Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa
File:                     445DB498796011EFA7E9391DC4F9AE02.roa (raw, json)
Hash identifier:          dSCz7IvNO2r+X8zYzOrzx4jBPpWQHgUEzjmsQAJr19U=
Subject key identifier:   88:BB:12:EC:14:6A:88:41:C2:8E:7E:F0:FD:1B:67:18:A6:11:87:AB
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2AFA
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa
Signing time:             Sun 24 May 2026 16:17:53 +0000
ROA not before:           Sun 24 May 2026 16:17:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138420
IP address blocks:        43.245.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
                          rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11002 (0x2afa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: May 24 16:17:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1324b1-f165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cc:45:0b:19:c9:67:6e:dd:49:22:99:a1:4f:
                    83:9a:5c:dd:1b:d7:2b:bc:e6:38:94:27:bb:ca:5c:
                    37:d0:88:0b:da:5c:e0:57:d1:16:79:9a:94:ab:21:
                    a9:1b:b8:a1:45:4a:70:96:6d:2f:ae:d5:01:51:8e:
                    d3:36:8b:9a:98:fa:6e:fc:37:f5:28:f3:16:6f:aa:
                    94:d8:b0:7d:2e:f4:11:02:e7:04:5f:f4:9b:01:2d:
                    a9:56:57:da:53:0e:62:a5:55:54:af:e1:a5:89:a9:
                    db:f2:67:64:44:22:20:52:ec:d6:8c:6f:ee:aa:2f:
                    19:fc:cf:f6:ad:c7:f2:fd:76:c8:80:6b:db:53:3e:
                    b9:b4:aa:4d:b2:96:6d:ea:2f:8a:f6:85:c1:31:67:
                    63:23:dc:f7:b9:f0:aa:b7:64:ee:95:ae:b8:3e:c4:
                    59:b7:e1:54:bb:d3:6b:e0:0b:4b:3e:61:2d:a0:b3:
                    b9:44:02:87:9e:a1:1a:57:19:1d:90:3e:47:5c:9c:
                    b8:68:8a:8e:3c:34:3f:1e:ee:b3:2f:96:ae:5b:b7:
                    82:5a:82:59:12:cb:65:5b:29:20:78:63:9c:be:58:
                    ee:ed:c9:32:b8:8e:2f:ff:ad:8b:e9:a0:cf:fb:40:
                    9b:98:13:24:bb:a5:60:f3:01:35:ef:e7:ef:11:e6:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BB:12:EC:14:6A:88:41:C2:8E:7E:F0:FD:1B:67:18:A6:11:87:AB
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/445DB498796011EFA7E9391DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:0e:f1:91:3e:f9:13:ee:da:18:ad:92:97:bc:cc:3c:b1:
         50:6d:7a:04:6b:fc:e6:e8:f0:b3:9c:a2:c0:4a:4e:9c:7e:a0:
         5a:67:2a:00:8b:4b:fc:41:f8:2f:0e:05:a8:79:19:49:f2:d6:
         ae:a5:f8:21:fb:f4:04:9a:8e:06:65:cb:17:f5:b1:82:0d:4d:
         65:1e:64:3a:fb:2e:19:6f:c1:b4:1a:9a:05:f7:ab:3f:1a:e6:
         38:0c:1e:20:7a:19:6a:78:76:7a:a2:1f:d7:65:51:e7:4a:7c:
         5b:d0:2c:5b:87:a7:d6:08:8b:62:8d:77:c6:2f:aa:57:13:c0:
         b2:86:4b:96:5b:b4:45:52:cf:a6:b0:b2:04:95:80:bf:5c:0e:
         c7:41:e2:81:ac:9b:b6:43:b1:d4:60:e2:bf:55:01:24:28:89:
         ad:04:c6:a7:87:a2:45:1a:37:08:ce:42:81:6b:0d:38:84:13:
         fd:0e:c6:29:e3:5f:5d:8e:d2:fc:50:37:33:51:c6:68:b2:df:
         84:0e:9e:b5:4a:17:51:62:ca:cf:0f:2c:b1:4e:7f:e5:c5:f6:
         e3:a2:09:c2:ba:98:89:07:8e:90:a7:3d:84:cb:2e:57:0f:0d:
         6f:c1:13:02:a8:de:a8:a7:f6:9d:06:e2:0b:00:ce:a8:e3:bf:
         ff:bb:dc:58
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx
MzgxQUIyQzEwHhcNMjYwNTI0MTYxNzUzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEzMjRiMS1mMTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8sxFCxnJZ27dSSKZoU+DmlzdG9crvOY4lCe7ylw30IgL2lzgV9EWeZqUqyGp
G7ihRUpwlm0vrtUBUY7TNouamPpu/Df1KPMWb6qU2LB9LvQRAucEX/SbAS2pVlfa
Uw5ipVVUr+Glianb8mdkRCIgUuzWjG/uqi8Z/M/2rcfy/XbIgGvbUz65tKpNspZt
6i+K9oXBMWdjI9z3ufCqt2Tula64PsRZt+FUu9Nr4AtLPmEtoLO5RAKHnqEaVxkd
kD5HXJy4aIqOPDQ/Hu6zL5auW7eCWoJZEstlWykgeGOcvlju7ckyuI4v/62L6aDP
+0CbmBMku6Vg8wE17+fvEeZg7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIi7EuwU
aohBwo5+8P0bZximEYerMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz
MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjAxQzcvOTdDRjIwRkEzMzIzMTFFNEE2RTc0OTExQzRGOUFFMDIvNDQ1REI0OTg3
OTYwMTFFRkE3RTkzOTFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK/XDMA0GCSqGSIb3DQEBCwUAA4IBAQAeyA7xkT75E+7aGK2Sl7zM
PLFQbXoEa/zm6PCznKLASk6cfqBaZyoAi0v8QfgvDgWoeRlJ8taupfgh+/QEmo4G
ZcsX9bGCDU1lHmQ6+y4Zb8G0GpoF96s/GuY4DB4gehlqeHZ6oh/XZVHnSnxb0Cxb
h6fWCItijXfGL6pXE8CyhkuWW7RFUs+msLIElYC/XA7HQeKBrJu2Q7HUYOK/VQEk
KImtBManh6JFGjcIzkKBaw04hBP9DsYp419djtL8UDczUcZost+EDp61ShdRYsrP
DyyxTn/lxfbjognCupiJB46Qpz2Eyy5XDw1vwRMCqN6op/adBuILAM6o47//u9xY
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:43 2026 by rpki-client