Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/6B9D491C379A11F0B3AC7740C4F9AE02.roa
File:                     6B9D491C379A11F0B3AC7740C4F9AE02.roa (raw, json)
Hash identifier:          LMXTxM7l4JdcF/ON7Kkss11xFLRKbb61J2H/ZhTQ8eY=
Subject key identifier:   4C:49:37:3C:1F:5F:17:5B:A3:71:17:18:ED:B1:D7:AE:3C:5D:70:E9
Certificate issuer:       /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Certificate serial:       0149
Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/6B9D491C379A11F0B3AC7740C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:06:16 +0000
ROA not before:           Wed 11 Jun 2025 05:44:56 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142108
IP address blocks:        160.22.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
        Validity
            Not Before: Jun 11 05:44:56 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a768-b210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:58:9c:00:40:0a:6f:a9:0f:4c:b1:4b:e1:
                    b0:18:0f:c9:eb:26:e5:bd:d4:76:16:cb:2e:24:6c:
                    f2:74:f7:c7:bb:5f:1b:c2:c4:fa:97:05:28:af:e5:
                    80:d9:49:8b:d6:42:e5:74:41:10:31:66:b7:3b:52:
                    b8:34:a8:7b:4e:8a:a8:f7:09:ac:4e:8d:03:5e:5b:
                    25:f2:24:1e:e8:56:35:7b:4d:3c:25:7b:bf:83:27:
                    19:67:2d:2a:9e:64:7c:69:3c:58:3c:b5:9c:30:4c:
                    ed:5b:df:25:06:fc:62:4a:27:48:96:a8:84:0c:24:
                    f9:ed:a0:c2:35:10:67:fc:08:e8:e3:15:57:92:34:
                    a6:d5:a1:f3:72:db:a9:b8:68:2b:bb:8a:53:30:94:
                    00:c4:46:cd:49:9f:f9:27:56:c6:98:66:73:36:6f:
                    e1:cc:e9:e6:78:55:af:6c:61:9f:09:db:65:23:34:
                    8b:1f:75:f8:ea:6f:b7:38:d3:b9:a2:e5:2a:e0:5d:
                    51:79:4b:10:b3:cc:65:fb:87:5c:20:ab:08:6d:11:
                    72:3b:80:0b:de:fd:5c:1f:63:ed:63:8a:e6:36:b2:
                    8e:ad:a4:dd:f3:fc:53:a3:31:cb:12:1b:80:8b:72:
                    49:62:fb:c7:63:b4:71:c2:d3:54:b6:42:ec:66:10:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:49:37:3C:1F:5F:17:5B:A3:71:17:18:ED:B1:D7:AE:3C:5D:70:E9
            X509v3 Authority Key Identifier:
                keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/6B9D491C379A11F0B3AC7740C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:d0:46:03:9a:99:93:c5:f3:f5:5b:91:a1:8b:a7:c2:70:df:
         22:de:f1:67:cb:c2:c9:44:21:6a:86:ea:77:05:4e:a8:fb:ad:
         02:ba:50:de:bc:0a:9d:0b:e2:5f:be:2b:eb:aa:49:05:62:55:
         72:cd:c0:be:de:41:6c:fa:8b:ba:22:b0:13:a4:9f:72:ef:5c:
         d2:a4:87:ba:23:3d:c0:6d:9d:6c:56:68:06:3a:39:6b:4e:09:
         b8:65:04:ad:de:ac:8a:26:4e:3d:57:2e:af:9e:63:55:74:1b:
         9c:77:1b:bb:74:2a:48:38:21:d5:5d:6e:13:4e:bb:0d:70:a8:
         02:ef:bb:19:09:d7:77:e2:3d:ef:89:56:61:e2:6d:6c:fb:7a:
         0c:d1:8f:68:8d:fb:57:e8:af:dc:96:57:c0:48:6a:71:5a:2a:
         1a:ba:b1:94:1f:ec:1c:09:fe:50:4b:65:13:c7:88:ae:30:c0:
         20:bf:a9:6e:6a:98:a2:a2:dc:1f:9b:8c:b1:66:70:d7:be:df:
         64:06:db:43:87:65:04:b5:2d:e4:d5:ce:d6:2e:04:e4:ba:c3:
         cf:ca:ab:63:8c:9e:bc:d5:23:cb:0f:f6:0c:af:f1:4e:e3:a3:
         93:0f:40:d0:cd:57:fe:83:5e:94:a4:bc:18:4a:e8:f9:46:97:
         10:bf:95:e9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc5QTIxMTAvBgNVBAUTKDkxMzNBQ0JFQ0ZERUVDRjREQTNBMjIyMjgyNzgzNEY1
QjczQUZBQTcwHhcNMjUwNjExMDU0NDU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTc2OC1iMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuX9YnABACm+pD0yxS+GwGA/J6yblvdR2FssuJGzydPfHu18bwsT6lwUor+WA
2UmL1kLldEEQMWa3O1K4NKh7Toqo9wmsTo0DXlsl8iQe6FY1e008JXu/gycZZy0q
nmR8aTxYPLWcMEztW98lBvxiSidIlqiEDCT57aDCNRBn/Ajo4xVXkjSm1aHzctup
uGgru4pTMJQAxEbNSZ/5J1bGmGZzNm/hzOnmeFWvbGGfCdtlIzSLH3X46m+3ONO5
ouUq4F1ReUsQs8xl+4dcIKsIbRFyO4AL3v1cH2PtY4rmNrKOraTd8/xTozHLEhuA
i3JJYvvHY7RxwtNUtkLsZhAOVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFExJNzwf
Xxdbo3EXGO2x1648XXDpMB8GA1UdIwQYMBaAFJEzrL7P3uz02joiIoJ4NPW3Ovqn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzlBMi8xQTA1RTZFRTJE
MkUxMUVGQTU0QzgwNDJDNEY5QUUwMi9rVE9zdnNfZTdQVGFPaUlpZ25nMDliYzYt
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tUT3N2c19lN1BUYU9pSWlnbmcwOWJjNi1xYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjc5QTIvMUEwNUU2RUUyRDJFMTFFRkE1NEM4MDQyQzRGOUFFMDIvNkI5RDQ5MUMz
NzlBMTFGMEIzQUM3NzQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBa0MA0GCSqGSIb3DQEBCwUAA4IBAQA50EYDmpmTxfP1W5Ghi6fC
cN8i3vFny8LJRCFqhup3BU6o+60CulDevAqdC+JfvivrqkkFYlVyzcC+3kFs+ou6
IrATpJ9y71zSpIe6Iz3AbZ1sVmgGOjlrTgm4ZQSt3qyKJk49Vy6vnmNVdBucdxu7
dCpIOCHVXW4TTrsNcKgC77sZCdd34j3viVZh4m1s+3oM0Y9ojftX6K/cllfASGpx
WioaurGUH+wcCf5QS2UTx4iuMMAgv6luapiiotwfm4yxZnDXvt9kBttDh2UEtS3k
1c7WLgTkusPPyqtjjJ681SPLD/YMr/FO46OTD0DQzVf+g16UpLwYSuj5RpcQv5Xp
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:42 2026 by rpki-client