Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/09B62A48833411ECBB74C786C4F9AE02.roa
File:                     09B62A48833411ECBB74C786C4F9AE02.roa (raw, json)
Hash identifier:          5CjAVhZ4H7jUaLeVyY5rhBjjQSwZO+qN9rQG5F9axLY=
Subject key identifier:   E7:39:18:86:4B:66:86:CD:55:C6:3F:CA:DC:41:97:9A:CB:B8:12:B5
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       048C
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/09B62A48833411ECBB74C786C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:09:22 +0000
ROA not before:           Fri 31 Oct 2025 00:44:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        149.234.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
                          rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164 (0x48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
        Validity
            Not Before: Oct 31 00:44:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a464b1-7e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:6a:d9:25:5e:ed:a9:b4:86:61:ea:d3:6e:
                    91:e0:37:1a:a1:a3:f8:98:7c:8d:22:01:16:8c:a7:
                    15:a9:1f:56:8d:b3:06:ce:47:b7:6a:02:87:c6:23:
                    5b:de:c5:27:97:d5:ce:2e:4d:e4:eb:4c:f8:eb:3f:
                    74:4d:6f:8d:88:46:9c:ce:4d:53:1d:6d:29:45:62:
                    00:4f:f6:93:db:fb:25:91:f1:d7:50:8e:6b:e2:d9:
                    e6:5a:ae:0b:81:c4:a5:18:bc:59:79:71:49:c3:e6:
                    9e:d0:49:4a:c2:75:17:ba:ee:1f:85:11:ba:ac:26:
                    53:b9:f4:ee:f0:15:42:90:ce:9a:50:81:b5:ae:ed:
                    2a:d1:d8:a1:11:8b:3e:c9:6a:dc:06:cf:cc:0b:bd:
                    81:b3:f5:65:68:c4:ae:41:01:20:7f:ff:a9:1d:e4:
                    04:b4:22:d5:87:5d:c0:c0:fa:dc:fc:21:2b:40:5d:
                    04:1a:4b:6f:25:3c:a1:ac:b3:5d:4c:9d:9c:8f:85:
                    67:bb:de:29:2e:8c:3c:4f:61:84:f5:ee:52:19:50:
                    e6:a9:a6:1b:5b:c3:cc:89:9a:f6:c6:0e:38:89:2d:
                    14:b3:9d:e4:5e:d2:d7:d0:12:3a:72:11:f6:64:88:
                    69:5d:a0:97:aa:e6:98:de:eb:82:c9:6f:d4:8b:45:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:39:18:86:4B:66:86:CD:55:C6:3F:CA:DC:41:97:9A:CB:B8:12:B5
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/09B62A48833411ECBB74C786C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:12:3b:e6:a0:ca:eb:77:20:c6:c6:d3:69:9b:64:68:68:70:
         e4:6d:9f:15:56:de:b9:51:5d:91:b9:fc:c2:0d:35:92:8b:fa:
         95:58:e1:b3:af:6b:b1:9b:33:8e:e5:d8:02:d8:dc:c3:50:2e:
         bc:d7:a5:c6:42:bc:21:a4:fe:bc:2b:66:aa:b9:1a:af:4c:ac:
         7b:f1:e0:4c:bf:59:3d:15:7f:19:6d:ce:54:bc:b5:72:47:10:
         de:a7:52:80:3f:15:43:f6:97:d2:5f:7b:37:0f:3e:2b:50:f2:
         d9:c4:54:99:5c:03:2d:80:2c:38:3c:cd:b2:69:6e:42:a4:54:
         18:70:27:cf:ff:35:43:11:f7:97:b1:8c:4b:f6:76:5d:4f:35:
         cc:3a:b9:69:dc:a3:87:53:e3:60:07:09:e0:85:18:cf:36:21:
         1c:da:c7:ca:57:1c:a2:d5:58:f8:f2:49:64:dc:1e:80:a5:9c:
         c4:f7:c8:72:4a:a7:8e:7a:02:46:df:90:1a:d8:df:b6:e2:1d:
         07:22:6d:9c:a3:c1:88:f0:b4:59:d5:d4:e8:c8:14:75:33:e5:
         76:71:94:5d:0d:28:c3:19:ea:59:88:06:a4:61:d7:e6:83:7c:
         39:20:7c:09:da:fb:5a:0d:b0:a8:c1:ab:bb:f5:25:ed:66:b4:
         45:ba:8e:aa
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw
MEFDQjc2MEMwHhcNMjUxMDMxMDA0NDMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjRiMS03ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnIRq2SVe7am0hmHq026R4DcaoaP4mHyNIgEWjKcVqR9WjbMGzke3agKHxiNb
3sUnl9XOLk3k60z46z90TW+NiEaczk1THW0pRWIAT/aT2/slkfHXUI5r4tnmWq4L
gcSlGLxZeXFJw+ae0ElKwnUXuu4fhRG6rCZTufTu8BVCkM6aUIG1ru0q0dihEYs+
yWrcBs/MC72Bs/VlaMSuQQEgf/+pHeQEtCLVh13AwPrc/CErQF0EGktvJTyhrLNd
TJ2cj4Vnu94pLow8T2GE9e5SGVDmqaYbW8PMiZr2xg44iS0Us53kXtLX0BI6chH2
ZIhpXaCXquaY3uuCyW/Ui0U+JQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOc5GIZL
ZobNVcY/ytxBl5rLuBK1MB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz
MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTk2QzQvRjNEREVFREU4MzMwMTFFQzhGRjM5MzgzQzRGOUFFMDIvMDlCNjJBNDg4
MzM0MTFFQ0JCNzRDNzg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAleq9MA0GCSqGSIb3DQEBCwUAA4IBAQA/EjvmoMrrdyDGxtNpm2Ro
aHDkbZ8VVt65UV2RufzCDTWSi/qVWOGzr2uxmzOO5dgC2NzDUC6816XGQrwhpP68
K2aquRqvTKx78eBMv1k9FX8Zbc5UvLVyRxDep1KAPxVD9pfSX3s3Dz4rUPLZxFSZ
XAMtgCw4PM2yaW5CpFQYcCfP/zVDEfeXsYxL9nZdTzXMOrlp3KOHU+NgBwnghRjP
NiEc2sfKVxyi1Vj48klk3B6ApZzE98hySqeOegJG35Aa2N+24h0HIm2co8GI8LRZ
1dToyBR1M+V2cZRdDSjDGepZiAakYdfmg3w5IHwJ2vtaDbCowau79SXtZrRFuo6q
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:43 2026 by rpki-client