Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/79986EE8FE3D11EFB763F62EC4F9AE02.roa
File:                     79986EE8FE3D11EFB763F62EC4F9AE02.roa (raw, json)
Hash identifier:          bA19Y+YseTfcXQaXEUZi3q3mODfpiIfKTPYCQNkXISs=
Subject key identifier:   FC:69:5F:61:55:63:57:85:CF:2F:D0:F9:44:F9:84:D2:1A:FC:51:68
Certificate issuer:       /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial:       08ED
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/79986EE8FE3D11EFB763F62EC4F9AE02.roa
Signing time:             Tue 04 Nov 2025 21:40:34 +0000
ROA not before:           Tue 04 Nov 2025 21:40:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     37904
IP address blocks:        126.209.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
                          rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:40:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285 (0x8ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
        Validity
            Not Before: Nov  4 21:40:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690a72d2-a1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:09:5d:c0:fe:0e:0e:39:1c:f1:ad:12:ea:02:
                    e1:a0:a2:7f:15:12:08:93:78:20:30:a7:24:cd:e6:
                    e8:66:2b:97:42:d4:a7:5a:29:84:f7:f2:e6:e3:62:
                    a8:9a:0e:50:cb:b2:c7:2f:2d:89:62:0d:9f:42:8f:
                    92:f5:b9:66:34:44:e4:aa:2f:62:25:d0:22:20:76:
                    7e:29:66:a6:5c:07:41:5f:10:a4:56:3d:9f:49:bb:
                    3e:20:57:ca:c7:0d:bf:0e:8a:f6:3b:a8:12:3c:fd:
                    0b:f3:37:78:48:ad:09:95:7a:e9:b2:81:f0:cc:2c:
                    8d:d5:57:c0:c6:9b:f0:f0:83:40:7e:67:65:bb:6b:
                    73:8b:c9:e1:84:18:4b:e1:e1:f2:49:74:77:19:77:
                    0c:b7:86:d1:da:18:7d:d4:2f:27:7e:b7:a7:7e:40:
                    b0:72:26:90:f8:62:68:e8:0c:3c:96:7e:5a:1a:00:
                    9e:1a:62:61:56:72:59:78:92:37:11:4d:52:e7:e4:
                    78:e7:a7:9b:c1:b4:ba:34:5c:ef:9f:33:5f:70:14:
                    ac:40:4d:f6:2a:b5:24:aa:2d:0b:fd:6b:30:be:b0:
                    c9:79:eb:22:f6:3a:73:02:74:07:2d:c8:56:2a:ba:
                    83:53:77:e3:ff:ff:fa:4e:6e:98:3e:95:c1:b4:ae:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:5F:61:55:63:57:85:CF:2F:D0:F9:44:F9:84:D2:1A:FC:51:68
            X509v3 Authority Key Identifier:
                keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/79986EE8FE3D11EFB763F62EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.209.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c9:4e:5e:98:76:00:6c:18:91:64:71:5f:56:7e:26:0d:33:
         05:ce:3d:3f:34:dd:42:50:62:6c:d2:30:c1:93:a7:18:2d:b0:
         04:16:d6:3e:2b:04:ae:34:63:5e:e7:f3:ba:4f:e7:74:4d:c1:
         61:f8:73:c1:55:5d:9f:4c:14:ea:f3:f2:df:67:e6:d2:d5:88:
         8b:ab:fd:a9:7a:cc:43:d5:cb:9a:24:fc:86:d0:f9:08:a4:c8:
         66:65:03:0d:02:a7:28:3a:51:e3:06:40:5d:6d:54:08:43:8d:
         f0:72:28:25:05:ff:72:36:aa:51:ba:e0:11:84:f1:cf:34:5d:
         54:0e:c9:4f:4a:cb:d0:41:5f:87:0d:7c:f5:b5:27:ec:9b:06:
         c9:76:f6:a3:00:2c:82:1d:27:dd:d0:d1:80:f2:51:cc:09:c2:
         84:3a:7e:cd:78:e1:fa:d6:e7:03:b8:f2:e3:45:b4:1c:de:cc:
         cc:fc:a3:40:7d:fc:19:63:1f:72:d1:c9:3b:eb:68:04:2f:7b:
         8a:d6:ba:06:bc:17:a9:f3:55:d6:20:b6:90:70:a7:2e:5e:5a:
         0b:9e:8e:e5:42:24:2d:ab:a3:74:10:6d:8f:62:17:36:6f:55:
         63:bf:6c:f2:04:da:d7:63:84:05:7b:fc:e4:54:c1:ba:3f:9f:
         a6:43:00:de
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE
QzNDQkNENjMwHhcNMjUxMTA0MjE0MDM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhNzJkMi1hMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAldwP4ODjkc8a0S6gLhoKJ/FRIIk3ggMKckzeboZiuXQtSnWimE9/Lm42Ko
mg5Qy7LHLy2JYg2fQo+S9blmNETkqi9iJdAiIHZ+KWamXAdBXxCkVj2fSbs+IFfK
xw2/Dor2O6gSPP0L8zd4SK0JlXrpsoHwzCyN1VfAxpvw8INAfmdlu2tzi8nhhBhL
4eHySXR3GXcMt4bR2hh91C8nfrenfkCwciaQ+GJo6Aw8ln5aGgCeGmJhVnJZeJI3
EU1S5+R456ebwbS6NFzvnzNfcBSsQE32KrUkqi0L/WswvrDJeesi9jpzAnQHLchW
KrqDU3fj///6Tm6YPpXBtK6PlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPxpX2FV
Y1eFzy/Q+UT5hNIa/FFoMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3
M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvNzk5ODZFRThG
RTNEMTFFRkI3NjNGNjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB+0V4wDQYJKoZIhvcNAQELBQADggEBACDJTl6YdgBsGJFk
cV9WfiYNMwXOPT803UJQYmzSMMGTpxgtsAQW1j4rBK40Y17n87pP53RNwWH4c8FV
XZ9MFOrz8t9n5tLViIur/al6zEPVy5ok/IbQ+QikyGZlAw0Cpyg6UeMGQF1tVAhD
jfByKCUF/3I2qlG64BGE8c80XVQOyU9Ky9BBX4cNfPW1J+ybBsl29qMALIIdJ93Q
0YDyUcwJwoQ6fs144frW5wO48uNFtBzezMz8o0B9/BljH3LRyTvraAQve4rWuga8
F6nzVdYgtpBwpy5eWguejuVCJC2ro3QQbY9iFzZvVWO/bPIE2tdjhAV7/ORUwbo/
n6ZDAN4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:57:08 2025 by rpki-client