Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/52F0E8B46AF911F0B29D9D34C4F9AE02.roa
File:                     52F0E8B46AF911F0B29D9D34C4F9AE02.roa (raw, json)
Hash identifier:          GfZjnaPBn2ArAnEZOpXTc0r/TjaWDvkxs6fg90V5zZI=
Subject key identifier:   12:64:03:B1:CC:DB:39:06:14:EE:01:62:A0:DF:AA:84:84:A7:3B:53
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       071B
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/52F0E8B46AF911F0B29D9D34C4F9AE02.roa
Signing time:             Thu 18 Jun 2026 22:26:56 +0000
ROA not before:           Thu 18 Jun 2026 22:26:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48024
IP address blocks:        202.8.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819 (0x71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Jun 18 22:26:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a3470b0-3aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c1:28:c6:17:b3:a5:01:ef:e4:a0:6d:cf:99:
                    b7:37:5f:43:41:a8:33:27:f5:ad:f2:34:8b:7e:b4:
                    cf:58:c7:67:e9:24:9f:30:b3:af:10:1f:a9:3b:86:
                    4b:2a:3c:7a:ee:b0:5b:e4:9b:e3:6b:26:41:90:d4:
                    8c:c2:a7:f2:c1:da:51:00:31:94:ef:df:92:a0:e6:
                    73:4d:06:b5:d5:96:79:96:f2:09:48:8f:29:43:b6:
                    cd:ee:77:4e:83:96:19:62:86:25:a6:d8:b6:8f:4a:
                    db:8c:e9:83:16:6c:18:33:e1:f2:d4:5b:4b:c1:29:
                    0b:65:37:d4:75:da:d3:72:7c:ad:50:d2:e4:19:09:
                    55:cb:19:71:86:eb:92:8d:ad:a8:45:82:28:9c:9b:
                    32:02:d1:25:b9:82:8e:92:f5:00:a2:86:48:2e:af:
                    3c:f7:62:e9:dd:9b:72:e7:71:4e:44:f1:a7:27:6a:
                    e8:ba:ab:44:3c:97:f2:38:00:c8:9e:e7:19:aa:1c:
                    fb:52:33:7e:7f:54:09:70:e5:9a:d0:e8:0e:45:0c:
                    5d:38:a0:08:ab:c4:9f:4e:39:a0:5f:e1:ce:29:f2:
                    c9:ac:79:bf:57:19:2b:76:eb:d7:6b:2c:4e:59:e3:
                    ef:0c:fd:cc:5c:5c:3d:89:81:02:a0:7f:47:46:5e:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:64:03:B1:CC:DB:39:06:14:EE:01:62:A0:DF:AA:84:84:A7:3B:53
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/52F0E8B46AF911F0B29D9D34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.8.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:b2:2d:44:dc:08:32:f6:3b:18:c9:9c:ab:4d:38:c5:0e:3a:
         26:02:4f:00:be:73:bf:57:6e:c9:9e:16:79:d8:4d:dd:ec:da:
         10:63:e7:81:0c:f8:1a:85:ed:7f:f3:4b:39:2e:7e:03:e9:30:
         d9:f9:85:9d:fe:df:7c:9b:82:09:fa:93:07:5a:f1:90:b2:1a:
         87:4b:08:fc:13:5c:10:af:3d:06:ab:92:fb:17:dd:10:a1:bb:
         48:83:f4:aa:c4:fb:22:54:28:a0:99:90:e0:d2:4c:bd:e7:42:
         59:66:bc:64:16:4f:95:a8:20:a0:0f:6a:96:f7:ca:c9:d4:63:
         90:9b:ca:0a:1f:e6:21:75:58:5e:c4:db:51:63:df:11:db:a3:
         98:63:ca:de:62:f5:7b:07:81:20:d6:6a:6e:49:1e:50:6f:46:
         ab:66:96:ae:28:2d:7b:54:3a:13:6d:bf:bc:73:45:59:8b:07:
         b6:25:e7:8a:15:bb:43:6a:16:18:10:c1:94:e8:79:e6:fd:20:
         d0:13:27:aa:ab:3f:5e:d6:f4:01:f0:42:a8:ec:75:f5:df:09:
         ee:b4:55:da:92:5f:ee:9e:fe:b3:9a:ae:d0:c4:5f:c8:c1:ed:
         b3:02:7f:60:0e:6d:16:cd:3e:a3:2a:4b:63:da:89:7e:49:09:
         ca:39:80:d8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE4NUYxMTAvBgNVBAUTKDU4RTMzRjBENUEzMjY4ODExNDA3MTVEMTMxNkUwMURF
QUYyNEFEMEYwHhcNMjYwNjE4MjIyNjU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM0NzBiMC0zYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkMEoxhezpQHv5KBtz5m3N19DQagzJ/Wt8jSLfrTPWMdn6SSfMLOvEB+pO4ZL
Kjx67rBb5JvjayZBkNSMwqfywdpRADGU79+SoOZzTQa11ZZ5lvIJSI8pQ7bN7ndO
g5YZYoYlpti2j0rbjOmDFmwYM+Hy1FtLwSkLZTfUddrTcnytUNLkGQlVyxlxhuuS
ja2oRYIonJsyAtEluYKOkvUAooZILq8892Lp3Zty53FORPGnJ2rouqtEPJfyOADI
nucZqhz7UjN+f1QJcOWa0OgORQxdOKAIq8SfTjmgX+HOKfLJrHm/VxkrduvXayxO
WePvDP3MXFw9iYECoH9HRl5lTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBJkA7HM
2zkGFO4BYqDfqoSEpztTMB8GA1UdIwQYMBaAFFjjPw1aMmiBFAcV0TFuAd6vJK0P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTg1Ri83MDBCRUQ5QzlF
QzgxMUVCQjcwMTY0NDhDNEY5QUUwMi9XT01fRFZveWFJRVVCeFhSTVc0QjNxOGty
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dPTV9EVm95YUlFVUJ4WFJNVzRCM3E4a3JROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE4NUYvNzAwQkVEOUM5RUM4MTFFQkI3MDE2NDQ4QzRGOUFFMDIvNTJGMEU4QjQ2
QUY5MTFGMEIyOUQ5RDM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCyghoMA0GCSqGSIb3DQEBCwUAA4IBAQBjsi1E3Agy9jsYyZyrTTjF
DjomAk8AvnO/V27JnhZ52E3d7NoQY+eBDPgahe1/80s5Ln4D6TDZ+YWd/t98m4IJ
+pMHWvGQshqHSwj8E1wQrz0Gq5L7F90QobtIg/SqxPsiVCigmZDg0ky950JZZrxk
Fk+VqCCgD2qW98rJ1GOQm8oKH+YhdVhexNtRY98R26OYY8reYvV7B4Eg1mpuSR5Q
b0arZpauKC17VDoTbb+8c0VZiwe2JeeKFbtDahYYEMGU6Hnm/SDQEyeqqz9e1vQB
8EKo7HX13wnutFXakl/unv6zmq7QxF/Iwe2zAn9gDm0WzT6jKktj2ol+SQnKOYDY
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:35 2026 by rpki-client