Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FAF27058153611EDB676412DC4F9AE02.roa
File:                     FAF27058153611EDB676412DC4F9AE02.roa (raw, json)
Hash identifier:          o+Qi5w5OsgYV0yz4jlKvAtaN7H0eRMAwK5KdcqEZrNQ=
Subject key identifier:   3A:07:CD:8C:89:EA:EF:CD:6F:FC:E4:FF:CD:9C:CD:7A:89:71:BC:A0
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BB8
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FAF27058153611EDB676412DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:22:57 +0000
ROA not before:           Fri 02 Jan 2026 16:13:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     135329
IP address blocks:        49.229.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11192 (0x2bb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:02 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a49211-f1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:f2:5b:94:c9:e1:01:bf:e4:84:44:39:28:
                    07:62:ff:38:ba:28:d6:dd:6f:6f:a1:de:70:06:50:
                    b3:1d:6b:c2:a2:a1:a4:01:36:1f:4c:1a:1e:88:c3:
                    cb:4f:98:80:03:ba:cd:68:cb:7b:f9:bc:11:c6:47:
                    27:85:dc:79:85:a5:f3:0b:5c:7e:5d:cf:a6:c4:93:
                    9d:d3:a5:d3:68:ce:3c:c4:fe:16:23:1e:f5:9c:3f:
                    f3:bc:69:ca:d9:c0:77:46:42:81:fb:cf:81:15:59:
                    3c:0a:f5:9e:04:d1:b9:b4:0f:2d:e1:49:2b:b4:4a:
                    ad:9e:ef:67:3e:12:05:a5:1b:d4:2e:f2:99:4c:f1:
                    a5:71:28:91:58:d6:3a:47:5e:4f:2a:fc:7d:d8:2e:
                    94:7e:ac:99:c7:1d:e7:8f:22:f6:1e:bd:a9:c9:cf:
                    d4:d3:16:c9:f6:fc:42:b2:db:41:f3:6c:8b:30:cb:
                    0d:25:77:c5:c2:8a:d4:9c:42:7c:0e:56:10:95:6c:
                    e2:bc:b4:74:9d:e5:4c:26:8b:a7:a2:2b:b6:b6:7b:
                    45:61:c4:66:78:7d:91:82:54:a7:81:78:38:6e:7b:
                    7a:fd:31:84:f3:71:6b:f7:27:2e:50:69:04:da:6e:
                    ab:96:42:6d:42:50:1d:a8:bf:90:5f:c1:b6:90:4a:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:07:CD:8C:89:EA:EF:CD:6F:FC:E4:FF:CD:9C:CD:7A:89:71:BC:A0
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FAF27058153611EDB676412DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.229.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:e7:d7:df:90:3c:be:e3:e0:b1:42:68:80:5c:e9:c3:b0:
         67:d3:88:ec:9e:9a:40:6e:05:85:55:76:74:9e:0a:fb:76:9b:
         7b:36:23:36:b5:b2:7d:2f:53:d4:58:3e:f9:f6:a2:19:8b:7a:
         14:d5:60:6d:2c:9b:da:67:db:73:61:2c:5a:55:f7:43:9c:e3:
         90:15:17:ac:04:0d:c6:66:60:d2:c8:46:d7:da:b3:6c:52:c3:
         b3:06:46:58:6f:92:76:97:81:e0:4e:78:bb:4f:7c:24:b4:36:
         3a:05:e0:34:4a:0f:6c:b5:5a:c4:11:91:e9:67:8f:9f:af:06:
         34:a4:b5:f3:63:e2:17:6f:db:42:7e:90:58:eb:51:7b:6f:29:
         3b:f7:62:a0:ca:d9:02:8c:25:38:e2:00:74:20:6c:d6:95:bf:
         1b:ab:b3:3a:37:9a:11:d3:59:cd:fc:82:06:5c:a5:d8:ca:95:
         c8:23:36:10:f5:69:c7:03:a5:30:7f:66:89:a1:06:93:15:e0:
         8b:f2:c0:b6:cf:94:a0:ff:02:2a:0d:63:e5:3e:c2:9c:2e:5e:
         5b:af:7f:d2:84:49:3c:82:7e:ed:e5:be:30:1f:56:b4:c8:99:
         22:c5:76:0d:c2:d1:38:ab:36:ab:e9:45:fe:83:11:fb:41:14:
         4f:30:ab:b6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTIxMS1mMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9hzyW5TJ4QG/5IREOSgHYv84uijW3W9vod5wBlCzHWvCoqGkATYfTBoeiMPL
T5iAA7rNaMt7+bwRxkcnhdx5haXzC1x+Xc+mxJOd06XTaM48xP4WIx71nD/zvGnK
2cB3RkKB+8+BFVk8CvWeBNG5tA8t4UkrtEqtnu9nPhIFpRvULvKZTPGlcSiRWNY6
R15PKvx92C6UfqyZxx3njyL2Hr2pyc/U0xbJ9vxCsttB82yLMMsNJXfFworUnEJ8
DlYQlWzivLR0neVMJounoiu2tntFYcRmeH2RglSngXg4bnt6/TGE83Fr9ycuUGkE
2m6rlkJtQlAdqL+QX8G2kEqCXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDoHzYyJ
6u/Nb/zk/82czXqJcbygMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvRkFGMjcwNTgx
NTM2MTFFREI2NzY0MTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMeUQMA0GCSqGSIb3DQEBCwUAA4IBAQBK7ufX35A8vuPgsUJogFzp
w7Bn04jsnppAbgWFVXZ0ngr7dpt7NiM2tbJ9L1PUWD759qIZi3oU1WBtLJvaZ9tz
YSxaVfdDnOOQFResBA3GZmDSyEbX2rNsUsOzBkZYb5J2l4HgTni7T3wktDY6BeA0
Sg9stVrEEZHpZ4+frwY0pLXzY+IXb9tCfpBY61F7byk792KgytkCjCU44gB0IGzW
lb8bq7M6N5oR01nN/IIGXKXYypXIIzYQ9WnHA6Uwf2aJoQaTFeCL8sC2z5Sg/wIq
DWPlPsKcLl5br3/ShEk8gn7t5b4wH1a0yJkixXYNwtE4qzar6UX+gxH7QRRPMKu2
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:33 2026 by rpki-client