Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2B9FBCB0DEC911EBA828524CC4F9AE02.roa
File:                     2B9FBCB0DEC911EBA828524CC4F9AE02.roa (raw, json)
Hash identifier:          YiSRee5vl7EyJJPjfDEZ2260d09lp/o9qHx1R/OGGjM=
Subject key identifier:   CC:F2:E5:CF:AC:64:B7:2D:88:A8:A5:60:BF:E1:93:AD:46:E0:64:56
Certificate issuer:       /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
Certificate serial:       0D6A
Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2B9FBCB0DEC911EBA828524CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:34:38 +0000
ROA not before:           Fri 28 Mar 2025 18:29:38 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58715
IP address blocks:        45.114.84.0/22 maxlen: 24
                          103.54.36.0/22 maxlen: 24
                          2403:41c0::/32 maxlen: 36
                          2403:41c0:fc00::/48 maxlen: 48
                          2403:41c0:fc05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl
                          rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3434 (0xd6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9
        Validity
            Not Before: Mar 28 18:29:38 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a45c8e-5ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:33:a8:84:95:01:38:3c:d5:e7:2b:6c:0d:
                    52:21:26:73:fc:b0:3c:9e:35:ed:41:a5:58:ed:e8:
                    64:f3:0a:42:59:f7:53:ca:9d:24:ac:21:08:c1:47:
                    52:16:35:c6:4c:1e:91:83:d8:f1:4a:63:0c:36:30:
                    49:ed:84:c2:bf:53:99:87:58:e7:13:cc:f2:05:e3:
                    d6:e4:48:1e:b8:a5:da:fb:b1:5c:eb:a3:f7:7a:82:
                    bf:5e:5a:6d:22:d0:57:72:fa:da:67:01:fb:46:19:
                    1f:aa:61:91:b5:5b:43:47:97:62:72:b5:bd:0c:a3:
                    b1:c6:b4:99:78:05:dc:ee:cb:12:7f:fc:68:c1:be:
                    c8:41:23:e3:34:1c:25:ff:f3:37:81:f4:24:5c:c8:
                    a3:36:c8:a9:d3:a1:67:81:68:bd:79:60:a4:b9:b8:
                    62:fe:f8:b9:e3:b5:03:8c:ad:a3:25:41:87:54:05:
                    49:dd:c4:8f:e2:1a:41:21:b8:88:66:2b:27:41:ef:
                    97:69:ce:91:90:90:9c:8d:55:58:73:43:ba:08:cf:
                    f5:c6:a3:4c:ee:49:88:9b:0e:60:96:05:1c:70:b5:
                    e5:4c:b5:72:4e:87:ee:38:c9:74:fd:b2:24:8c:69:
                    68:a1:3d:5f:1f:10:0e:7e:1c:96:23:f0:77:a4:d3:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F2:E5:CF:AC:64:B7:2D:88:A8:A5:60:BF:E1:93:AD:46:E0:64:56
            X509v3 Authority Key Identifier:
                keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2B9FBCB0DEC911EBA828524CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.84.0/22
                  103.54.36.0/22
                IPv6:
                  2403:41c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:63:4b:dd:63:a5:1b:b5:5f:17:3d:e7:ae:e8:fc:dd:e7:
         b7:ae:45:7a:e5:54:20:81:3d:c4:4c:28:e0:54:0f:12:81:7d:
         63:61:e3:2a:bc:21:40:bd:86:2f:db:be:c0:67:ba:c1:67:10:
         80:12:38:5e:e8:cc:0b:ff:f0:48:53:e7:8d:16:a5:56:30:35:
         0e:0b:ce:bf:69:54:b2:e9:51:59:62:b8:36:88:56:83:ac:a2:
         1e:ac:9f:cc:42:55:4a:c3:60:d2:be:e0:b9:b2:cd:85:06:6f:
         aa:ad:f5:f1:fc:25:d9:80:1d:c0:8f:27:41:c4:b4:f7:2e:11:
         e0:2b:1d:8f:56:89:47:d3:5a:86:9f:2b:95:5d:76:1c:56:ed:
         08:ed:1e:15:24:85:4e:f1:e1:2b:7b:df:5b:4f:33:7d:4f:c3:
         91:e7:49:5f:f0:6d:7a:74:af:bd:96:d0:1a:90:01:0e:e2:eb:
         05:8a:84:96:20:32:c4:e9:bb:15:1a:26:7a:bb:57:bf:fc:3d:
         bb:cb:7d:7c:ca:0a:76:29:f4:c1:41:9f:14:87:8a:11:21:37:
         3d:67:39:58:a0:86:6a:50:93:26:3c:1b:38:88:4e:45:73:c5:
         2b:bd:63:3c:a7:06:c9:61:69:cf:5a:81:4f:cb:74:2f:78:95:
         64:c1:2c:9f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICDWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx
RTNGQzRGRDkwHhcNMjUwMzI4MTgyOTM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWM4ZS01YWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy8IzqISVATg81ecrbA1SISZz/LA8njXtQaVY7ehk8wpCWfdTyp0krCEIwUdS
FjXGTB6Rg9jxSmMMNjBJ7YTCv1OZh1jnE8zyBePW5EgeuKXa+7Fc66P3eoK/Xlpt
ItBXcvraZwH7RhkfqmGRtVtDR5dicrW9DKOxxrSZeAXc7ssSf/xowb7IQSPjNBwl
//M3gfQkXMijNsip06FngWi9eWCkubhi/vi547UDjK2jJUGHVAVJ3cSP4hpBIbiI
ZisnQe+Xac6RkJCcjVVYc0O6CM/1xqNM7kmImw5glgUccLXlTLVyTofuOMl0/bIk
jGlooT1fHxAOfhyWI/B3pNPcmQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMzy5c+s
ZLctiKilYL/hk61G4GRWMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz
RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUNCQjcvNUUxRkNFQkNGM0Y5MTFFOUI4QTgzMTBBQzRGOUFFMDIvMkI5RkJDQjBE
RUM5MTFFQkE4Mjg1MjRDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCLXJUAwQCZzYkMA0EAgACMAcDBQAkA0HAMA0GCSqGSIb3DQEBCwUA
A4IBAQARpmNL3WOlG7VfFz3nruj83ee3rkV65VQggT3ETCjgVA8SgX1jYeMqvCFA
vYYv277AZ7rBZxCAEjhe6MwL//BIU+eNFqVWMDUOC86/aVSy6VFZYrg2iFaDrKIe
rJ/MQlVKw2DSvuC5ss2FBm+qrfXx/CXZgB3AjydBxLT3LhHgKx2PVolH01qGnyuV
XXYcVu0I7R4VJIVO8eEre99bTzN9T8OR50lf8G16dK+9ltAakAEO4usFioSWIDLE
6bsVGiZ6u1e//D27y318ygp2KfTBQZ8Uh4oRITc9ZzlYoIZqUJMmPBs4iE5Fc8Ur
vWM8pwbJYWnPWoFPy3QveJVkwSyf
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:42 2026 by rpki-client