Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa
File:                     8C2F1C96367F11EEB689C243C4F9AE02.roa (raw, json)
Hash identifier:          iD4z83gv4V1v8hV/7hEKQMfQDnDofzsm6hDRN35kLlk=
Subject key identifier:   DF:11:26:04:2F:79:BA:A3:A2:0E:1F:BA:59:59:FD:BD:73:60:32:D3
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       05D3
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa
Signing time:             Thu 10 Sep 2026 23:45:20 +0000
ROA not before:           Thu 10 Sep 2026 23:45:20 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     19701
IP address blocks:        182.54.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Sep 10 23:45:20 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa34110-96cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:b2:74:3a:66:23:9c:42:3f:1c:fb:3e:fe:
                    3a:1d:32:a2:a8:f0:26:14:13:4c:d1:19:4e:5c:f9:
                    f0:32:0c:79:68:71:7e:7e:b9:dc:31:db:43:3c:c8:
                    bf:25:c5:53:5b:05:f3:12:55:ae:82:fc:00:2b:80:
                    b9:7f:4c:bf:0e:c6:9f:ae:96:d0:72:f6:2c:4f:89:
                    81:7b:76:18:03:c4:7c:3e:da:bb:5e:93:71:9f:b4:
                    38:69:e1:35:d8:cf:52:de:6f:3d:40:13:70:c9:e6:
                    48:df:88:90:31:ac:da:31:a1:30:32:27:51:54:a2:
                    b4:18:f4:4b:00:bf:d9:68:8f:95:80:20:53:08:2f:
                    4a:fe:b1:5e:d0:7e:1c:70:a1:5f:d2:0d:86:eb:20:
                    c9:29:67:23:fb:0f:68:03:f2:a3:d7:96:f9:b9:4e:
                    0d:64:b7:a3:54:09:dd:f2:a7:f6:02:f9:85:13:bd:
                    1a:16:ba:b2:f7:1f:00:5c:f3:71:52:e5:8d:a8:e2:
                    d7:72:ef:f1:93:92:a7:3c:9d:23:47:fd:86:74:c7:
                    83:c8:cd:d2:99:cc:6a:0b:b4:64:f3:dc:78:54:05:
                    2a:05:7e:a7:8a:44:86:7a:fb:ae:0e:8f:c0:fb:78:
                    af:ff:06:01:c4:1a:eb:33:cd:e0:ca:eb:c3:3d:39:
                    4c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:11:26:04:2F:79:BA:A3:A2:0E:1F:BA:59:59:FD:BD:73:60:32:D3
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/8C2F1C96367F11EEB689C243C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.54.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:31:75:cf:2a:52:03:3f:ad:78:ee:4e:96:9f:4a:97:c0:27:
         90:5c:12:cc:7e:a5:bc:03:f1:9f:c1:48:46:75:d8:94:ab:98:
         8b:92:af:c1:7d:18:c4:1d:ef:21:17:5f:8e:a7:ba:35:52:5d:
         4e:aa:c4:99:c0:94:b1:9e:4b:c1:14:ea:1a:f4:88:45:91:5c:
         b5:28:c2:e0:0c:1c:24:b3:64:f1:0e:bd:b8:61:57:45:14:4c:
         fa:ac:00:61:e9:5e:d1:8e:e6:91:73:99:95:d7:14:a2:a8:8e:
         a9:21:73:47:54:a6:4b:d8:54:85:3f:c2:78:0e:49:6d:36:c2:
         36:63:9f:b4:73:58:1e:89:71:f5:a8:dd:9d:67:68:b9:0c:86:
         3a:e3:8b:d5:ec:78:4c:b9:8f:b4:0c:04:ad:86:ab:98:67:4f:
         1f:3a:f5:ca:d0:c2:ec:d2:08:92:6f:c8:3e:55:77:e1:56:1e:
         65:0f:52:33:30:1e:29:36:de:11:2e:51:e5:97:40:f2:ef:6b:
         dc:ea:8c:a8:4d:34:19:9d:9d:4c:d4:5b:fc:4f:32:56:68:aa:
         f6:dd:7b:43:59:0a:f1:02:52:f5:c4:3e:33:00:ae:b1:03:9c:
         4f:4c:9e:16:b0:87:84:5a:e5:ae:e6:70:66:8d:f2:f4:7f:34:
         d5:6d:c8:cb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg1QTgxMTAvBgNVBAUTKEFFMEEwRjk4QTA5MDNFMDE1RTVGQzU0Q0I4Q0UwODFE
NDI0REI0RDIwHhcNMjYwOTEwMjM0NTIwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEzNDExMC05NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06iydDpmI5xCPxz7Pv46HTKiqPAmFBNM0RlOXPnwMgx5aHF+frncMdtDPMi/
JcVTWwXzElWugvwAK4C5f0y/DsafrpbQcvYsT4mBe3YYA8R8Ptq7XpNxn7Q4aeE1
2M9S3m89QBNwyeZI34iQMazaMaEwMidRVKK0GPRLAL/ZaI+VgCBTCC9K/rFe0H4c
cKFf0g2G6yDJKWcj+w9oA/Kj15b5uU4NZLejVAnd8qf2AvmFE70aFrqy9x8AXPNx
UuWNqOLXcu/xk5KnPJ0jR/2GdMeDyM3SmcxqC7Rk89x4VAUqBX6nikSGevuuDo/A
+3iv/wYBxBrrM83gyuvDPTlMSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN8RJgQv
ebqjog4fullZ/b1zYDLTMB8GA1UdIwQYMBaAFK4KD5igkD4BXl/FTLjOCB1CTbTS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVBOC9BNTMwODE0NjJD
REUxMUVDQUE2RkU2NzhDNEY5QUUwMi9yZ29QbUtDUVBnRmVYOFZNdU00SUhVSk50
TkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Jnb1BtS0NRUGdGZVg4Vk11TTRJSFVKTnROSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg1QTgvQTUzMDgxNDYyQ0RFMTFFQ0FBNkZFNjc4QzRGOUFFMDIvOEMyRjFDOTYz
NjdGMTFFRUI2ODlDMjQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAtjaFMA0GCSqGSIb3DQEBCwUAA4IBAQAgMXXPKlIDP6147k6Wn0qX
wCeQXBLMfqW8A/GfwUhGddiUq5iLkq/BfRjEHe8hF1+Op7o1Ul1OqsSZwJSxnkvB
FOoa9IhFkVy1KMLgDBwks2TxDr24YVdFFEz6rABh6V7RjuaRc5mV1xSiqI6pIXNH
VKZL2FSFP8J4DkltNsI2Y5+0c1geiXH1qN2dZ2i5DIY644vV7HhMuY+0DASthquY
Z08fOvXK0MLs0giSb8g+VXfhVh5lD1IzMB4pNt4RLlHll0Dy72vc6oyoTTQZnZ1M
1Fv8TzJWaKr23XtDWQrxAlL1xD4zAK6xA5xPTJ4WsIeEWuWu5nBmjfL0fzTVbcjL
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:56:19 2026 by rpki-client