Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/348854286B8F11ED9B07DD15C4F9AE02.roa
File:                     348854286B8F11ED9B07DD15C4F9AE02.roa (raw, json)
Hash identifier:          eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=
Subject key identifier:   86:29:2D:13:87:88:49:44:B1:4D:B0:A0:1A:DF:F6:0D:0C:6D:46:A6
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       02A0
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/348854286B8F11ED9B07DD15C4F9AE02.roa
Signing time:             Thu 26 Mar 2026 22:29:22 +0000
ROA not before:           Thu 26 Mar 2026 22:29:22 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137455
IP address blocks:        185.61.140.0/23 maxlen: 23
                          185.61.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Mar 26 22:29:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c5b342-7db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:e4:f4:94:10:36:4e:b3:f6:d1:53:ea:bf:
                    cb:61:46:6f:40:64:c8:80:3a:f7:4b:18:ab:c1:1e:
                    79:29:85:1a:67:73:a9:9e:d5:0c:49:ff:c5:01:a6:
                    f0:4e:bc:3d:c3:eb:6a:ad:ac:4e:46:59:8c:e4:12:
                    cc:fc:66:7c:2a:dd:f8:91:46:43:91:8b:45:d5:34:
                    d0:c2:1e:5a:49:d2:f4:3a:2c:fd:7f:74:e5:66:bc:
                    c8:87:42:3b:81:ff:e2:68:09:cb:d2:e4:d4:15:3e:
                    59:aa:64:41:0e:e6:56:75:fe:99:9c:21:63:c9:8f:
                    21:24:12:92:a1:c6:e6:56:8c:33:fe:be:13:44:d4:
                    01:36:f1:b3:35:f7:04:ad:d8:f6:43:cf:b2:05:66:
                    ff:f4:3f:bf:bb:32:cd:af:b9:e1:3c:20:01:c7:18:
                    30:98:3a:ac:1c:48:9d:b1:45:ce:3a:bc:08:a4:5c:
                    e6:aa:10:a3:e4:c5:cb:9a:36:4a:cb:37:6b:c3:95:
                    e5:fb:1b:46:c8:b0:be:91:5d:c6:6f:cd:b6:3e:66:
                    6d:bd:b4:2e:71:12:8b:ba:d2:29:03:fc:ea:b1:50:
                    75:8d:31:e8:0e:27:9d:c3:cf:ac:1b:6f:ac:5b:6f:
                    8d:3c:1e:2f:b9:79:a7:10:db:fc:b3:2f:5b:4d:77:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:29:2D:13:87:88:49:44:B1:4D:B0:A0:1A:DF:F6:0D:0C:6D:46:A6
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/348854286B8F11ED9B07DD15C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.61.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:20:11:6e:25:72:31:b4:86:00:43:05:bd:e3:b9:bc:d9:3e:
         32:1c:c7:96:05:19:ef:15:0d:e7:f8:3d:c4:0e:c1:95:7a:23:
         46:8a:95:8a:b2:af:15:57:e9:b1:9c:4f:15:a4:67:69:bc:bb:
         4d:94:01:d6:58:2b:85:dd:8c:53:99:47:21:55:10:66:2b:34:
         aa:ca:5f:90:b4:81:47:e3:ee:a7:27:6e:db:b4:24:ff:66:2d:
         ce:6b:76:d2:5a:1f:b2:ba:6c:5d:62:eb:cc:bf:7d:a2:92:59:
         3c:34:20:93:e5:42:ff:4a:07:d1:a6:1a:05:7a:0d:37:ea:88:
         29:3f:ee:f5:53:04:3f:50:83:25:3a:7b:45:32:30:72:59:83:
         6c:49:d7:b0:f6:ab:94:ac:17:52:83:75:27:9c:83:1b:d8:a9:
         b9:b6:d7:b9:0c:27:54:67:60:74:bf:d3:28:f9:e2:6d:eb:fc:
         f7:64:c5:52:be:c8:f9:34:08:b8:cd:44:55:0d:ee:70:22:1d:
         2c:e5:d4:a5:e5:fb:51:81:0a:38:12:84:2c:b5:77:40:a2:2f:
         5a:3c:4a:db:d4:88:69:92:dd:cb:50:4f:c5:27:9e:48:1a:d9:
         f8:43:7a:f1:34:7d:b5:b8:03:7f:38:12:ac:ea:ec:b0:fd:be:
         26:5f:99:06
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5
OTFDQzQwRkIwHhcNMjYwMzI2MjIyOTIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWM1YjM0Mi03ZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1s/k9JQQNk6z9tFT6r/LYUZvQGTIgDr3SxirwR55KYUaZ3OpntUMSf/FAabw
Trw9w+tqraxORlmM5BLM/GZ8Kt34kUZDkYtF1TTQwh5aSdL0Oiz9f3TlZrzIh0I7
gf/iaAnL0uTUFT5ZqmRBDuZWdf6ZnCFjyY8hJBKSocbmVowz/r4TRNQBNvGzNfcE
rdj2Q8+yBWb/9D+/uzLNr7nhPCABxxgwmDqsHEidsUXOOrwIpFzmqhCj5MXLmjZK
yzdrw5Xl+xtGyLC+kV3Gb822PmZtvbQucRKLutIpA/zqsVB1jTHoDiedw8+sG2+s
W2+NPB4vuXmnENv8sy9bTXeo7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIYpLROH
iElEsU2woBrf9g0MbUamMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0
NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R
UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjA0QUMvMzRCRUM1RjQ0NDRDMTFFREJEQTkxMjdDQzRGOUFFMDIvMzQ4ODU0Mjg2
QjhGMTFFRDlCMDdERDE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCuT2MMA0GCSqGSIb3DQEBCwUAA4IBAQB4IBFuJXIxtIYAQwW947m8
2T4yHMeWBRnvFQ3n+D3EDsGVeiNGipWKsq8VV+mxnE8VpGdpvLtNlAHWWCuF3YxT
mUchVRBmKzSqyl+QtIFH4+6nJ27btCT/Zi3Oa3bSWh+yumxdYuvMv32iklk8NCCT
5UL/SgfRphoFeg036ogpP+71UwQ/UIMlOntFMjByWYNsSdew9quUrBdSg3UnnIMb
2Km5tte5DCdUZ2B0v9Mo+eJt6/z3ZMVSvsj5NAi4zURVDe5wIh0s5dSl5ftRgQo4
EoQstXdAoi9aPErb1Ihpkt3LUE/FJ55IGtn4Q3rxNH21uAN/OBKs6uyw/b4mX5kG
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:46:28 2026 by rpki-client