Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/BBA533D4D52D11F18C2B37AE0566CEF9.roa
File:                     BBA533D4D52D11F18C2B37AE0566CEF9.roa (raw, json)
Hash identifier:          ksncLiWeevRCMxx9DAJtqiLzHq/jkyKhYF4SZp5z2gM=
Subject key identifier:   4F:B8:3D:F9:8E:BF:49:5D:A6:38:4D:F0:82:AA:A6:6E:F8:58:5C:B8
Certificate issuer:       /CN=A91454A8/serialNumber=08732E31585845A469DD31314105D72F536CBED5
Certificate serial:       0F
Authority key identifier: 08:73:2E:31:58:58:45:A4:69:DD:31:31:41:05:D7:2F:53:6C:BE:D5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CHMuMVhYRaRp3TExQQXXL1NsvtU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/BBA533D4D52D11F18C2B37AE0566CEF9.roa
Signing time:             Sat 31 Oct 2026 13:19:42 +0000
ROA not before:           Sat 31 Oct 2026 13:19:42 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     146943
IP address blocks:        209.216.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/CHMuMVhYRaRp3TExQQXXL1NsvtU.crl
                          rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/CHMuMVhYRaRp3TExQQXXL1NsvtU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CHMuMVhYRaRp3TExQQXXL1NsvtU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 20:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91454A8, serialNumber=08732E31585845A469DD31314105D72F536CBED5
        Validity
            Not Before: Oct 31 13:19:42 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ae5eaee-52cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:a3:d0:9f:30:4b:f0:3a:ef:2b:f0:46:0d:
                    42:35:de:22:d6:bb:2d:a6:64:38:f9:6d:43:a4:77:
                    6c:21:7f:5d:fc:fe:a5:f2:66:15:62:f6:8f:bf:31:
                    c0:dd:eb:14:7d:3c:69:07:f1:96:53:0c:02:68:6a:
                    36:1a:b2:00:74:18:5f:11:00:60:f8:12:ae:5c:fd:
                    e1:68:46:1f:38:9c:bc:bd:41:33:8b:6b:59:9a:85:
                    8a:7a:05:83:3f:bb:62:dd:9e:27:e8:1a:dc:2b:1b:
                    ce:78:da:90:41:bd:8f:ed:ea:e7:a4:d6:17:53:60:
                    81:4c:97:d2:3d:70:96:ad:3f:64:39:b4:0a:81:c2:
                    02:af:b4:42:9f:51:f0:67:e3:86:2d:9a:0d:b0:36:
                    d8:1d:64:8c:b2:89:92:29:6f:53:7a:c2:df:66:4a:
                    9a:32:9c:90:5c:29:cc:b1:ff:78:83:d3:03:2a:5e:
                    98:6d:fa:c5:de:62:ae:15:4e:a4:d3:c1:33:60:87:
                    c0:06:41:21:7d:7e:9c:83:b7:98:c7:c3:81:34:dc:
                    88:16:3b:c0:20:b7:8e:e0:63:2c:f8:8c:d2:da:da:
                    0d:48:c6:28:c8:c5:98:b1:15:e5:bf:22:44:15:46:
                    f6:84:f5:4e:63:3b:ea:56:b5:7e:00:3e:18:82:93:
                    93:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B8:3D:F9:8E:BF:49:5D:A6:38:4D:F0:82:AA:A6:6E:F8:58:5C:B8
            X509v3 Authority Key Identifier:
                keyid:08:73:2E:31:58:58:45:A4:69:DD:31:31:41:05:D7:2F:53:6C:BE:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/CHMuMVhYRaRp3TExQQXXL1NsvtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CHMuMVhYRaRp3TExQQXXL1NsvtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/6534FFC0C1D711F1A4A8299284EE528E/BBA533D4D52D11F18C2B37AE0566CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.216.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:ec:82:a2:4f:61:60:ac:4e:79:1e:42:e7:92:7c:4e:34:d0:
         b9:80:fc:58:f9:17:88:c8:4b:4d:17:5f:81:4e:93:7b:7e:3c:
         c2:68:58:54:8f:57:0f:44:35:b2:d1:09:30:2b:b4:f9:b5:2b:
         33:43:7b:9d:de:2c:d0:cf:62:2a:9b:b4:c9:02:86:fd:50:cf:
         6a:8f:d6:d6:5e:5f:52:6b:48:2e:06:b2:c9:b9:12:a4:b0:ee:
         56:38:69:d5:70:db:05:7c:88:04:3c:12:86:d7:cb:ac:2f:4f:
         a9:f6:7b:b1:48:c1:a3:2c:cc:f5:41:9e:9b:2e:77:79:2e:91:
         c5:6a:d8:bf:b0:b3:7d:41:76:f4:73:11:f0:4d:76:80:9b:da:
         ad:4f:7f:bc:c5:5b:4f:79:a8:ac:81:a7:03:ac:f0:56:fe:e0:
         65:8d:74:15:c8:84:5e:30:79:fc:7a:f0:9b:90:e5:7c:a9:9a:
         74:e0:52:29:c0:b8:ef:03:5c:cd:77:57:6b:e2:c3:0e:f7:12:
         d2:f0:6a:3e:b7:05:9b:07:5e:51:0f:08:56:e4:c8:ec:5e:16:
         29:2f:fa:5b:58:d7:8d:b5:9c:3d:50:70:01:7e:af:09:b6:d7:
         1f:2f:d7:b1:c9:84:ba:45:d2:2c:12:fd:eb:10:82:bb:64:ff:
         e0:6c:14:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:31:59 2026 by rpki-client