Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/482874AE710E11F0B4CBA430C4F9AE02.roa
File:                     482874AE710E11F0B4CBA430C4F9AE02.roa (raw, json)
Hash identifier:          Sm6txx+Pcc+EakrCDwx9kPTKAkq+5LpHOmc87+hKC2c=
Subject key identifier:   2B:3F:B7:D3:EA:CE:C6:93:74:85:87:F0:B4:21:EA:41:AF:A8:B5:D7
Certificate issuer:       /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
Certificate serial:       6E
Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/482874AE710E11F0B4CBA430C4F9AE02.roa
Signing time:             Fri 13 Feb 2026 06:26:41 +0000
ROA not before:           Fri 13 Feb 2026 06:26:41 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153529
IP address blocks:        161.248.214.0/24 maxlen: 24
                          161.248.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl
                          rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B
        Validity
            Not Before: Feb 13 06:26:41 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698ec421-e386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:c4:4d:92:a3:4b:d2:0d:7d:92:27:e6:fd:
                    96:e0:cd:54:69:ce:ea:93:0b:f0:5b:51:19:a9:d5:
                    9c:41:1a:6b:8b:70:70:2e:9c:8e:25:8b:01:8a:bc:
                    0a:84:e6:9a:d3:37:4a:8f:cd:c8:93:fd:5f:ef:76:
                    bc:94:68:61:63:cc:5f:b7:fd:d9:7c:e7:dc:58:58:
                    cf:98:1e:ac:e0:0c:50:84:c0:6f:a0:bf:63:21:07:
                    07:d1:d4:37:c2:13:5c:f0:dc:db:29:6d:1c:3f:6c:
                    d4:3e:c5:20:4f:95:a9:90:de:83:db:98:9d:c6:4c:
                    4a:61:11:16:61:06:5e:39:c5:64:88:f2:a2:67:11:
                    ec:1c:1e:9d:35:7f:72:ba:68:3a:67:16:81:4f:2f:
                    96:78:8d:fb:9c:33:85:9f:95:70:e4:72:4e:b1:68:
                    95:15:f1:f8:a4:8e:9a:df:bc:fc:10:08:29:f8:59:
                    95:28:a4:73:38:cb:92:b6:39:cf:1b:c2:ce:64:e2:
                    42:8c:2d:96:1e:de:69:cb:79:38:50:b7:61:c7:28:
                    9f:33:0f:b0:1e:cd:a4:03:79:64:ae:c5:78:b8:c4:
                    7d:48:27:5e:58:04:f4:c0:06:59:bb:9f:d3:5c:36:
                    d7:9e:5e:63:20:ca:d1:ea:1a:13:e9:b5:35:58:11:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3F:B7:D3:EA:CE:C6:93:74:85:87:F0:B4:21:EA:41:AF:A8:B5:D7
            X509v3 Authority Key Identifier:
                keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/482874AE710E11F0B4CBA430C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:65:3b:ee:41:08:61:e4:97:74:1c:af:75:ea:6f:f4:7a:02:
         60:4a:6e:42:1e:3b:62:9f:03:13:d2:6f:d6:d9:54:1f:0b:9b:
         a8:d9:87:bf:ba:10:8d:67:68:96:54:a7:20:e5:cf:3d:c0:e2:
         27:d3:38:75:34:6c:b5:0b:45:cc:26:3a:6d:ec:a9:27:15:eb:
         bf:12:92:56:b4:45:26:d6:05:b1:ea:28:63:50:24:9d:b5:61:
         b6:36:07:73:69:d2:40:96:85:17:63:ce:e6:33:eb:8e:81:c8:
         50:fc:a6:29:53:ec:13:cf:6b:81:1a:4f:fc:81:a6:4f:98:5c:
         31:b4:61:a7:98:3c:0e:c4:5a:ba:f3:eb:71:79:da:ee:b2:6a:
         db:5c:be:9b:65:f5:8b:b2:70:78:25:4c:30:a4:a1:e2:e5:04:
         fd:ac:5a:8c:9c:31:d3:b0:e3:db:ec:07:4a:8b:15:a0:b9:f9:
         0a:09:0c:25:00:f9:ce:82:2b:d5:b6:1c:bf:b7:ad:98:8e:e5:
         b5:c1:bf:cc:c4:3c:72:92:ad:b5:2e:9d:23:e7:0f:8c:d5:88:
         81:7f:a2:fe:10:4e:c1:6e:34:2f:9f:a3:b3:8f:48:59:46:e4:
         4d:09:91:6c:8f:4e:b0:2c:2b:9a:6e:69:f1:ef:2d:5b:e4:10:
         e4:ca:f7:dd
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB
NkY1NjExMC8GA1UEBRMoMzdBNjVGREI0MEU4QzY1OUIxN0U1MDAwRkE4OUE2NTY4
MDk3NkQ1QjAeFw0yNjAyMTMwNjI2NDFaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OGVjNDIxLWUzODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaC8RNkqNL0g19kifm/ZbgzVRpzuqTC/BbURmp1ZxBGmuLcHAunI4liwGKvAqE
5prTN0qPzciT/V/vdryUaGFjzF+3/dl859xYWM+YHqzgDFCEwG+gv2MhBwfR1DfC
E1zw3NspbRw/bNQ+xSBPlamQ3oPbmJ3GTEphERZhBl45xWSI8qJnEewcHp01f3K6
aDpnFoFPL5Z4jfucM4WflXDkck6xaJUV8fikjprfvPwQCCn4WZUopHM4y5K2Oc8b
ws5k4kKMLZYe3mnLeThQt2HHKJ8zD7AezaQDeWSuxXi4xH1IJ15YBPTABlm7n9Nc
NteeXmMgytHqGhPptTVYEV1BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKz+30+rO
xpN0hYfwtCHqQa+otdcwHwYDVR0jBBgwFoAUN6Zf20DoxlmxflAA+ommVoCXbVsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2Lzg4MTJGQkU0NkU4
ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxteGZsQUEtb21tVm9DWGJW
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvTjZaZjIwRG94bG14ZmxBQS1vbW1Wb0NYYlZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkY1Ni84ODEyRkJFNDZFODgxMUYwQUQ1RDFBMTJDNEY5QUUwMi80ODI4NzRBRTcx
MEUxMUYwQjRDQkE0MzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaH41jANBgkqhkiG9w0BAQsFAAOCAQEAM2U77kEIYeSXdByv
depv9HoCYEpuQh47Yp8DE9Jv1tlUHwubqNmHv7oQjWdollSnIOXPPcDiJ9M4dTRs
tQtFzCY6beypJxXrvxKSVrRFJtYFseooY1AknbVhtjYHc2nSQJaFF2PO5jPrjoHI
UPymKVPsE89rgRpP/IGmT5hcMbRhp5g8DsRauvPrcXna7rJq21y+m2X1i7JweCVM
MKSh4uUE/axajJwx07Dj2+wHSosVoLn5CgkMJQD5zoIr1bYcv7etmI7ltcG/zMQ8
cpKttS6dI+cPjNWIgX+i/hBOwW40L5+js49IWUbkTQmRbI9OsCwrmm5p8e8tW+QQ
5Mr33Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:25 2026 by rpki-client