Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa
File:                     8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (raw, json)
Hash identifier:          aBLu12X/KjBQz6+vTYYYPJq2RB5e32VzOLCjoKt8rHA=
Subject key identifier:   AF:40:60:53:CA:EF:95:2C:63:A6:85:34:66:15:2D:20:2D:FF:20:32
Certificate issuer:       /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Certificate serial:       0C66
Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:55:34 +0000
ROA not before:           Thu 28 Aug 2025 19:10:15 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38835
IP address blocks:        45.123.104.0/22 maxlen: 24
                          103.63.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
                          rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
        Validity
            Not Before: Aug 28 19:10:15 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a44556-936a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:aa:f8:09:32:21:03:ff:6b:01:6d:10:7a:
                    63:ac:ef:b7:bd:0d:c5:c4:1a:72:e5:5b:3a:b9:b9:
                    a9:46:1c:05:3d:15:a4:15:2a:a6:3e:69:53:a7:4e:
                    c8:36:f7:5b:00:40:80:58:bb:f5:7c:5f:fb:45:59:
                    56:72:76:a9:3c:b9:af:47:9f:9b:18:63:22:16:3d:
                    30:62:74:9c:6d:15:e5:8a:77:37:3f:de:51:d9:c2:
                    08:99:df:2e:59:fb:20:67:4a:aa:7d:f2:15:6e:f9:
                    30:99:de:ed:89:94:ea:a1:8e:27:f7:b9:6b:6f:7c:
                    fa:12:da:a4:bb:4c:65:2a:80:79:43:84:b0:d7:0d:
                    c7:c3:ed:6e:47:86:f1:d5:e6:65:8c:a5:1d:27:99:
                    34:af:b3:40:ec:6a:8e:5f:f7:8a:94:8e:61:b9:0c:
                    48:f8:dc:be:8a:88:26:b7:a7:7f:d6:42:58:c9:36:
                    9d:9b:9f:61:3c:d9:db:c1:93:60:6b:a6:54:03:0d:
                    1c:eb:36:8d:9c:02:c7:d6:ab:54:a9:35:74:35:27:
                    56:a4:68:2b:aa:c6:6f:c8:86:fc:7c:82:e1:52:10:
                    d1:93:c4:0f:9b:49:0b:00:22:fe:76:0c:c7:47:b8:
                    6f:ac:81:33:1b:e0:19:9d:b0:c0:f4:20:3b:42:e9:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:40:60:53:CA:EF:95:2C:63:A6:85:34:66:15:2D:20:2D:FF:20:32
            X509v3 Authority Key Identifier:
                keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.104.0/22
                  103.63.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:e2:d8:cd:c3:2b:a1:44:30:d5:cd:28:dc:08:cd:8e:b2:a8:
         ac:a7:73:8d:20:08:56:4d:a4:e7:c2:41:de:f4:35:9b:09:4d:
         1e:e4:71:77:e6:86:f0:0f:b2:23:4b:82:49:d9:fa:47:d6:60:
         d9:18:84:d6:ed:72:f4:f3:6d:83:25:7c:5c:72:26:4c:85:60:
         a0:ef:22:a4:45:64:e3:94:d9:9d:8a:be:40:f9:79:a3:87:5e:
         bd:d8:57:29:5d:aa:d1:3d:7a:11:ab:7f:31:ca:d2:2f:86:b8:
         b7:9e:14:75:17:25:0a:5e:29:f0:cf:c4:67:e6:0d:38:24:82:
         b6:5d:80:8b:15:e5:06:08:d2:f8:2f:ef:86:12:e4:aa:1d:22:
         c0:e7:65:2d:54:28:94:41:fa:64:e9:97:b8:2b:7c:85:eb:d5:
         f5:a2:af:32:d4:68:3b:9e:4c:8c:0d:7b:29:f6:b4:5b:7b:b9:
         c6:1d:1a:e6:4f:c1:81:dc:1a:20:01:30:db:c5:3e:c0:b9:dd:
         62:7b:10:21:2e:bc:09:df:a3:54:7f:53:ff:ad:ec:ad:b4:52:
         48:5b:32:39:80:dc:4d:e8:b5:64:9b:ff:02:52:f6:c8:55:f2:
         e4:e1:69:36:cd:48:c8:9a:50:fe:9d:23:7a:58:87:3b:c9:ed:
         b8:f1:d3:82
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD
QTkwQTA0MTAwHhcNMjUwODI4MTkxMDE1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDU1Ni05MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkKKq+AkyIQP/awFtEHpjrO+3vQ3FxBpy5Vs6ubmpRhwFPRWkFSqmPmlTp07I
NvdbAECAWLv1fF/7RVlWcnapPLmvR5+bGGMiFj0wYnScbRXlinc3P95R2cIImd8u
WfsgZ0qqffIVbvkwmd7tiZTqoY4n97lrb3z6Etqku0xlKoB5Q4Sw1w3Hw+1uR4bx
1eZljKUdJ5k0r7NA7GqOX/eKlI5huQxI+Ny+iogmt6d/1kJYyTadm59hPNnbwZNg
a6ZUAw0c6zaNnALH1qtUqTV0NSdWpGgrqsZvyIb8fILhUhDRk8QPm0kLACL+dgzH
R7hvrIEzG+AZnbDA9CA7QukPjwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFK9AYFPK
75UsY6aFNGYVLSAt/yAyMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD
ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTg2NUYvQkY5NjZFNEExQzg5MTFFQUE5Qjk1NzYxQzRGOUFFMDIvOEJCMUVCOUUx
QzhBMTFFQUJBQTczQTYyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXtoAwQCZz/kMA0GCSqGSIb3DQEBCwUAA4IBAQA04tjNwyuhRDDV
zSjcCM2Osqisp3ONIAhWTaTnwkHe9DWbCU0e5HF35obwD7IjS4JJ2fpH1mDZGITW
7XL0822DJXxcciZMhWCg7yKkRWTjlNmdir5A+Xmjh1692FcpXarRPXoRq38xytIv
hri3nhR1FyUKXinwz8Rn5g04JIK2XYCLFeUGCNL4L++GEuSqHSLA52UtVCiUQfpk
6Ze4K3yF69X1oq8y1Gg7nkyMDXsp9rRbe7nGHRrmT8GB3BogATDbxT7Aud1iexAh
LrwJ36NUf1P/reyttFJIWzI5gNxN6LVkm/8CUvbIVfLk4Wk2zUjImlD+nSN6WIc7
ye248dOC
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:46:18 2026 by rpki-client