Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/0FCEE1C4F76411F08B4529B5436F56BC.roa
File:                     0FCEE1C4F76411F08B4529B5436F56BC.roa (raw, json)
Hash identifier:          ARWDJzOSFseHYrmvd3v84W+z4laPOxW/BizgI/8vmQQ=
Subject key identifier:   4A:80:63:6C:94:49:13:4B:34:9C:C0:41:41:09:88:40:31:28:9F:7A
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       36F1
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/0FCEE1C4F76411F08B4529B5436F56BC.roa
Signing time:             Sun 01 Mar 2026 18:43:57 +0000
ROA not before:           Thu 22 Jan 2026 07:29:18 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141212
IP address blocks:        121.46.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14065 (0x36f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Jan 22 07:29:18 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a488ed-ecc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1b:93:72:1a:34:d3:f0:38:97:42:ba:f8:75:
                    61:f2:af:18:29:77:8c:7d:d2:97:1d:36:99:90:de:
                    4c:91:f5:9a:55:09:4b:bc:08:01:84:28:e2:cb:64:
                    49:6e:22:51:5f:61:3f:87:31:9a:85:ae:42:0a:04:
                    a3:a1:49:50:dc:64:b2:3a:d3:e4:89:3a:87:3f:eb:
                    a8:12:07:fb:0a:c1:9e:35:dd:ab:bc:16:8f:62:2e:
                    06:fc:e0:7c:59:8c:38:36:f6:2c:56:35:72:bd:15:
                    06:4a:f7:e4:ae:cb:2e:e0:ad:5f:5a:1d:43:e9:ac:
                    dc:f1:46:8f:ea:01:68:2f:89:5b:dd:0b:57:f0:b2:
                    bf:4a:d4:e5:5b:f3:bc:8f:8c:6b:49:d5:ab:96:a9:
                    00:1f:9d:d8:48:0c:1f:0e:c0:ec:c3:3c:a2:5d:77:
                    fd:ec:31:9e:02:0e:88:eb:f0:a7:9e:19:88:fb:68:
                    3f:aa:ff:f7:fb:64:4f:a9:9a:5b:53:46:70:74:42:
                    f6:ee:b8:ab:e6:4f:fb:d3:14:37:44:4b:e2:84:ad:
                    a2:ee:f7:76:86:fe:1b:9c:27:2e:c3:cc:a3:2c:ff:
                    27:ce:fe:37:2e:23:2f:3c:f1:b6:3e:b8:16:ef:39:
                    13:77:bb:10:39:ff:42:e0:f9:23:28:bd:a0:e3:b5:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:80:63:6C:94:49:13:4B:34:9C:C0:41:41:09:88:40:31:28:9F:7A
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/0FCEE1C4F76411F08B4529B5436F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.46.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:a2:dc:d6:ea:8b:ad:5f:5a:fa:e0:f1:b4:e2:21:8d:cd:
         66:fa:7d:9c:b1:e0:49:29:ee:42:d9:a1:4a:4a:47:77:09:aa:
         2f:4a:71:9b:c4:3f:6c:5c:f2:30:68:35:73:83:42:42:5e:0a:
         f8:7b:ef:a8:c2:4c:36:1b:d9:a5:4b:3b:76:39:81:ff:f9:f5:
         85:14:3b:20:67:aa:f7:4d:fe:4c:90:bc:ef:b5:2b:bd:e1:44:
         91:13:27:77:ba:8a:36:e3:6b:e5:f9:fd:7e:9e:85:1b:b6:d5:
         8c:b8:4b:80:23:cb:f1:73:2a:75:f9:ba:13:3f:80:8b:df:b2:
         63:51:a5:95:79:e1:94:16:d0:de:fb:71:ea:e3:ec:b4:a8:c9:
         89:3b:dd:51:b9:f4:8d:f0:c6:6b:19:80:ee:cf:33:5c:9e:8a:
         27:f1:63:ef:9d:58:b5:ef:5d:0d:bd:e9:66:b1:6f:6c:21:ca:
         b0:6f:7c:f0:71:e2:72:f8:ee:5e:34:e0:ae:f4:48:5a:29:46:
         43:cb:d3:9f:59:8e:d6:41:80:90:fd:32:38:96:e5:21:97:6d:
         01:08:a3:27:f0:19:e8:a9:3d:fa:4a:b2:53:c1:d7:27:c8:a7:
         27:bf:73:b5:b7:b5:e1:10:51:ca:96:1e:68:c1:09:cf:49:fa:
         d9:93:fc:5f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjYwMTIyMDcyOTE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODhlZC1lY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlxuTcho00/A4l0K6+HVh8q8YKXeMfdKXHTaZkN5MkfWaVQlLvAgBhCjiy2RJ
biJRX2E/hzGaha5CCgSjoUlQ3GSyOtPkiTqHP+uoEgf7CsGeNd2rvBaPYi4G/OB8
WYw4NvYsVjVyvRUGSvfkrssu4K1fWh1D6azc8UaP6gFoL4lb3QtX8LK/StTlW/O8
j4xrSdWrlqkAH53YSAwfDsDswzyiXXf97DGeAg6I6/CnnhmI+2g/qv/3+2RPqZpb
U0ZwdEL27rir5k/70xQ3REvihK2i7vd2hv4bnCcuw8yjLP8nzv43LiMvPPG2PrgW
7zkTd7sQOf9C4PkjKL2g47U1dQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEqAY2yU
SRNLNJzAQUEJiEAxKJ96MB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvMEZDRUUxQzRG
NzY0MTFGMDhCNDUyOUI1NDM2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAeS5DMA0GCSqGSIb3DQEBCwUAA4IBAQB0XqLc1uqLrV9a+uDxtOIh
jc1m+n2cseBJKe5C2aFKSkd3CaovSnGbxD9sXPIwaDVzg0JCXgr4e++owkw2G9ml
Szt2OYH/+fWFFDsgZ6r3Tf5MkLzvtSu94USREyd3uoo242vl+f1+noUbttWMuEuA
I8vxcyp1+boTP4CL37JjUaWVeeGUFtDe+3Hq4+y0qMmJO91RufSN8MZrGYDuzzNc
noon8WPvnVi1710NvelmsW9sIcqwb3zwceJy+O5eNOCu9EhaKUZDy9OfWY7WQYCQ
/TI4luUhl20BCKMn8BnoqT36SrJTwdcnyKcnv3O1t7XhEFHKlh5owQnPSfrZk/xf
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:51 2026 by rpki-client