Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
File:                     5415D510C68E11F0BC83973CC4F9AE02.roa (raw, json)
Hash identifier:          PhRLsqDQKZKtbRG6RFHUAVfVtgK8nsse16kNHaAg5Hk=
Subject key identifier:   7F:4C:1E:92:BF:DE:F6:75:D1:5E:9E:C5:30:6C:D3:8D:EB:79:61:04
Certificate issuer:       /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial:       015B
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
Signing time:             Fri 01 May 2026 05:38:29 +0000
ROA not before:           Fri 01 May 2026 05:38:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9650
IP address blocks:        192.88.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
                          rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
        Validity
            Not Before: May  1 05:38:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f43c55-c634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:43:43:8e:be:05:53:e8:b7:48:39:33:2c:81:
                    9a:f5:86:22:26:78:8c:65:1d:de:ad:64:b3:28:21:
                    00:fc:ed:2b:3a:8d:8d:bd:65:3a:9b:38:e5:7a:0d:
                    2c:2e:f9:29:09:d3:48:99:e1:5e:1b:70:85:06:77:
                    24:6e:11:34:07:f2:47:95:03:15:a2:06:9f:2c:d4:
                    d1:d3:17:d3:68:e0:07:04:9d:94:7a:98:ab:91:be:
                    f3:02:6c:da:fc:6e:2a:c9:57:dd:6e:b2:6a:76:91:
                    a4:ca:73:43:dc:78:21:e4:e6:c8:68:f1:9d:e0:bc:
                    ab:07:1c:fa:e5:67:ce:81:ae:e1:a7:10:41:ba:ae:
                    7e:1c:88:6d:ae:36:a6:d8:a3:52:37:ef:1b:8f:e8:
                    7f:3c:4c:6b:47:46:d0:25:f4:56:7d:3c:ba:b0:7e:
                    2f:f8:b8:4c:81:58:f9:45:53:24:b0:a6:a9:3c:24:
                    64:01:c1:05:bf:be:aa:cd:c8:82:17:1b:e2:a7:b5:
                    2a:ee:f7:51:45:45:d4:6f:6b:c4:ef:f0:de:35:b5:
                    73:f0:ff:4b:26:b2:bb:e1:13:6b:9e:0e:51:1b:3e:
                    ca:ed:9b:07:b4:8f:60:06:27:e4:cb:9f:d1:06:05:
                    a5:77:88:ef:da:95:89:6b:31:43:8f:9b:a9:d9:a6:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4C:1E:92:BF:DE:F6:75:D1:5E:9E:C5:30:6C:D3:8D:EB:79:61:04
            X509v3 Authority Key Identifier:
                keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:98:db:2d:3c:b6:fd:6f:6f:a3:70:b1:09:38:0b:7a:3c:d1:
         24:ee:9b:ae:73:12:eb:0f:9c:87:fc:7f:78:25:08:ab:8e:c5:
         ad:7a:37:f5:16:f1:e8:1e:6f:dc:3c:27:e1:44:f2:9d:f8:ba:
         08:7d:41:7d:20:ab:9f:1b:b3:48:0e:4c:e8:9d:ff:bd:98:ad:
         c9:4f:b8:bd:c1:1a:ac:56:97:38:79:d8:39:3b:4b:f7:b0:c1:
         d7:f9:0e:c0:37:f5:69:ae:fe:a3:0e:78:ca:b3:1c:76:be:d6:
         d4:a3:6a:4f:cf:e0:41:bc:a9:48:77:be:4a:42:ea:1b:ed:f5:
         e4:eb:b2:5a:5a:07:f3:2f:e0:75:c4:e9:99:77:4a:dd:d0:da:
         7a:93:b3:2a:bf:08:a9:fb:8d:c8:4a:94:af:8e:33:22:af:e0:
         ea:85:91:e9:e5:53:ae:fe:30:0a:82:d8:45:62:2c:9a:97:de:
         38:e3:ca:8a:c0:75:f7:5e:99:b8:7d:9a:d2:2b:0c:f5:81:95:
         a5:d3:dd:84:5e:b3:ce:29:74:bc:0e:78:9e:87:13:5e:49:2c:
         8e:88:d5:a9:33:3e:83:a9:ac:49:61:95:29:ff:be:17:df:61:
         0e:49:a8:81:94:65:1a:e1:83:43:14:bc:74:b3:e8:42:58:2b:
         e2:34:f3:a4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1
NTgxODkzM0UwHhcNMjYwNTAxMDUzODI5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0M2M1NS1jNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/ENDjr4FU+i3SDkzLIGa9YYiJniMZR3erWSzKCEA/O0rOo2NvWU6mzjleg0s
LvkpCdNImeFeG3CFBnckbhE0B/JHlQMVogafLNTR0xfTaOAHBJ2Uepirkb7zAmza
/G4qyVfdbrJqdpGkynND3Hgh5ObIaPGd4LyrBxz65WfOga7hpxBBuq5+HIhtrjam
2KNSN+8bj+h/PExrR0bQJfRWfTy6sH4v+LhMgVj5RVMksKapPCRkAcEFv76qzciC
Fxvip7Uq7vdRRUXUb2vE7/DeNbVz8P9LJrK74RNrng5RGz7K7ZsHtI9gBifky5/R
BgWld4jv2pWJazFDj5up2abQXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH9MHpK/
3vZ10V6exTBs043reWEEMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0
OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI2MEEvQjZEQ0YxREM0NDk1MTFFRkE0NTkwQzNEQzRGOUFFMDIvNTQxNUQ1MTBD
NjhFMTFGMEJDODM5NzNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwFgHMA0GCSqGSIb3DQEBCwUAA4IBAQAbmNstPLb9b2+jcLEJOAt6
PNEk7puucxLrD5yH/H94JQirjsWtejf1FvHoHm/cPCfhRPKd+LoIfUF9IKufG7NI
Dkzonf+9mK3JT7i9wRqsVpc4edg5O0v3sMHX+Q7AN/Vprv6jDnjKsxx2vtbUo2pP
z+BBvKlId75KQuob7fXk67JaWgfzL+B1xOmZd0rd0Np6k7Mqvwip+43ISpSvjjMi
r+DqhZHp5VOu/jAKgthFYiyal94448qKwHX3Xpm4fZrSKwz1gZWl092EXrPOKXS8
DniehxNeSSyOiNWpMz6DqaxJYZUp/74X32EOSaiBlGUa4YNDFLx0s+hCWCviNPOk
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:31 2026 by rpki-client