Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa
File:                     89A6BB88E06911EF9C6CF520C4F9AE02.roa (raw, json)
Hash identifier:          xqfEAAZNTMugAs5yM4c6NJebBSslTWwSr9afKnN7xAw=
Subject key identifier:   BE:C8:07:D3:8E:29:FE:B2:4D:00:D0:D2:D1:2D:FC:3A:DA:6A:46:50
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       375F
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:08:16 +0000
ROA not before:           Wed 08 Oct 2025 14:40:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150675
IP address blocks:        175.29.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14175 (0x375f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:42 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48ea0-9250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:1a:be:25:03:cb:5d:4a:ee:d9:14:ac:df:
                    e5:4f:ec:42:27:5a:83:9d:3e:6e:eb:88:43:57:33:
                    ca:a5:5f:0d:44:55:9a:de:f3:28:ea:c2:d3:22:60:
                    f4:b4:06:9e:48:66:a7:b3:6e:49:d0:1d:f6:ab:a8:
                    6a:04:fe:39:c9:d3:49:f0:4a:7a:9d:ce:24:c1:02:
                    b1:01:90:bb:e0:56:92:9e:b8:5e:65:68:62:64:40:
                    08:22:55:5e:8f:8c:6e:75:1c:b5:26:8c:c1:4f:23:
                    b9:5f:b0:74:88:7d:cc:1e:6a:e4:f0:58:12:8c:24:
                    a4:ce:69:86:d0:65:d3:0d:ea:83:d4:f5:1d:5e:d4:
                    70:a4:e8:13:cd:aa:f1:8a:ad:0c:e9:40:82:86:cc:
                    ae:60:f5:37:89:85:9a:38:ea:e2:a4:66:93:fd:59:
                    03:56:d5:24:44:bf:4a:4f:59:00:1d:a6:e1:10:42:
                    c9:7e:33:4d:66:cd:90:3c:4b:13:af:f7:05:8c:75:
                    5d:77:af:e9:62:fd:e3:72:c3:04:35:89:5f:80:c0:
                    be:98:c8:13:34:68:1e:13:c6:cf:b4:9b:d7:fa:ae:
                    da:3e:36:f1:8a:8f:9b:e1:57:43:77:c9:06:92:6b:
                    dd:7e:bb:a3:f0:22:ba:e6:73:b1:0e:7e:9e:2e:91:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C8:07:D3:8E:29:FE:B2:4D:00:D0:D2:D1:2D:FC:3A:DA:6A:46:50
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/89A6BB88E06911EF9C6CF520C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:81:ec:1e:61:8d:1f:eb:97:a1:b2:f1:0d:33:76:a9:d1:
         d3:e5:05:9e:8f:0b:1a:d1:61:55:55:c6:cb:6e:5d:5f:3a:6e:
         a5:b3:5e:8a:4c:2c:e0:eb:9a:68:0e:a9:91:3b:72:02:e5:7e:
         a4:ff:fe:f1:62:10:b4:ef:c1:97:97:f2:9d:6e:7d:cb:58:0f:
         03:a0:be:22:b0:d2:55:bc:62:88:2a:ba:77:1e:dc:e3:8b:45:
         42:97:25:b7:c0:73:e2:e0:c7:c4:ce:f3:4e:20:1b:47:ef:e5:
         01:bb:07:0b:24:a6:84:b4:fc:9c:46:33:01:a7:a8:88:2f:09:
         03:b6:72:e3:e0:aa:54:83:8c:9c:75:68:94:f1:e8:84:e9:5f:
         b8:f7:1e:b3:85:82:80:d5:75:e3:22:d7:9d:27:59:49:7d:4e:
         af:1f:f0:65:ae:c3:41:9c:a3:e1:91:40:d7:6c:9b:fc:90:6a:
         8b:41:9b:6f:67:df:79:67:b2:86:0f:69:9d:fb:86:ba:51:9a:
         2a:1e:18:9a:83:fd:23:c4:fe:d8:c7:f4:a0:7a:6e:cd:87:66:
         22:6f:35:08:f7:25:a8:0c:b1:93:51:dd:6d:20:5e:da:78:50:
         3e:10:06:cd:bd:cb:9b:c8:04:27:6f:cb:ef:a1:71:6c:f8:d0:
         99:e0:e0:ee
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICN18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjUxMDA4MTQ0MDQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGVhMC05MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugwaviUDy11K7tkUrN/lT+xCJ1qDnT5u64hDVzPKpV8NRFWa3vMo6sLTImD0
tAaeSGans25J0B32q6hqBP45ydNJ8Ep6nc4kwQKxAZC74FaSnrheZWhiZEAIIlVe
j4xudRy1JozBTyO5X7B0iH3MHmrk8FgSjCSkzmmG0GXTDeqD1PUdXtRwpOgTzarx
iq0M6UCChsyuYPU3iYWaOOripGaT/VkDVtUkRL9KT1kAHabhEELJfjNNZs2QPEsT
r/cFjHVdd6/pYv3jcsMENYlfgMC+mMgTNGgeE8bPtJvX+q7aPjbxio+b4VdDd8kG
kmvdfruj8CK65nOxDn6eLpEblQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL7IB9OO
Kf6yTQDQ0tEt/DraakZQMB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvODlBNkJCODhF
MDY5MTFFRjlDNkNGNTIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQArx0SMA0GCSqGSIb3DQEBCwUAA4IBAQBdcIHsHmGNH+uXobLxDTN2
qdHT5QWejwsa0WFVVcbLbl1fOm6ls16KTCzg65poDqmRO3IC5X6k//7xYhC078GX
l/Kdbn3LWA8DoL4isNJVvGKIKrp3Htzji0VClyW3wHPi4MfEzvNOIBtH7+UBuwcL
JKaEtPycRjMBp6iILwkDtnLj4KpUg4ycdWiU8eiE6V+49x6zhYKA1XXjItedJ1lJ
fU6vH/BlrsNBnKPhkUDXbJv8kGqLQZtvZ995Z7KGD2md+4a6UZoqHhiag/0jxP7Y
x/Sgem7Nh2YibzUI9yWoDLGTUd1tIF7aeFA+EAbNvcubyAQnb8vvoXFs+NCZ4ODu
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:37:36 2026 by rpki-client