Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/A6F6E9E43C6E11F19CBF2AC991833773.roa
File:                     A6F6E9E43C6E11F19CBF2AC991833773.roa (raw, json)
Hash identifier:          46x0HcGyg5ZqbRk9Z/I39DBeqCVUcYGSuLiYKPf2rpo=
Subject key identifier:   82:B0:D4:6C:4C:A7:9F:56:19:81:7E:BF:81:32:B5:C3:28:2D:D6:86
Certificate issuer:       /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial:       01FF
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/A6F6E9E43C6E11F19CBF2AC991833773.roa
Signing time:             Mon 20 Apr 2026 04:08:57 +0000
ROA not before:           Mon 20 Apr 2026 04:08:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     38456
IP address blocks:        192.245.108.0/24 maxlen: 24
                          192.245.109.0/24 maxlen: 24
                          192.245.110.0/24 maxlen: 24
                          192.245.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
        Validity
            Not Before: Apr 20 04:08:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e5a6d9-f289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:ab:f2:3f:64:a6:c7:7f:c5:31:e2:16:03:
                    e4:25:2d:6e:80:b2:84:14:00:2c:9d:fe:04:71:f9:
                    a8:05:19:19:64:64:2a:d4:02:ad:24:c7:6b:74:25:
                    d4:13:93:9b:8b:52:01:8a:85:18:73:76:4b:7f:62:
                    66:90:90:56:31:db:06:f0:1f:55:95:ea:56:74:cf:
                    06:5f:c2:72:04:2f:cf:52:cf:1a:62:8a:e8:d4:6d:
                    e4:ff:b3:2b:a9:3a:ec:a4:9e:c3:d9:83:25:3e:66:
                    78:1b:f6:7c:cf:31:df:ad:78:e7:d4:98:19:68:8b:
                    98:f4:c0:a4:26:38:79:3b:a1:25:bd:53:d6:b5:80:
                    7f:fd:c5:10:22:c3:5e:d4:dc:19:22:af:5d:9c:5c:
                    d5:d7:30:56:2b:00:3c:f7:27:6a:fe:b1:b8:5d:4f:
                    0b:99:05:0a:71:2d:8f:df:e8:8c:01:97:c0:e1:b6:
                    ac:08:8a:41:57:7f:53:42:f4:7d:bc:31:dd:7c:48:
                    2d:f5:0d:b2:3d:9c:65:6d:57:b7:74:4e:ab:c8:96:
                    84:7c:1c:03:23:54:35:01:cf:76:fd:80:e0:ab:86:
                    a6:e8:54:c2:7a:dc:33:50:f5:9f:7b:e0:11:fe:26:
                    e3:a7:72:1a:96:5b:0e:93:0a:17:a1:67:8e:56:4c:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B0:D4:6C:4C:A7:9F:56:19:81:7E:BF:81:32:B5:C3:28:2D:D6:86
            X509v3 Authority Key Identifier:
                keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/A6F6E9E43C6E11F19CBF2AC991833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.108.0-192.245.110.255
                  192.245.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:94:f4:f0:4a:fb:2a:f6:ed:bf:9a:eb:a6:a1:af:b0:24:bd:
         61:1e:57:0b:1d:da:f7:fd:37:a8:db:ef:44:65:ba:04:08:b7:
         79:30:02:d6:a8:92:84:d0:b1:8b:ad:aa:23:dc:be:19:f6:20:
         10:23:3f:09:d3:49:2c:0e:32:75:c0:a0:41:d0:93:3e:33:cc:
         07:6d:8c:da:25:6e:b9:77:57:40:14:ab:87:fd:0c:d8:de:c6:
         be:85:c2:c3:bd:38:6c:39:87:f2:f6:81:73:10:3f:93:98:cd:
         12:db:91:9f:56:b1:84:b6:95:fc:26:ed:01:71:e7:b6:e4:73:
         32:2c:ca:f5:f6:47:59:2e:7f:c8:f0:bc:65:e3:94:72:f4:fa:
         c5:51:de:7e:50:cb:94:47:63:92:dc:c6:7d:61:0c:29:3d:61:
         07:9b:fc:f9:c5:0b:54:f4:87:97:fe:94:2f:30:b0:63:d4:55:
         7a:ce:0f:ac:f6:64:72:c4:2c:a8:61:7c:fd:d6:31:ee:74:5d:
         6f:b0:e0:76:2a:fe:6f:6d:b1:03:4e:63:69:73:04:d9:d6:fa:
         6d:2b:dd:87:8b:96:0f:f8:c9:4c:6b:5c:32:c2:ce:60:51:2a:
         5e:2f:16:01:10:bb:9f:20:42:74:d9:6a:af:48:14:dd:96:b2:
         49:49:ca:95
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB
RkU1QUQzQjgwHhcNMjYwNDIwMDQwODU3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU1YTZkOS1mMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApVSr8j9kpsd/xTHiFgPkJS1ugLKEFAAsnf4EcfmoBRkZZGQq1AKtJMdrdCXU
E5Obi1IBioUYc3ZLf2JmkJBWMdsG8B9VlepWdM8GX8JyBC/PUs8aYoro1G3k/7Mr
qTrspJ7D2YMlPmZ4G/Z8zzHfrXjn1JgZaIuY9MCkJjh5O6ElvVPWtYB//cUQIsNe
1NwZIq9dnFzV1zBWKwA89ydq/rG4XU8LmQUKcS2P3+iMAZfA4basCIpBV39TQvR9
vDHdfEgt9Q2yPZxlbVe3dE6ryJaEfBwDI1Q1Ac92/YDgq4am6FTCetwzUPWfe+AR
/ibjp3IallsOkwoXoWeOVkxmFQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFIKw1GxM
p59WGYF+v4EytcMoLdaGMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy
NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0ZGNjIvMTFGNEQ4RDA2MjYyMTFFRTgwQkM4NTVEQzRGOUFFMDIvQTZGNkU5RTQz
QzZFMTFGMTlDQkYyQUM5OTE4MzM3NzMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUMAwDBALA9WwDBADA9W4DBADA9XAwDQYJKoZIhvcNAQELBQADggEBAKSU
9PBK+yr27b+a66ahr7AkvWEeVwsd2vf9N6jb70RlugQIt3kwAtaokoTQsYutqiPc
vhn2IBAjPwnTSSwOMnXAoEHQkz4zzAdtjNolbrl3V0AUq4f9DNjexr6FwsO9OGw5
h/L2gXMQP5OYzRLbkZ9WsYS2lfwm7QFx57bkczIsyvX2R1kuf8jwvGXjlHL0+sVR
3n5Qy5RHY5Lcxn1hDCk9YQeb/PnFC1T0h5f+lC8wsGPUVXrOD6z2ZHLELKhhfP3W
Me50XW+w4HYq/m9tsQNOY2lzBNnW+m0r3YeLlg/4yUxrXDLCzmBRKl4vFgEQu58g
QnTZaq9IFN2WsklJypU=
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:16 2026 by rpki-client