Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa
File:                     B6FD84CE54F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier:          9ImJtWj6yuZgtcmv1bgeujWxq+BLLmLeGu5HgVdDTSg=
Subject key identifier:   5C:E0:59:01:97:3C:2A:9C:C4:CF:1B:F2:F0:0C:9F:6C:0E:38:B8:14
Certificate issuer:       /CN=A91AB063/serialNumber=E7584F959A081A4DD94809353051D235939C391D
Certificate serial:       1C16
Authority key identifier: E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:34:00 +0000
ROA not before:           Mon 24 Nov 2025 16:04:32 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18021
IP address blocks:        202.12.0.0/24 maxlen: 24
                          202.86.96.0/20 maxlen: 24
                          2400:5900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7190 (0x1c16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB063, serialNumber=E7584F959A081A4DD94809353051D235939C391D
        Validity
            Not Before: Nov 24 16:04:32 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a44e58-de6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:2f:94:aa:cb:27:a3:39:e1:0c:83:5b:50:
                    0d:09:0c:51:cf:63:02:a9:0c:d8:ee:46:01:88:2a:
                    05:d9:92:a8:1d:c7:fc:d5:e2:a9:27:0f:dc:e9:ba:
                    93:9b:31:59:22:0a:8e:cf:1b:5b:ec:93:2d:87:26:
                    c7:74:33:19:67:d9:a6:30:ab:07:a2:7a:f0:bf:a3:
                    e5:1d:49:dd:9e:44:a1:0c:e4:39:98:36:6d:85:ca:
                    89:2a:87:5f:69:c6:6f:93:41:e7:a6:0f:3a:dd:79:
                    4f:1a:86:40:c9:68:dd:be:28:38:78:64:9f:47:48:
                    23:86:8a:17:53:92:21:1d:18:04:88:31:f7:7e:ec:
                    62:c3:fb:47:19:04:0f:50:5e:dc:ae:7f:01:2f:77:
                    47:46:6e:74:11:be:95:07:7a:c4:c9:01:f7:91:0f:
                    77:3f:bc:c5:b6:49:a6:97:f5:21:e7:b6:79:43:c0:
                    11:cb:60:d8:89:c3:36:08:64:3a:0b:4f:3f:6d:cc:
                    7e:8a:f6:9a:17:be:6f:c6:2c:d2:b6:dd:e0:f2:01:
                    26:bf:f3:fb:f1:2b:76:8c:46:9e:df:b1:49:65:ac:
                    65:1f:19:a8:a9:5b:72:6f:a8:dd:df:57:2d:64:22:
                    e1:69:46:24:a0:57:89:76:fa:64:b3:ca:aa:39:24:
                    3c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E0:59:01:97:3C:2A:9C:C4:CF:1B:F2:F0:0C:9F:6C:0E:38:B8:14
            X509v3 Authority Key Identifier:
                keyid:E7:58:4F:95:9A:08:1A:4D:D9:48:09:35:30:51:D2:35:93:9C:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/51hPlZoIGk3ZSAk1MFHSNZOcOR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/51hPlZoIGk3ZSAk1MFHSNZOcOR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB063/1186B6BC093A11E79540950BC4F9AE02/B6FD84CE54F611E79DF7E643C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.0.0/24
                  202.86.96.0/20
                IPv6:
                  2400:5900::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:b5:22:0a:36:3a:a4:c9:c6:bf:c0:42:b3:13:1a:51:83:39:
         01:09:3c:8f:0e:8f:50:6c:aa:5f:23:25:25:f4:0b:71:1e:6c:
         cf:86:ec:ba:03:bf:ee:57:fd:02:f2:49:80:36:31:d1:bb:2f:
         9b:8f:f9:ac:80:77:24:c0:6a:cf:a1:c0:36:01:db:e3:33:99:
         09:e4:3b:67:77:f3:71:81:bb:54:4d:b5:f4:c4:b5:13:72:d0:
         df:bc:1b:39:1a:87:4c:d6:a1:cf:ef:65:af:93:be:17:b6:7d:
         10:9d:4e:99:62:61:2f:d7:27:b6:a0:c8:40:69:ce:11:45:3d:
         35:c3:fc:b9:c6:3c:ba:12:40:46:5d:50:a8:a8:4b:b2:e9:a1:
         e3:75:db:c4:48:db:54:89:99:7f:8a:d8:01:57:ac:ad:b0:ba:
         ac:69:d9:4b:3e:69:74:0d:c4:af:76:ba:8a:33:68:d6:e2:a2:
         da:39:55:82:c6:d7:4e:94:92:56:80:42:88:e9:ff:79:82:d0:
         9a:d4:c6:d9:3b:0b:2a:63:4c:35:12:f1:b6:ef:d3:cc:1e:86:
         07:10:64:cb:00:ac:df:ab:01:59:ed:28:76:d7:5f:c0:55:d1:
         96:e7:06:73:91:3b:0f:18:2a:4c:8a:26:9d:1b:80:a1:bf:58:
         4c:1e:11:9e
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICHBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIwNjMxMTAvBgNVBAUTKEU3NTg0Rjk1OUEwODFBNEREOTQ4MDkzNTMwNTFEMjM1
OTM5QzM5MUQwHhcNMjUxMTI0MTYwNDMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGU1OC1kZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmz4vlKrLJ6M54QyDW1ANCQxRz2MCqQzY7kYBiCoF2ZKoHcf81eKpJw/c6bqT
mzFZIgqOzxtb7JMthybHdDMZZ9mmMKsHonrwv6PlHUndnkShDOQ5mDZthcqJKodf
acZvk0Hnpg863XlPGoZAyWjdvig4eGSfR0gjhooXU5IhHRgEiDH3fuxiw/tHGQQP
UF7crn8BL3dHRm50Eb6VB3rEyQH3kQ93P7zFtkmml/Uh57Z5Q8ARy2DYicM2CGQ6
C08/bcx+ivaaF75vxizStt3g8gEmv/P78St2jEae37FJZaxlHxmoqVtyb6jd31ct
ZCLhaUYkoFeJdvpks8qqOSQ8LwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFzgWQGX
PCqcxM8b8vAMn2wOOLgUMB8GA1UdIwQYMBaAFOdYT5WaCBpN2UgJNTBR0jWTnDkd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA2My8xMTg2QjZCQzA5
M0ExMUU3OTU0MDk1MEJDNEY5QUUwMi81MWhQbFpvSUdrM1pTQWsxTUZIU05aT2NP
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUxaFBsWm9JR2szWlNBazFNRkhTTlpPY09SMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUIwNjMvMTE4NkI2QkMwOTNBMTFFNzk1NDA5NTBCQzRGOUFFMDIvQjZGRDg0Q0U1
NEY2MTFFNzlERjdFNjQzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQAygwAAwQEylZgMA0EAgACMAcDBQAkAFkAMA0GCSqGSIb3DQEBCwUA
A4IBAQCAtSIKNjqkyca/wEKzExpRgzkBCTyPDo9QbKpfIyUl9AtxHmzPhuy6A7/u
V/0C8kmANjHRuy+bj/msgHckwGrPocA2AdvjM5kJ5Dtnd/NxgbtUTbX0xLUTctDf
vBs5GodM1qHP72Wvk74Xtn0QnU6ZYmEv1ye2oMhAac4RRT01w/y5xjy6EkBGXVCo
qEuy6aHjddvESNtUiZl/itgBV6ytsLqsadlLPml0DcSvdrqKM2jW4qLaOVWCxtdO
lJJWgEKI6f95gtCa1MbZOwsqY0w1EvG279PMHoYHEGTLAKzfqwFZ7Sh211/AVdGW
5wZzkTsPGCpMiiadG4Chv1hMHhGe
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:49 2026 by rpki-client