8:3b:
         e0:ef:50:8f:8b:98:16:94:a2:80:c1:34:e3:7a:e8:aa:5e:40:
         48:7c:49:ca:97:45:d1:7e:d8:94:b3:a7:52:b1:ed:62:b0:9a:
         01:15:26:66:43:db:96:2e:63:c0:94:56:14:2e:fb:52:95:31:
         07:ab:26:ac:b4:75:6b:9f:6c:4c:c7:7a:0f:29:6a:12:2a:5c:
         ed:5a:6c:0c:4b:ca:6f:d1:cd:85:7c:43:b9:23:07:c8:ae:1b:
         ad:bb:73:24
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB
RkU1QUQzQjgwHhcNMjYwMzA5MDMzNzA0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFlNDA2MC0yNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHxcOLj+ODvwC09xO5Wa5MH8eHxmY7jta0S0UAyWgJ4ldeNnEpeQxNXYBJsG
cohuJVXchOc1vZTD/BaZSDujVI+9jClMishlpvwguQ0qxX47oyWxeueLO241J6zL
8jTSNXbGTHT+YzZocUUMKLNQnl5K8p3Ud1WYbMlKjKx5pJlNkdiiMiZGyToDftWI
4Xtr+y8wh0qztVFJsR8DCcWrN9ctS3zUsfEri+9XmwoTv+2Ih+JMnC9ndf4Bd5vx
6/xaAbfqfH/8FYmsUvnuToFlCGoUHRRRmU9xn1Kdwli/Tc4TbuSjCLNYOPTWfziT
h0EGOCh+03BnDHa+JND8c9j19wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP9gC3A7
sOoGHNoJ8oPmt0TAtu3wMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy
NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0ZGNjIvMTFGNEQ4RDA2MjYyMTFFRTgwQkM4NTVEQzRGOUFFMDIvMDk4MjBEQkE2
MjY0MTFFRUI0NkY3ODYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwPVqMA0GCSqGSIb3DQEBCwUAA4IBAQByW6syBhmjYiSt0FDv0Idi
Px+mfAEVK+ecLgVjrLMB62ApC7ESWt7yopZEoER3IxolIgI+jX2kMVwhIKn6dDj5
Z0spSKZ87QrccosfvCehOu7kX2lTUaaUoTduxCA7cjwxoKgw6dv5x+AywyTla+7y
tVk1fNuIwVbeg6WMWnI9giA3gza6NhcyBH4nD0PpzdqSGyKg3amKJVod+wUd5Z/z
yDvg71CPi5gWlKKAwTTjeuiqXkBIfEnKl0XRftiUs6dSse1isJoBFSZmQ9uWLmPA
lFYULvtSlTEHqyastHVrn2xMx3oPKWoSKlztWmwMS8pv0c2FfEO5IwfIrhutu3Mk
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:18 2026 by rpki-client