Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/5BE6FE3ED7A311EF9D214C13C4F9AE02.roa
File:                     5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (raw, json)
Hash identifier:          dfTe+7wX0JsGLfuCS7up2971yM970ZVtiuDePgexKgU=
Subject key identifier:   3F:B9:A7:FC:4C:DD:41:97:86:B4:E1:65:DA:03:25:A5:65:8F:24:72
Certificate issuer:       /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
Certificate serial:       13FC
Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/5BE6FE3ED7A311EF9D214C13C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 15:11:21 +0000
ROA not before:           Mon 02 Feb 2026 15:11:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     45758
IP address blocks:        167.179.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl
                          rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5116 (0x13fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7
        Validity
            Not Before: Feb  2 15:11:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6980be99-05bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:19:b4:ba:ae:33:44:94:54:17:3b:c7:95:
                    73:bc:83:74:11:5a:98:f9:ff:44:da:b9:59:32:09:
                    bb:c2:ec:80:b9:d9:1e:1a:93:83:bc:65:04:f4:4d:
                    8f:4e:da:65:8a:e9:a5:21:27:a2:e5:d1:04:ea:fb:
                    ea:f0:83:87:05:de:7a:33:a8:03:9c:83:3a:63:98:
                    a4:a0:0c:bb:03:c7:3c:d5:ba:d4:41:79:f2:f3:c5:
                    72:97:1e:83:ee:6e:85:3f:00:ec:9b:bc:70:eb:82:
                    1d:0f:bd:9a:61:bc:a9:02:ef:31:67:89:a9:55:e5:
                    5c:4a:9f:87:83:15:bd:2c:19:5c:f6:1e:0b:72:ac:
                    8b:3f:9b:90:07:dc:1b:ed:36:89:11:9e:47:e4:57:
                    87:72:76:b9:82:50:86:79:66:b9:d9:14:da:18:27:
                    71:43:df:fb:05:27:02:fd:9f:17:47:d3:0f:e6:90:
                    80:0b:d1:16:86:fa:b7:1e:4b:a1:c5:06:17:7e:b3:
                    42:6c:f9:53:1a:91:1c:a5:e4:5d:4b:c3:4f:71:64:
                    f9:4e:90:6a:a3:9e:e8:a1:5b:01:89:3f:b2:9d:9d:
                    0b:4b:44:29:07:ce:e2:c3:7e:30:4a:f2:28:aa:f8:
                    ac:9c:c9:64:f3:b3:75:9a:fc:7b:0c:c6:be:dc:ee:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B9:A7:FC:4C:DD:41:97:86:B4:E1:65:DA:03:25:A5:65:8F:24:72
            X509v3 Authority Key Identifier:
                keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/5BE6FE3ED7A311EF9D214C13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:90:de:29:f6:88:04:b6:0a:00:45:b3:56:3e:ad:88:3f:77:
         ca:73:dd:0b:d0:6b:c4:77:e7:04:ab:43:c9:4d:f2:a8:83:35:
         d1:ee:e9:33:ad:2d:e8:a3:57:63:a7:53:67:aa:55:16:d9:35:
         36:39:d2:b8:03:ef:6e:10:55:71:dd:3e:69:62:ce:c3:3a:15:
         0f:30:9c:c3:da:fc:66:31:15:25:fc:d8:c5:86:10:af:75:cc:
         e3:d9:42:ad:ad:47:55:a2:b3:aa:32:1f:54:a1:8d:24:6e:a2:
         f0:38:26:c7:3a:c4:30:cb:dc:73:94:e9:b1:85:5c:67:96:e1:
         24:d9:4d:f2:55:54:d2:43:29:15:ee:b1:46:c4:54:de:73:9c:
         0c:be:29:6a:74:c5:6f:fd:5a:42:1e:33:a3:3e:8d:b8:16:46:
         ce:c5:5b:73:51:d1:2c:20:b0:c8:db:15:4e:92:d2:b9:65:19:
         32:d1:4d:68:b9:18:03:ea:e7:cb:f4:fe:62:bf:bb:aa:10:d1:
         06:f3:bb:f9:1a:f0:2f:cc:86:a1:5e:ec:f1:1c:ee:38:e4:41:
         ad:e7:5e:94:12:98:3a:be:59:e6:02:27:a3:04:9e:51:bc:35:
         ea:f8:c2:53:b4:3f:fd:a3:f7:5c:dc:9b:4d:d0:0d:50:b6:a6:
         3d:ba:dd:9e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICE/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG
QzY2RUQxRDcwHhcNMjYwMjAyMTUxMTIxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgwYmU5OS0wNWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqvoZtLquM0SUVBc7x5VzvIN0EVqY+f9E2rlZMgm7wuyAudkeGpODvGUE9E2P
TtpliumlISei5dEE6vvq8IOHBd56M6gDnIM6Y5ikoAy7A8c81brUQXny88Vylx6D
7m6FPwDsm7xw64IdD72aYbypAu8xZ4mpVeVcSp+HgxW9LBlc9h4LcqyLP5uQB9wb
7TaJEZ5H5FeHcna5glCGeWa52RTaGCdxQ9/7BScC/Z8XR9MP5pCAC9EWhvq3Hkuh
xQYXfrNCbPlTGpEcpeRdS8NPcWT5TpBqo57ooVsBiT+ynZ0LS0QpB87iw34wSvIo
qvisnMlk87N1mvx7DMa+3O4rPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD+5p/xM
3UGXhrThZdoDJaVljyRyMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2
QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDc4MUEvNEVFQzVCN0VBNkI0MTFFOEI0M0ExNDY3QzRGOUFFMDIvNUJFNkZFM0VE
N0EzMTFFRjlEMjE0QzEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACns/owDQYJKoZIhvcNAQELBQADggEBADKQ3in2iAS2CgBF
s1Y+rYg/d8pz3QvQa8R35wSrQ8lN8qiDNdHu6TOtLeijV2OnU2eqVRbZNTY50rgD
724QVXHdPmlizsM6FQ8wnMPa/GYxFSX82MWGEK91zOPZQq2tR1Wis6oyH1ShjSRu
ovA4Jsc6xDDL3HOU6bGFXGeW4STZTfJVVNJDKRXusUbEVN5znAy+KWp0xW/9WkIe
M6M+jbgWRs7FW3NR0SwgsMjbFU6S0rllGTLRTWi5GAPq58v0/mK/u6oQ0Qbzu/ka
8C/MhqFe7PEc7jjkQa3nXpQSmDq+WeYCJ6MEnlG8Ner4wlO0P/2j91zcm03QDVC2
pj263Z4=
-----END CERTIFICATE-----