Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D21ED/C94554C6B0FA11F18D2E5BA93911F970/0F5E8680B0FB11F183F181AC3911F970.roa
File:                     0F5E8680B0FB11F183F181AC3911F970.roa (raw, json)
Hash identifier:          xIue3m/pHqFoxAQrXbg113u+a6tmB6/OTFpRK8qnTPM=
Subject key identifier:   86:35:EE:55:A5:8D:03:64:24:CC:F0:72:11:70:A2:FC:1D:23:39:CE
Certificate issuer:       /CN=A91D21ED/serialNumber=ED0730AA7F2D867AC8F794312D78769238CEABD7
Certificate serial:       02
Authority key identifier: ED:07:30:AA:7F:2D:86:7A:C8:F7:94:31:2D:78:76:92:38:CE:AB:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Qcwqn8thnrI95QxLXh2kjjOq9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D21ED/C94554C6B0FA11F18D2E5BA93911F970/0F5E8680B0FB11F183F181AC3911F970.roa
Signing time:             Tue 15 Sep 2026 11:46:17 +0000
ROA not before:           Tue 15 Sep 2026 11:46:17 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154838
IP address blocks:        163.52.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D21ED/C94554C6B0FA11F18D2E5BA93911F970/7Qcwqn8thnrI95QxLXh2kjjOq9c.crl
                          rsync://rpki.apnic.net/member_repository/A91D21ED/C94554C6B0FA11F18D2E5BA93911F970/7Qcwqn8thnrI95QxLXh2kjjOq9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Qcwqn8thnrI95QxLXh2kjjOq9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D21ED, serialNumber=ED0730AA7F2D867AC8F794312D78769238CEABD7
        Validity
            Not Before: Sep 15 11:46:17 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa93008-9906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:11:ef:2c:bb:9d:2a:e2:d0:d1:35:1d:56:
                    2a:f6:7b:26:a5:38:fc:d0:3c:67:25:9c:96:4d:bb:
                    05:b8:5c:96:5c:ee:66:06:28:73:ae:ba:fe:47:68:
                    75:5e:91:86:ff:f9:f6:55:5a:64:08:3b:19:fa:7b:
                    26:84:08:d6:7a:28:ab:3b:6b:28:54:ff:ad:53:25:
                    c7:4b:ac:0c:74:58:e1:8d:97:a0:70:df:d0:89:d7:
                    df:6f:da:11:28:b0:ea:7f:4c:f1:74:fc:bc:66:3c:
                    f0:36:e9:1f:38:1a:34:1b:40:44:8c:94:0f:9a:f7:
                    35:52:83:80:4a:69:0d:1c:54:41:5d:f3:b2:ec:a3:
                    46:87:d1:c9:15:b7:72:eb:31:8d:42:62:0c:b4:37:
                    b6:92:9c:f2:a3:5b:94:67:c2:06:aa:3c:e5:fa:fa:
                    f9:18:20:50:c7:14:c4:47:5a:cd:55:93:06:cc:34:
                    92:ca:46:5e:da:8f:7e:bb:f5:8d:28:83:33:67:08:
                    43:8b:c3:fc:4e:72:d9:03:70:d6:e8:e4:9c:d9:c2:
                    4a:23:4f:39:1f:38:d1:f0:df:11:e5:98:7c:f0:bb:
                    9c:be:f7:fe:f6:9f:79:ca:20:3e:ba:3d:d6:36:60:
                    99:70:e4:51:9f:22:8e:da:f6:ae:7e:a5:d8:a6:4f:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:35:EE:55:A5:8D:03:64:24:CC:F0:72:11:70:A2:FC:1D:23:39:CE
            X509v3 Authority Key Identifier:
                keyid:ED:07:30:AA:7F:2D:86:7A:C8:F7:94:31:2D:78:76:92:38:CE:AB:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D21ED/C94554C6B0FA11F18D2E5BA93911F970/7Qcwqn8thnrI95QxLXh2kjjOq9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Qcwqn8thnrI95QxLXh2kjjOq9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D21ED/C94554C6B0FA11F18D2E5BA93911F970/0F5E8680B0FB11F183F181AC3911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:b2:05:c2:09:e1:4f:69:fa:38:86:49:9e:62:c6:1e:6e:
         84:13:16:75:d4:ee:b6:35:f4:3e:39:91:11:5f:0f:70:5a:b1:
         27:9c:f0:3a:6b:d2:75:b6:8d:7b:11:dd:7e:a6:7a:9f:56:72:
         49:81:90:67:50:2d:82:bb:2e:f0:2c:ad:78:20:cd:a5:6c:c4:
         96:07:9a:d8:a0:8d:2d:3b:70:5d:24:4e:ca:d4:be:46:be:31:
         46:ae:44:92:19:bd:df:c5:77:47:94:21:02:9a:43:e2:1d:45:
         4c:5a:e9:db:0b:3b:86:4c:1c:b0:09:ee:18:53:f3:d0:bb:ee:
         04:4f:37:2c:e6:de:88:80:d2:f7:92:56:af:72:02:4f:92:ae:
         ed:a9:17:27:32:52:6d:80:89:7c:02:be:6b:42:ca:c1:25:0e:
         ab:ee:2a:b4:5c:df:89:f8:55:0e:c4:84:e7:c7:58:a2:8f:df:
         f4:ec:38:ff:22:a5:92:64:f1:ce:ee:ae:74:61:9f:ec:8c:3e:
         92:15:7f:3d:f1:54:fc:ec:03:9c:88:d0:52:30:5f:b1:8b:ee:
         b6:53:d7:35:e3:54:b4:9a:18:e0:47:65:8e:7b:1f:ad:63:c2:
         ae:c9:e5:e8:16:6f:bf:21:5f:fa:15:7f:87:e0:66:38:65:72:
         e7:8f:68:b5
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MjFFRDExMC8GA1UEBRMoRUQwNzMwQUE3RjJEODY3QUM4Rjc5NDMxMkQ3ODc2OTIz
OENFQUJENzAeFw0yNjA5MTUxMTQ2MTdaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTkzMDA4LTk5MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8QhHvLLudKuLQ0TUdVir2eyalOPzQPGclnJZNuwW4XJZc7mYGKHOuuv5HaHVe
kYb/+fZVWmQIOxn6eyaECNZ6KKs7ayhU/61TJcdLrAx0WOGNl6Bw39CJ199v2hEo
sOp/TPF0/LxmPPA26R84GjQbQESMlA+a9zVSg4BKaQ0cVEFd87Lso0aH0ckVt3Lr
MY1CYgy0N7aSnPKjW5RnwgaqPOX6+vkYIFDHFMRHWs1VkwbMNJLKRl7aj3679Y0o
gzNnCEOLw/xOctkDcNbo5JzZwkojTzkfONHw3xHlmHzwu5y+9/72n3nKID66PdY2
YJlw5FGfIo7a9q5+pdimT71DAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUhjXuVaWN
A2QkzPByEXCi/B0jOc4wHwYDVR0jBBgwFoAU7Qcwqn8thnrI95QxLXh2kjjOq9cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyMUVEL0M5NDU1NEM2QjBG
QTExRjE4RDJFNUJBOTM5MTFGOTcwLzdRY3dxbjh0aG5ySTk1UXhMWGgya2pqT3E5
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN1Fjd3FuOHRobnJJOTVReExYaDJrampPcTljLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjFFRC9DOTQ1NTRDNkIwRkExMUYxOEQyRTVCQTkzOTExRjk3MC8wRjVFODY4MEIw
RkIxMUYxODNGMTgxQUMzOTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGjNAgwDQYJKoZIhvcNAQELBQADggEBABLVsgXCCeFPafo4hkmeYsYe
boQTFnXU7rY19D45kRFfD3BasSec8Dpr0nW2jXsR3X6mep9WckmBkGdQLYK7LvAs
rXggzaVsxJYHmtigjS07cF0kTsrUvka+MUauRJIZvd/Fd0eUIQKaQ+IdRUxa6dsL
O4ZMHLAJ7hhT89C77gRPNyzm3oiA0veSVq9yAk+Sru2pFycyUm2AiXwCvmtCysEl
DqvuKrRc34n4VQ7EhOfHWKKP3/TsOP8ipZJk8c7urnRhn+yMPpIVfz3xVPzsA5yI
0FIwX7GL7rZT1zXjVLSaGOBHZY57H61jwq7J5egWb78hX/oVf4fgZjhlcuePaLU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:57:20 2026 by rpki-client