Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/BA8DB662085911F082EDFD31C4F9AE02.roa
File:                     BA8DB662085911F082EDFD31C4F9AE02.roa (raw, json)
Hash identifier:          BZnCGqNeDcGNPBU9IwFS+o8notOoTo0D+3eD7BldpEQ=
Subject key identifier:   34:DF:E1:FE:15:0C:6E:25:58:5D:47:94:46:F4:89:EE:1D:AB:D4:5A
Certificate issuer:       /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial:       0102
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/BA8DB662085911F082EDFD31C4F9AE02.roa
Signing time:             Fri 29 May 2026 06:37:54 +0000
ROA not before:           Fri 29 May 2026 06:37:54 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153720
IP address blocks:        203.0.120.0/24 maxlen: 24
                          2001:df5:1bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
                          rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847
        Validity
            Not Before: May 29 06:37:54 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a193441-461c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:d2:32:b6:8a:40:92:60:f6:96:49:af:15:
                    61:6a:b3:02:0e:b7:05:aa:b8:8e:ac:85:aa:01:9b:
                    b8:d6:0c:24:77:84:13:ee:07:01:c6:8b:84:29:e1:
                    81:b4:77:ce:ff:09:0a:46:98:8b:26:44:50:d6:10:
                    02:4b:de:0f:41:55:b4:c8:a9:97:f7:b5:b2:b3:86:
                    89:62:fb:7d:46:60:36:40:95:25:8f:7b:7e:1f:f3:
                    bd:79:8a:1d:ee:d1:df:bf:2a:19:09:9e:7a:6d:6e:
                    c8:e7:c3:2c:60:ca:c2:a5:c3:b3:18:fa:6c:6f:57:
                    26:62:d4:1b:84:e7:92:50:48:4d:d8:b3:a1:08:33:
                    24:06:e1:ae:6b:2e:ae:a5:41:28:f4:b9:d9:31:ab:
                    0c:69:bf:71:b3:13:c3:7e:b6:21:93:59:99:19:78:
                    4c:a4:1b:eb:dc:a1:cd:aa:fe:91:89:dc:3e:99:f8:
                    fb:ab:83:c8:da:8a:cb:21:36:4b:c3:46:82:1b:aa:
                    d4:c8:33:36:1e:f3:18:78:b8:3b:29:57:ce:bb:e0:
                    56:c5:81:ea:96:6e:92:b3:01:cc:f5:e8:a0:6f:4f:
                    c4:ca:d6:31:05:98:4a:3b:20:d0:5e:69:f6:5e:af:
                    ae:18:9a:85:1b:6a:a7:85:8a:10:38:61:7a:96:34:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DF:E1:FE:15:0C:6E:25:58:5D:47:94:46:F4:89:EE:1D:AB:D4:5A
            X509v3 Authority Key Identifier:
                keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/BA8DB662085911F082EDFD31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.0.120.0/24
                IPv6:
                  2001:df5:1bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:9f:44:03:15:10:03:1b:93:84:66:bb:45:f2:ad:96:a1:b6:
         ec:73:72:41:55:82:8b:62:80:58:f2:0d:27:4b:54:98:dd:2c:
         63:9c:1a:0d:ca:88:18:dd:99:37:52:b6:a3:74:7c:3e:17:d4:
         e7:20:4d:d8:d8:0d:92:8a:fa:1c:cf:7c:6d:d7:51:41:46:57:
         20:67:7a:17:f9:ae:16:c3:92:c4:f5:be:9e:67:18:9b:3a:8c:
         89:c3:ba:ca:ae:3b:1a:d4:6c:e4:f1:8f:36:33:df:e6:2f:ca:
         9d:d5:01:0a:d8:b4:27:a8:d3:48:c2:b7:1c:1b:57:49:4a:7c:
         80:c4:61:f4:91:ff:54:1e:dd:7b:a7:28:eb:12:c9:24:5b:06:
         b1:18:44:af:32:dc:75:fa:1d:a0:bc:b9:df:ff:69:5c:4d:9f:
         31:8e:ba:34:76:9a:50:b3:44:c6:78:38:c9:ce:9c:48:b6:61:
         36:d3:40:e9:ab:91:f0:d0:94:b7:85:bd:69:50:4d:49:d1:ab:
         5d:25:91:96:e7:03:90:a8:76:0f:8a:ef:69:44:e5:89:69:4a:
         41:52:eb:5f:4e:52:7a:ef:da:cc:f8:a4:dd:31:03:f8:54:89:
         d6:37:02:b5:16:d8:2c:f8:d2:3d:14:af:e4:a2:b3:b6:ae:08:
         2d:fc:97:02
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI3RjkxMTAvBgNVBAUTKEYzNzU0NzZGMzIzNURDM0Q1MjUxNzFFMkJFOTIxMTYz
OEU0OTA4NDcwHhcNMjYwNTI5MDYzNzU0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE5MzQ0MS00NjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtInSMraKQJJg9pZJrxVharMCDrcFqriOrIWqAZu41gwkd4QT7gcBxouEKeGB
tHfO/wkKRpiLJkRQ1hACS94PQVW0yKmX97Wys4aJYvt9RmA2QJUlj3t+H/O9eYod
7tHfvyoZCZ56bW7I58MsYMrCpcOzGPpsb1cmYtQbhOeSUEhN2LOhCDMkBuGuay6u
pUEo9LnZMasMab9xsxPDfrYhk1mZGXhMpBvr3KHNqv6Ridw+mfj7q4PI2orLITZL
w0aCG6rUyDM2HvMYeLg7KVfOu+BWxYHqlm6SswHM9eigb0/EytYxBZhKOyDQXmn2
Xq+uGJqFG2qnhYoQOGF6ljSNLwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDTf4f4V
DG4lWF1HlEb0ie4dq9RaMB8GA1UdIwQYMBaAFPN1R28yNdw9UlFx4r6SEWOOSQhH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjdGOS8yODhERjE0QUU5
QzQxMUVGOTkyMDkzMEFDNEY5QUUwMi84M1ZIYnpJMTNEMVNVWEhpdnBJUlk0NUpD
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgzVkhiekkxM0QxU1VYSGl2cElSWTQ1SkNFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjI3RjkvMjg4REYxNEFFOUM0MTFFRjk5MjA5MzBBQzRGOUFFMDIvQkE4REI2NjIw
ODU5MTFGMDgyRURGRDMxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAywB4MA8EAgACMAkDBwAgAQ31G8AwDQYJKoZIhvcNAQELBQADggEB
AMqfRAMVEAMbk4Rmu0XyrZahtuxzckFVgotigFjyDSdLVJjdLGOcGg3KiBjdmTdS
tqN0fD4X1OcgTdjYDZKK+hzPfG3XUUFGVyBnehf5rhbDksT1vp5nGJs6jInDusqu
OxrUbOTxjzYz3+Yvyp3VAQrYtCeo00jCtxwbV0lKfIDEYfSR/1Qe3XunKOsSySRb
BrEYRK8y3HX6HaC8ud//aVxNnzGOujR2mlCzRMZ4OMnOnEi2YTbTQOmrkfDQlLeF
vWlQTUnRq10lkZbnA5Codg+K72lE5YlpSkFS619OUnrv2sz4pN0xA/hUidY3ArUW
2Cz40j0Ur+Sis7auCC38lwI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:43:43 2026 by rpki-client