Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa
File:                     0C2077B6D1B511EF944F205DC4F9AE02.roa (raw, json)
Hash identifier:          B0zzX5iDXgPapsRrYTYWSQgEs4jb8ZthX/Rm+C+DCPI=
Subject key identifier:   74:9E:7F:A3:C7:EB:B5:F2:FE:74:A7:03:E4:73:17:D1:ED:4A:FA:98
Certificate issuer:       /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial:       E5
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:57:15 +0000
ROA not before:           Mon 11 Aug 2025 12:13:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134351
IP address blocks:        23.81.40.0/21 maxlen: 21
                          23.106.224.0/21 maxlen: 21
                          142.91.104.0/23 maxlen: 23
                          142.91.106.0/23 maxlen: 23
                          142.91.108.0/22 maxlen: 22
                          173.234.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
        Validity
            Not Before: Aug 11 12:13:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e34b-2677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:14:75:8f:98:2d:2b:86:dc:7f:d8:2b:9d:
                    93:9a:63:03:81:c0:2a:0a:e2:81:42:5f:3a:4a:3c:
                    e3:b5:53:b8:c5:ed:0b:3d:8d:cb:66:ea:f5:99:33:
                    b4:84:e9:cb:21:43:7e:21:a2:6b:dd:eb:5b:6d:77:
                    ef:90:d2:47:c1:f5:8b:2d:4e:ec:91:ff:0c:ee:02:
                    f2:2c:af:8f:84:a2:bb:27:ca:52:61:00:4d:1c:8e:
                    6e:88:d4:c5:f6:a1:8f:0b:f2:09:a5:93:bb:55:4b:
                    4e:4e:da:e3:97:96:4f:f7:90:a0:4d:b7:c1:e7:d6:
                    03:3d:f4:cf:91:23:75:91:dd:8b:b8:c3:6b:52:33:
                    47:27:22:36:6a:85:b3:17:87:05:60:36:4c:a1:51:
                    25:b4:65:67:ee:72:b8:82:31:20:97:3f:ce:bd:ca:
                    f3:a8:3c:66:b8:5a:a1:d5:b6:f0:a5:4e:c6:bc:bb:
                    f0:96:b0:23:5c:ad:d7:89:d5:7a:c6:84:64:e5:30:
                    43:35:63:27:cb:28:a3:69:ae:57:95:d2:a1:85:5a:
                    39:33:19:bb:1c:1a:c0:7b:54:1f:70:74:22:ea:ea:
                    6f:cc:e7:e1:90:df:ef:9e:47:e3:48:d2:83:3a:6f:
                    29:05:bf:b8:a3:31:12:e4:21:be:75:c7:20:06:ff:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:7F:A3:C7:EB:B5:F2:FE:74:A7:03:E4:73:17:D1:ED:4A:FA:98
            X509v3 Authority Key Identifier:
                keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.81.40.0/21
                  23.106.224.0/21
                  142.91.104.0/21
                  173.234.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:81:ca:1c:15:3e:c5:f0:6b:e4:32:28:d7:3f:ea:77:72:29:
         98:62:2d:98:73:5e:19:bc:44:9b:55:42:8a:d3:df:08:e6:49:
         b1:8e:94:e8:ce:9a:65:a4:63:8f:10:b2:ce:32:f9:f2:63:30:
         7f:2c:54:57:e4:ac:67:a8:79:3d:d7:9f:2d:1b:6d:d8:36:78:
         d3:c4:a1:36:23:98:0a:c2:f3:7c:d8:67:b9:c9:de:5c:e7:fe:
         f0:2d:2d:36:c0:46:8d:c2:b0:51:b9:cc:39:9b:bf:67:ac:40:
         ae:c9:cd:58:a7:2b:5c:f8:30:bc:14:eb:2d:71:57:84:ea:23:
         df:a4:e2:5e:aa:6c:f4:11:09:6d:40:ea:2c:64:32:00:13:b8:
         fd:5e:b8:91:fd:30:19:bf:1d:31:bb:6c:e0:84:b9:2f:8c:2b:
         41:8c:16:c7:14:ec:dd:fa:18:70:19:da:2e:97:1c:4f:65:16:
         fd:f6:94:af:85:7a:6b:f5:72:e6:79:40:58:c2:ec:ee:50:51:
         cd:b4:ac:10:45:60:49:14:ff:d6:a7:ed:7f:68:72:51:2b:61:
         98:46:c9:a6:85:1c:04:2e:61:ea:cc:44:54:66:17:fe:fb:1b:
         ae:78:b4:e4:75:3c:56:1f:a2:9a:22:16:bc:89:20:63:78:a6:
         4d:ab:3f:db
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkwODMxMTAvBgNVBAUTKEU4Q0YyMkEwOEU0MzkxQ0FEMTUwRkEzMUI0NERDOTND
OEFCODI1RUEwHhcNMjUwODExMTIxMzA3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTM0Yi0yNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvnsUdY+YLSuG3H/YK52TmmMDgcAqCuKBQl86SjzjtVO4xe0LPY3LZur1mTO0
hOnLIUN+IaJr3etbbXfvkNJHwfWLLU7skf8M7gLyLK+PhKK7J8pSYQBNHI5uiNTF
9qGPC/IJpZO7VUtOTtrjl5ZP95CgTbfB59YDPfTPkSN1kd2LuMNrUjNHJyI2aoWz
F4cFYDZMoVEltGVn7nK4gjEglz/OvcrzqDxmuFqh1bbwpU7GvLvwlrAjXK3XidV6
xoRk5TBDNWMnyyijaa5XldKhhVo5Mxm7HBrAe1QfcHQi6upvzOfhkN/vnkfjSNKD
Om8pBb+4ozES5CG+dccgBv/UZwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFHSef6PH
67Xy/nSnA+RzF9HtSvqYMB8GA1UdIwQYMBaAFOjPIqCOQ5HK0VD6MbRNyTyKuCXq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTA4My9DMDZGMkU0MkQx
QjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtjclJVUG94dEUzSlBJcTRK
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEplby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTkwODMvQzA2RjJFNDJEMUIwMTFFRjg4MzNDOTMzQzRGOUFFMDIvMEMyMDc3QjZE
MUI1MTFFRjk0NEYyMDVEQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQDF1EoAwQDF2rgAwQDjltoAwQCrepAMA0GCSqGSIb3DQEBCwUAA4IB
AQCigcocFT7F8GvkMijXP+p3cimYYi2Yc14ZvESbVUKK098I5kmxjpTozpplpGOP
ELLOMvnyYzB/LFRX5KxnqHk9158tG23YNnjTxKE2I5gKwvN82Ge5yd5c5/7wLS02
wEaNwrBRucw5m79nrECuyc1Ypytc+DC8FOstcVeE6iPfpOJeqmz0EQltQOosZDIA
E7j9XriR/TAZvx0xu2zghLkvjCtBjBbHFOzd+hhwGdoulxxPZRb99pSvhXpr9XLm
eUBYwuzuUFHNtKwQRWBJFP/Wp+1/aHJRK2GYRsmmhRwELmHqzERUZhf++xuueLTk
dTxWH6KaIha8iSBjeKZNqz/b
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:51 2026 by rpki-client