Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa
File:                     A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (raw, json)
Hash identifier:          00l1R5FwZcWzFUVZ2aqvW97Qwqjz6xknwlkADPfSXV8=
Subject key identifier:   3F:C3:F5:0A:18:EE:E3:B2:12:CA:26:27:DB:54:2F:77:03:A0:1A:79
Certificate issuer:       /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial:       0B32
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa
Signing time:             Mon 22 Jun 2026 20:22:43 +0000
ROA not before:           Mon 22 Jun 2026 20:22:43 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        58.181.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2866 (0xb32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
        Validity
            Not Before: Jun 22 20:22:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a399993-48b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:78:a9:12:4b:5d:e8:72:8f:e1:e2:ac:f9:
                    1c:99:10:72:e2:1f:c9:17:52:fb:d4:b2:91:cc:05:
                    24:d1:d4:28:b7:21:a6:47:fc:de:3a:32:b3:74:7c:
                    cd:e4:41:6c:ad:0a:9c:78:c6:7d:97:a8:53:cb:e3:
                    31:d8:8b:60:4c:b5:54:71:e7:12:5c:da:c9:b8:3c:
                    d1:33:ff:de:cb:90:58:1e:04:0e:2f:ac:55:1d:af:
                    4f:7b:91:9a:7f:fb:d0:f9:da:a2:39:81:7a:26:6b:
                    0f:fd:71:00:2e:ae:2f:45:b0:31:7d:42:03:c7:8c:
                    d7:e0:fa:c8:ad:6f:14:ba:a6:81:3c:bd:49:62:bd:
                    aa:86:c0:7c:81:2c:72:65:20:c7:65:5f:9c:b3:b2:
                    d7:91:fc:d9:46:fb:43:8a:97:25:8c:93:80:42:7b:
                    94:be:af:a3:6f:b4:88:99:5a:64:f7:85:47:41:fe:
                    83:bf:a6:e2:d2:6b:53:fd:ae:3c:48:72:73:be:d4:
                    48:02:57:03:67:4d:ab:04:5e:6b:3c:db:95:d8:19:
                    1b:9f:7f:00:d3:c6:2f:2a:3a:a6:92:d1:a7:78:20:
                    d0:4f:35:eb:44:50:a4:8d:39:83:d7:32:4c:45:03:
                    01:ba:13:e0:38:a5:6a:56:6b:09:f0:95:94:98:eb:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C3:F5:0A:18:EE:E3:B2:12:CA:26:27:DB:54:2F:77:03:A0:1A:79
            X509v3 Authority Key Identifier:
                keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f6:35:0b:b9:b8:ac:f1:85:ae:26:a4:b5:64:12:8b:fd:05:
         b4:9a:4c:fe:6f:9c:e3:25:5c:61:fb:69:7b:c7:9b:c4:e0:62:
         e1:d2:88:78:6b:22:3a:22:c1:9c:96:79:dc:34:04:a4:e5:17:
         21:7c:e3:17:ca:d6:df:c0:09:2d:66:06:bd:1a:f2:73:4b:6d:
         74:ba:ca:f3:25:ec:2a:9e:3f:b3:95:24:f8:f9:36:53:e8:37:
         07:36:87:72:bc:b7:9e:33:2d:6c:ac:c7:74:dc:26:f3:0f:e0:
         36:39:06:ab:3b:3b:4d:9e:b2:9c:fb:06:86:8f:43:0e:e3:ad:
         d0:95:a3:3c:a9:51:17:51:db:16:d3:35:9c:be:2c:c4:40:73:
         3e:29:14:ac:42:62:02:6d:6a:56:d4:70:4a:9a:4d:9a:9c:ae:
         0e:f5:a3:c9:21:61:8c:67:df:4f:30:7a:a7:1e:a1:73:8e:2b:
         5e:7d:85:34:e9:46:f7:8f:1c:7d:86:65:72:3b:8d:92:7e:63:
         13:0a:e7:67:8c:a9:31:6b:ad:43:6e:2d:07:57:17:5e:b1:db:
         98:f9:ac:f8:49:6a:3c:2e:38:ba:08:8b:a7:14:a7:98:e6:f6:
         6f:4f:56:9e:07:3c:79:6b:38:52:12:4e:22:3e:6e:00:f9:db:
         aa:16:c1:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4
MkNGNkE1QjMwHhcNMjYwNjIyMjAyMjQzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM5OTk5My00OGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvu94qRJLXehyj+HirPkcmRBy4h/JF1L71LKRzAUk0dQotyGmR/zeOjKzdHzN
5EFsrQqceMZ9l6hTy+Mx2ItgTLVUcecSXNrJuDzRM//ey5BYHgQOL6xVHa9Pe5Ga
f/vQ+dqiOYF6JmsP/XEALq4vRbAxfUIDx4zX4PrIrW8UuqaBPL1JYr2qhsB8gSxy
ZSDHZV+cs7LXkfzZRvtDipcljJOAQnuUvq+jb7SImVpk94VHQf6Dv6bi0mtT/a48
SHJzvtRIAlcDZ02rBF5rPNuV2Bkbn38A08YvKjqmktGneCDQTzXrRFCkjTmD1zJM
RQMBuhPgOKVqVmsJ8JWUmOuE7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD/D9QoY
7uOyEsomJ9tUL3cDoBp5MB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz
QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTczNEMvQTczMjM1RUM3M0MyMTFFQTlENDBCODg1QzRGOUFFMDIvQTNENTBCMkVB
M0RCMTFFQTk4QkM1RDQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAOrVfMA0GCSqGSIb3DQEBCwUAA4IBAQCk9jULubis8YWuJqS1ZBKL
/QW0mkz+b5zjJVxh+2l7x5vE4GLh0oh4ayI6IsGclnncNASk5RchfOMXytbfwAkt
Zga9GvJzS210usrzJewqnj+zlST4+TZT6DcHNodyvLeeMy1srMd03CbzD+A2OQar
OztNnrKc+waGj0MO463QlaM8qVEXUdsW0zWcvizEQHM+KRSsQmICbWpW1HBKmk2a
nK4O9aPJIWGMZ99PMHqnHqFzjitefYU06Ub3jxx9hmVyO42SfmMTCudnjKkxa61D
bi0HVxdesduY+az4SWo8Lji6CIunFKeY5vZvT1aeBzx5azhSEk4iPm4A+duqFsFs
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:11 2026 by rpki-client