Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa
File:                     B81F8808A72E11EDA708F167C4F9AE02.roa (raw, json)
Hash identifier:          +vK9sN/wwEHgTPgsw6vo/nMVxNjCNVxPKRzOcPHnjxI=
Subject key identifier:   9E:CF:CB:7E:04:26:83:56:58:29:05:05:D5:3B:EE:C1:0D:DA:90:C5
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       087A
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:44:29 +0000
ROA not before:           Wed 08 Oct 2025 22:24:37 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55454
IP address blocks:        182.23.176.0/21 maxlen: 24
                          202.50.246.0/24 maxlen: 24
                          2404:1c00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Oct  8 22:24:37 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4890d-0b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:86:d0:9f:f7:08:c2:66:34:88:cb:6b:f9:
                    d6:4d:c8:d8:1a:c7:b0:2c:7f:ce:8d:ae:1d:25:c4:
                    75:91:1b:7f:db:53:3f:dc:cd:89:c8:d6:d3:23:00:
                    26:e8:8e:db:12:a8:09:e5:c4:19:4e:be:2d:77:a3:
                    ab:fc:3f:8a:6a:cc:57:72:d0:68:60:a2:15:4c:bd:
                    1b:df:88:97:88:12:9f:52:52:a3:cf:74:de:03:c2:
                    4a:25:eb:77:bc:6a:90:2e:ee:4a:d2:f1:82:87:e7:
                    f0:4a:ee:d5:cd:ee:79:c3:e6:b8:84:e6:86:35:e3:
                    36:89:9b:ea:6b:5a:82:5a:9b:a9:8c:ce:ef:66:56:
                    01:cb:ba:8d:39:71:7f:83:72:35:b1:e2:81:5a:04:
                    0e:10:6b:b5:87:ee:ef:32:c1:50:f2:6c:02:48:6d:
                    bd:a1:f6:d3:7d:1b:8e:92:a3:bb:57:9f:05:2c:32:
                    e9:6d:ed:82:a2:b4:4e:61:70:99:b0:6f:f7:76:50:
                    16:9c:52:15:81:9a:49:43:68:46:83:b8:02:08:45:
                    ed:e0:1c:5e:db:7b:e9:87:9c:6d:ef:b8:e6:9d:a4:
                    0a:f6:fb:09:f9:b9:6e:2d:2c:6f:04:05:08:9b:ba:
                    3f:2c:50:7f:b0:a0:e9:be:96:3f:2c:3e:81:47:10:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CF:CB:7E:04:26:83:56:58:29:05:05:D5:3B:EE:C1:0D:DA:90:C5
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/B81F8808A72E11EDA708F167C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.176.0/21
                  202.50.246.0/24
                IPv6:
                  2404:1c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:1b:c1:79:f6:7f:d3:b5:b2:d8:92:bc:8f:ca:e0:bf:e8:
         a2:9e:35:ae:bf:23:68:b2:ec:99:21:bd:90:e2:62:5d:6b:c7:
         b9:c0:75:5c:61:a0:90:ca:72:0c:d7:b3:97:d0:c2:4b:48:62:
         bf:85:21:92:76:91:94:6f:2a:b1:92:63:9e:aa:ad:28:45:7b:
         8d:09:b4:af:ea:81:bc:88:c7:a9:da:b4:f1:5e:0b:8b:69:2f:
         f1:e1:6a:28:ba:2d:44:99:a2:73:ad:f2:30:2c:bd:5f:df:71:
         2f:03:7b:da:df:a5:5d:5d:c5:6c:2a:1c:5e:de:bb:a2:0c:9b:
         bb:fa:3f:92:c1:6c:b2:9c:4d:61:47:0f:e5:99:80:1f:df:7a:
         de:a7:3f:c3:fc:ff:60:75:ed:67:b0:ff:79:b9:10:66:9c:43:
         2e:02:31:0e:d4:88:06:4f:7e:4e:ce:9d:1f:10:f3:81:70:74:
         75:12:9f:11:73:74:90:c9:60:9a:04:3f:0d:84:19:7f:a1:fb:
         15:87:51:bd:59:ad:0d:78:cf:86:f7:1c:c6:41:7e:08:f2:d9:
         4c:b8:06:13:fe:2e:81:f4:b6:7c:82:04:61:95:31:90:99:93:
         87:99:94:b7:65:35:e2:4d:4d:e9:e3:a0:5c:83:44:cd:79:ef:
         89:69:c3:cf
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC
NjBEQjFCMkMwHhcNMjUxMDA4MjIyNDM3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODkwZC0wYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkiyG0J/3CMJmNIjLa/nWTcjYGsewLH/Oja4dJcR1kRt/21M/3M2JyNbTIwAm
6I7bEqgJ5cQZTr4td6Or/D+KasxXctBoYKIVTL0b34iXiBKfUlKjz3TeA8JKJet3
vGqQLu5K0vGCh+fwSu7Vze55w+a4hOaGNeM2iZvqa1qCWpupjM7vZlYBy7qNOXF/
g3I1seKBWgQOEGu1h+7vMsFQ8mwCSG29ofbTfRuOkqO7V58FLDLpbe2CorROYXCZ
sG/3dlAWnFIVgZpJQ2hGg7gCCEXt4Bxe23vph5xt77jmnaQK9vsJ+bluLSxvBAUI
m7o/LFB/sKDpvpY/LD6BRxDonQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJ7Py34E
JoNWWCkFBdU77sEN2pDFMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvQjgxRjg4MDhB
NzJFMTFFREE3MDhGMTY3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQDthewAwQAyjL2MA0EAgACMAcDBQAkBBwAMA0GCSqGSIb3DQEBCwUA
A4IBAQCEDhvBefZ/07Wy2JK8j8rgv+iinjWuvyNosuyZIb2Q4mJda8e5wHVcYaCQ
ynIM17OX0MJLSGK/hSGSdpGUbyqxkmOeqq0oRXuNCbSv6oG8iMep2rTxXguLaS/x
4Wooui1EmaJzrfIwLL1f33EvA3va36VdXcVsKhxe3ruiDJu7+j+SwWyynE1hRw/l
mYAf33repz/D/P9gde1nsP95uRBmnEMuAjEO1IgGT35Ozp0fEPOBcHR1Ep8Rc3SQ
yWCaBD8NhBl/ofsVh1G9Wa0NeM+G9xzGQX4I8tlMuAYT/i6B9LZ8ggRhlTGQmZOH
mZS3ZTXiTU3p46Bcg0TNee+JacPP
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:14 2026 by rpki-client