Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/5D8B2B06D90B11F0A960BEC67CD3641D.roa
File:                     5D8B2B06D90B11F0A960BEC67CD3641D.roa (raw, json)
Hash identifier:          yOZ7NWihMQh2xMOicbiIAZG+/dVYwm+tNO5GsESSJA4=
Subject key identifier:   E6:D3:C7:10:1C:72:45:3C:F9:9E:73:97:93:96:24:4B:86:66:B3:57
Certificate issuer:       /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial:       3528
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/5D8B2B06D90B11F0A960BEC67CD3641D.roa
Signing time:             Sun 01 Mar 2026 17:07:21 +0000
ROA not before:           Sun 14 Dec 2025 16:38:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38197
IP address blocks:        112.213.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
                          rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13608 (0x3528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
        Validity
            Not Before: Dec 14 16:38:49 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47249-a821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:d6:d3:f9:1c:7e:91:07:80:0c:46:37:01:
                    38:6d:d6:ba:74:7c:50:52:60:90:8c:7b:26:0c:1d:
                    73:88:c6:13:be:34:c4:05:74:11:1c:f6:22:3f:2c:
                    e9:78:1b:0d:ad:c5:d1:47:e5:91:1c:be:da:c2:04:
                    06:d5:35:70:3c:e0:16:e3:80:78:9e:81:5f:13:2b:
                    dd:33:92:47:66:d2:ef:e8:46:eb:df:75:28:97:47:
                    78:62:c8:78:cf:60:13:39:6e:57:ae:3e:6c:0c:ea:
                    3a:40:de:84:46:44:c6:7e:26:0e:0d:3f:8d:ef:c7:
                    ac:b5:3d:13:9c:d7:47:15:6e:8a:e9:4a:46:9f:af:
                    75:8b:20:fa:45:45:34:6e:4f:48:e5:13:e6:0a:82:
                    9b:a8:b8:eb:7b:8a:12:85:10:1c:17:75:44:a6:a0:
                    05:a3:d5:f6:af:5b:3e:7e:d9:f3:fc:c0:a7:52:74:
                    67:c8:bf:fc:85:41:39:d5:53:66:cd:0e:7b:d6:e1:
                    ea:3c:a8:38:2a:b3:2d:a8:8e:bf:44:1a:96:7d:9b:
                    09:db:41:6b:73:bd:9e:f3:ff:43:f9:f9:44:0b:3c:
                    70:25:76:23:32:d3:b0:8f:3d:66:a1:90:12:c4:46:
                    00:8b:59:15:82:92:3e:fa:c3:52:21:e5:c1:46:52:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D3:C7:10:1C:72:45:3C:F9:9E:73:97:93:96:24:4B:86:66:B3:57
            X509v3 Authority Key Identifier:
                keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/5D8B2B06D90B11F0A960BEC67CD3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.213.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         16:4b:4a:58:3a:9e:b4:2a:d2:97:a2:31:3b:e7:a3:29:44:80:
         89:20:3e:ea:a4:1e:0a:fd:8a:92:58:00:92:44:6a:68:f2:cc:
         d1:06:8e:0f:77:03:0d:02:a7:71:2d:4c:c8:2e:79:1f:f5:35:
         4e:03:a2:45:d0:66:95:bd:70:f1:db:da:fd:86:bb:ef:29:c4:
         b3:78:06:19:6b:7c:e9:ed:75:b0:61:31:d9:ed:0a:72:8f:44:
         eb:6b:68:e1:9a:74:c2:dd:36:1d:c5:64:db:59:64:9d:9f:6d:
         03:52:b6:b6:68:2e:3f:f6:18:a3:3b:08:21:f3:87:67:c2:bb:
         b1:e7:78:65:85:60:4f:7a:ba:9e:cd:f9:5a:08:cf:d0:43:86:
         fa:8b:eb:7b:ce:07:fc:5c:fd:bc:e4:13:9b:d8:45:3a:bf:0f:
         34:23:74:fd:25:65:bb:09:92:0e:c0:5c:c3:f6:90:4d:00:54:
         92:fe:dd:53:25:42:e2:f0:75:9a:dd:42:1f:85:dc:39:29:99:
         92:1d:85:66:88:4f:4e:a5:93:9d:ae:f7:3e:19:de:16:e6:9f:
         05:d4:7b:2b:1c:7e:69:28:52:9a:2c:90:df:e0:4e:97:5b:7b:
         9e:91:3f:cd:87:f1:c9:01:10:4d:3e:95:aa:31:6e:1c:ac:5f:
         e3:c2:53:a5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2
MUFEMzI1QUMwHhcNMjUxMjE0MTYzODQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzI0OS1hODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArv3W0/kcfpEHgAxGNwE4bda6dHxQUmCQjHsmDB1ziMYTvjTEBXQRHPYiPyzp
eBsNrcXRR+WRHL7awgQG1TVwPOAW44B4noFfEyvdM5JHZtLv6Ebr33Uol0d4Ysh4
z2ATOW5Xrj5sDOo6QN6ERkTGfiYODT+N78estT0TnNdHFW6K6UpGn691iyD6RUU0
bk9I5RPmCoKbqLjre4oShRAcF3VEpqAFo9X2r1s+ftnz/MCnUnRnyL/8hUE51VNm
zQ571uHqPKg4KrMtqI6/RBqWfZsJ20Frc72e8/9D+flECzxwJXYjMtOwjz1moZAS
xEYAi1kVgpI++sNSIeXBRlLpJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFObTxxAc
ckU8+Z5zl5OWJEuGZrNXMB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE
OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTk3RTgvN0EwRkU3RkExRDkyMTFFMkI1QkM3NEY1MDhCMDJDRDIvNUQ4QjJCMDZE
OTBCMTFGMEE5NjBCRUM2N0NEMzY0MUQucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFcNVgMA0GCSqGSIb3DQEBCwUAA4IBAQAWS0pYOp60KtKXojE756Mp
RICJID7qpB4K/YqSWACSRGpo8szRBo4PdwMNAqdxLUzILnkf9TVOA6JF0GaVvXDx
29r9hrvvKcSzeAYZa3zp7XWwYTHZ7Qpyj0Tra2jhmnTC3TYdxWTbWWSdn20DUra2
aC4/9hijOwgh84dnwrux53hlhWBPerqezflaCM/QQ4b6i+t7zgf8XP285BOb2EU6
vw80I3T9JWW7CZIOwFzD9pBNAFSS/t1TJULi8HWa3UIfhdw5KZmSHYVmiE9OpZOd
rvc+Gd4W5p8F1HsrHH5pKFKaLJDf4E6XW3uekT/Nh/HJARBNPpWqMW4crF/jwlOl
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:47 2026 by rpki-client