Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/5EE215CCC33D11EE97B67979C4F9AE02.roa
File:                     5EE215CCC33D11EE97B67979C4F9AE02.roa (raw, json)
Hash identifier:          h3tpppmL1hT5EM3m6sk6xUTtg20d/wirnkJ2RqVRrs0=
Subject key identifier:   04:B9:B9:47:15:F8:80:54:0B:86:1F:B8:6B:80:BA:0D:9A:8A:27:DB
Certificate issuer:       /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial:       0198
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/5EE215CCC33D11EE97B67979C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:07:07 +0000
ROA not before:           Mon 05 Jan 2026 03:23:11 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     46783
IP address blocks:        113.192.60.0/24 maxlen: 24
                          113.192.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
                          rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
        Validity
            Not Before: Jan  5 03:23:11 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a439fb-5aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0f:91:8f:07:51:dd:f5:0d:81:b5:77:e2:72:
                    40:a5:a8:af:27:b4:67:ea:8d:c9:8d:82:70:dd:e1:
                    43:e2:0f:43:64:22:45:10:d4:98:fa:98:5f:1b:2c:
                    01:b8:21:ed:d6:4b:d0:ca:64:29:4c:51:2a:ef:8a:
                    90:b7:e6:62:3b:f4:41:85:6e:0e:bb:0d:06:ca:fe:
                    03:30:ca:17:f4:2c:d7:04:37:1d:a4:e1:c0:04:a7:
                    4b:2f:5b:1b:7c:ca:8b:5c:be:df:90:4c:76:73:ac:
                    74:d5:30:fc:e5:98:57:e4:85:81:10:29:51:49:86:
                    4c:e8:03:ba:86:a2:80:a7:6b:a6:7a:86:ed:8f:19:
                    53:07:d6:ca:24:95:27:d9:13:94:1e:66:ca:1c:bd:
                    85:94:85:c0:77:d6:e7:f1:26:3a:4c:e5:85:52:c2:
                    d5:93:2f:f7:aa:ef:e2:eb:cc:84:fd:58:78:e7:02:
                    9f:44:16:0a:d9:21:b2:5d:de:f4:21:df:c6:bb:0d:
                    3b:59:2c:4c:0b:36:a6:95:b9:f4:ec:b2:1c:38:23:
                    06:29:5a:36:9a:41:52:f8:4d:10:5b:ba:7b:54:e8:
                    bd:89:c2:eb:bd:f3:a1:00:97:86:02:45:3a:06:31:
                    c3:3a:df:4e:65:d3:24:3e:e6:6f:79:fd:ab:c8:47:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B9:B9:47:15:F8:80:54:0B:86:1F:B8:6B:80:BA:0D:9A:8A:27:DB
            X509v3 Authority Key Identifier:
                keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/5EE215CCC33D11EE97B67979C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:93:7f:b2:81:f2:33:f7:a6:11:f1:84:e9:aa:f7:6f:54:94:
         83:d4:3f:83:01:a3:69:7f:01:90:2d:a5:d6:55:b4:3d:29:45:
         d7:e7:e9:2e:c5:26:48:01:d2:f4:f7:10:9f:0d:c4:23:79:04:
         1b:2a:03:42:02:46:62:b3:3e:1b:ad:4f:84:ef:4a:e3:8b:9d:
         6e:19:a8:b5:eb:9d:75:d5:a4:3d:d3:47:3e:83:13:29:a4:a9:
         4a:51:32:f8:c8:51:dd:df:08:56:29:a5:25:e2:da:fa:4b:2d:
         ec:92:c5:61:72:a2:af:97:bb:10:6f:bc:b6:2c:d7:ee:3e:c3:
         d1:54:34:7b:85:c5:d8:d1:8a:b3:d7:82:48:a9:e3:54:8b:94:
         7d:b2:76:0f:8a:5d:64:e9:e7:18:91:7e:63:1e:9e:97:b6:60:
         f6:6e:e0:d3:f0:64:9c:e7:79:07:5a:fd:3c:b2:10:2c:1e:b6:
         e2:bb:4f:ba:74:21:e0:ca:78:29:91:2f:0b:78:85:62:5a:2d:
         19:e9:6c:43:51:f7:99:16:e8:dd:02:2b:58:40:79:00:58:40:
         3f:ae:b2:06:0d:f3:63:5a:97:f6:9a:3d:e9:0b:b2:1d:10:e5:
         70:58:38:47:66:ca:e7:3c:c7:71:97:cf:8b:9c:d2:8f:c1:1c:
         61:dd:29:2e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG
MjdDRDIyOTgwHhcNMjYwMTA1MDMyMzExWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzlmYi01YWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkQ+RjwdR3fUNgbV34nJApaivJ7Rn6o3JjYJw3eFD4g9DZCJFENSY+phfGywB
uCHt1kvQymQpTFEq74qQt+ZiO/RBhW4Ouw0Gyv4DMMoX9CzXBDcdpOHABKdLL1sb
fMqLXL7fkEx2c6x01TD85ZhX5IWBEClRSYZM6AO6hqKAp2umeobtjxlTB9bKJJUn
2ROUHmbKHL2FlIXAd9bn8SY6TOWFUsLVky/3qu/i68yE/Vh45wKfRBYK2SGyXd70
Id/Guw07WSxMCzamlbn07LIcOCMGKVo2mkFS+E0QW7p7VOi9icLrvfOhAJeGAkU6
BjHDOt9OZdMkPuZvef2ryEfuxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAS5uUcV
+IBUC4YfuGuAug2aiifbMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3
M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTA0RkUvODZBNkY2NTRCNzNGMTFFRUFGMTJCODdCQzRGOUFFMDIvNUVFMjE1Q0ND
MzNEMTFFRTk3QjY3OTc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBccA8MA0GCSqGSIb3DQEBCwUAA4IBAQCgk3+ygfIz96YR8YTpqvdv
VJSD1D+DAaNpfwGQLaXWVbQ9KUXX5+kuxSZIAdL09xCfDcQjeQQbKgNCAkZisz4b
rU+E70rji51uGai165111aQ900c+gxMppKlKUTL4yFHd3whWKaUl4tr6Sy3sksVh
cqKvl7sQb7y2LNfuPsPRVDR7hcXY0Yqz14JIqeNUi5R9snYPil1k6ecYkX5jHp6X
tmD2buDT8GSc53kHWv08shAsHrbiu0+6dCHgyngpkS8LeIViWi0Z6WxDUfeZFujd
AitYQHkAWEA/rrIGDfNjWpf2mj3pC7IdEOVwWDhHZsrnPMdxl8+LnNKPwRxh3Sku
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:45 2026 by rpki-client