Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/D74CEB52A81B11F1B02B10086F11F970.roa
File:                     D74CEB52A81B11F1B02B10086F11F970.roa (raw, json)
Hash identifier:          Rzlf6mld43WP8alI40y3uE8KOoREPbgbtX5JC/85mQA=
Subject key identifier:   5B:2D:56:DB:3C:1D:A1:CE:B9:B5:FB:94:0C:6D:6B:65:81:F3:7D:DD
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       23E2
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/D74CEB52A81B11F1B02B10086F11F970.roa
Signing time:             Mon 02 Nov 2026 16:26:23 +0000
ROA not before:           Mon 02 Nov 2026 16:26:23 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     133752
IP address blocks:        180.210.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 15:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9186 (0x23e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Nov  2 16:26:23 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ae8b9af-8e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:40:ac:fa:f1:1b:0b:70:f2:3d:95:aa:5f:
                    5f:f6:5c:46:25:dd:47:a1:53:92:f3:8a:ef:24:24:
                    84:4d:23:43:19:1e:f9:c8:37:7a:cb:7b:64:5f:da:
                    bd:27:f2:fa:63:3e:10:8c:d1:79:c2:ac:8d:7b:7a:
                    5d:ec:f8:81:31:d9:4b:43:ec:ac:96:25:63:31:a4:
                    9f:f8:12:14:82:1f:86:48:df:ea:31:ee:39:54:34:
                    81:78:a2:4a:9e:bc:a7:fe:ae:fe:59:06:fe:93:9a:
                    39:d8:50:60:d2:20:c5:e0:b1:b5:db:c1:c1:10:c0:
                    52:a1:1f:80:cd:be:49:81:51:fe:26:c0:04:00:ee:
                    12:b7:b6:fe:93:09:88:55:c7:20:60:e3:61:26:0b:
                    33:5f:01:f0:7a:cd:ac:dd:1b:9b:ec:20:13:f3:9b:
                    88:32:2b:0e:98:1d:a2:bf:cf:50:02:8b:e2:00:0b:
                    a4:01:13:66:3c:13:21:b6:16:71:11:38:d4:11:a7:
                    5e:26:8c:59:bf:38:f3:eb:94:a2:89:ea:aa:d7:06:
                    7a:ed:c2:f0:15:6c:88:83:bb:53:3c:45:69:8a:da:
                    96:91:ad:6c:4b:62:6e:20:9c:be:bf:92:3e:a7:0a:
                    b3:bc:85:ef:af:0e:c6:e3:cf:19:03:b2:b9:e6:1c:
                    0c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2D:56:DB:3C:1D:A1:CE:B9:B5:FB:94:0C:6D:6B:65:81:F3:7D:DD
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/D74CEB52A81B11F1B02B10086F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:60:bf:7f:13:4a:83:9d:3b:bd:b3:ed:97:94:4b:f2:72:32:
         e6:33:64:97:b5:b7:e1:14:e8:60:70:84:89:55:ce:0b:b0:a5:
         e1:b0:31:37:67:e9:3d:bc:20:f2:22:10:78:6b:4c:52:66:f6:
         4b:3e:f9:92:c1:cb:82:8a:d4:86:ca:51:8d:12:02:ab:2b:7f:
         47:8a:ae:bb:ad:86:aa:c1:89:b7:a9:78:52:59:6c:d4:18:b3:
         b1:a2:50:5c:e1:79:e5:ca:58:93:bc:03:fe:6b:bf:e1:fa:52:
         0f:5e:f3:db:2c:b0:fb:b1:a9:ce:3c:87:51:40:c5:13:0d:3d:
         96:19:e1:71:b0:be:d4:3b:64:b0:60:6d:6b:5a:6e:2a:11:db:
         62:3d:bc:ad:7c:ec:4b:e7:28:21:f3:4d:dd:82:29:37:98:4e:
         93:e6:17:0b:33:e4:24:29:8d:7e:59:f0:19:25:ef:f4:0c:14:
         dc:65:b3:dd:30:d0:fe:80:77:6e:8c:a3:16:f3:dc:e7:c7:25:
         bf:8c:04:01:05:61:74:43:62:86:03:58:2e:69:61:2f:44:c5:
         0e:11:13:72:01:7c:eb:59:c3:b5:34:5d:db:d9:9f:5b:f9:37:
         03:e9:a6:c1:79:f2:83:4f:02:83:ad:30:ba:7b:21:36:7d:f6:
         83:de:1f:5e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2
RUY2N0I2RDYwHhcNMjYxMTAyMTYyNjIzWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWU4YjlhZi04ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxVFArPrxGwtw8j2Vql9f9lxGJd1HoVOS84rvJCSETSNDGR75yDd6y3tkX9q9
J/L6Yz4QjNF5wqyNe3pd7PiBMdlLQ+ysliVjMaSf+BIUgh+GSN/qMe45VDSBeKJK
nryn/q7+WQb+k5o52FBg0iDF4LG128HBEMBSoR+Azb5JgVH+JsAEAO4St7b+kwmI
VccgYONhJgszXwHwes2s3Rub7CAT85uIMisOmB2iv89QAoviAAukARNmPBMhthZx
ETjUEadeJoxZvzjz65Siieqq1wZ67cLwFWyIg7tTPEVpitqWka1sS2JuIJy+v5I+
pwqzvIXvrw7G488ZA7K55hwMMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFstVts8
HaHOubX7lAxta2WB833dMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy
RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvRDc0Q0VCNTJB
ODFCMTFGMUIwMkIxMDA4NkYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAtNLcMA0GCSqGSIb3DQEBCwUAA4IBAQBYYL9/E0qDnTu9s+2XlEvy
cjLmM2SXtbfhFOhgcISJVc4LsKXhsDE3Z+k9vCDyIhB4a0xSZvZLPvmSwcuCitSG
ylGNEgKrK39Hiq67rYaqwYm3qXhSWWzUGLOxolBc4XnlyliTvAP+a7/h+lIPXvPb
LLD7sanOPIdRQMUTDT2WGeFxsL7UO2SwYG1rWm4qEdtiPbytfOxL5ygh803dgik3
mE6T5hcLM+QkKY1+WfAZJe/0DBTcZbPdMND+gHdujKMW89znxyW/jAQBBWF0Q2KG
A1guaWEvRMUOERNyAXzrWcO1NF3b2Z9b+TcD6abBefKDTwKDrTC6eyE2ffaD3h9e
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:53:48 2026 by rpki-client