Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/DB175658E9D711EBA3549B09C4F9AE02.roa
File:                     DB175658E9D711EBA3549B09C4F9AE02.roa (raw, json)
Hash identifier:          Pa82efULVCkq/fPGo97ybHbZdFtjjIOE9/jdMV1NbUw=
Subject key identifier:   C5:82:B1:A5:64:62:D9:F7:A1:EE:86:16:20:1A:99:B9:AA:77:3C:AE
Certificate issuer:       /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
Certificate serial:       0920
Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/DB175658E9D711EBA3549B09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:04:27 +0000
ROA not before:           Mon 12 May 2025 21:18:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     54994
IP address blocks:        45.116.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl
                          rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336 (0x920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD
        Validity
            Not Before: May 12 21:18:16 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4476a-5141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:d8:9b:df:f2:d8:c5:ed:78:f9:9a:b7:73:
                    35:58:72:d2:4c:7e:6e:82:cf:4f:f1:a5:35:e0:f1:
                    d1:73:9a:eb:06:31:dd:08:a6:69:cb:da:c4:e7:0e:
                    de:69:0a:e2:1b:90:e4:45:a6:95:4f:13:da:30:fc:
                    ba:64:ee:ef:cf:1e:43:53:3f:19:58:53:77:a2:5f:
                    3a:95:18:88:61:a7:31:26:82:e7:e7:3e:97:0a:7d:
                    47:92:80:5c:03:78:c1:60:33:df:8a:61:59:c6:e1:
                    8d:88:a7:23:28:71:3f:aa:c8:02:60:c3:5d:88:5e:
                    c6:3a:99:76:6c:16:cd:bf:f8:23:47:0d:0f:61:c3:
                    41:7e:a3:a7:4f:3b:f0:f2:41:05:0c:2f:ee:4d:80:
                    25:89:51:4b:d8:8f:a6:54:b9:19:e0:2b:00:ff:ad:
                    9f:1e:b8:46:32:c9:ce:e3:e0:a0:0d:52:09:65:e6:
                    41:34:72:7b:45:c3:15:91:00:a6:61:df:20:7a:58:
                    41:f4:cb:7d:5f:26:3b:c2:b8:34:ff:81:79:2c:4f:
                    b4:ec:be:6d:73:09:09:05:de:49:1b:7d:b2:45:e1:
                    3d:82:cc:25:5e:79:43:1c:ca:9d:20:9a:cb:5a:d7:
                    a1:b6:a4:e2:35:23:2c:79:a1:8a:85:39:9b:72:e9:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:82:B1:A5:64:62:D9:F7:A1:EE:86:16:20:1A:99:B9:AA:77:3C:AE
            X509v3 Authority Key Identifier:
                keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/DB175658E9D711EBA3549B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6d:27:2a:aa:a5:42:03:2c:d1:a7:06:73:bb:dc:38:9d:4c:
         ec:b3:9f:1a:4b:44:40:de:a3:7d:63:57:f9:18:32:14:4e:8c:
         69:cd:78:a2:51:6d:54:24:de:a5:bc:a9:7e:33:b5:72:5a:89:
         94:54:b5:35:a4:aa:67:e0:cd:d7:9f:24:75:e1:89:e1:3e:4d:
         88:21:86:19:36:6f:07:7e:64:c0:1d:be:ac:8d:a1:ee:5a:25:
         9b:db:da:5e:7e:c4:b1:b4:99:aa:50:bf:8b:94:27:cc:85:30:
         34:54:03:df:d8:9b:51:59:b5:8d:84:e8:3e:77:cd:40:e1:80:
         c1:08:47:1f:83:88:16:1c:64:60:0e:bf:03:40:be:b4:4e:37:
         f7:6f:63:81:12:7c:6d:71:4f:51:e8:11:18:16:71:8c:5a:9f:
         b1:b7:26:30:57:c8:84:55:c5:15:86:2e:4c:01:69:bb:62:42:
         02:0e:44:e3:db:1c:3f:d9:55:32:44:da:6d:2d:69:b9:b4:73:
         e9:a2:a9:4f:cd:39:c4:4b:ab:16:7b:c5:79:d2:c7:b9:92:a3:
         e9:39:30:74:f8:12:89:19:7e:ed:99:d8:f6:6c:17:97:d1:08:
         14:ba:b7:be:1b:87:5c:0c:bd:13:02:76:d5:53:04:31:37:22:
         c2:13:31:12
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4
QkExNzBCQUQwHhcNMjUwNTEyMjExODE2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDc2YS01MTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsxbYm9/y2MXtePmat3M1WHLSTH5ugs9P8aU14PHRc5rrBjHdCKZpy9rE5w7e
aQriG5DkRaaVTxPaMPy6ZO7vzx5DUz8ZWFN3ol86lRiIYacxJoLn5z6XCn1HkoBc
A3jBYDPfimFZxuGNiKcjKHE/qsgCYMNdiF7GOpl2bBbNv/gjRw0PYcNBfqOnTzvw
8kEFDC/uTYAliVFL2I+mVLkZ4CsA/62fHrhGMsnO4+CgDVIJZeZBNHJ7RcMVkQCm
Yd8gelhB9Mt9XyY7wrg0/4F5LE+07L5tcwkJBd5JG32yReE9gswlXnlDHMqdIJrL
WtehtqTiNSMseaGKhTmbcumUSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMWCsaVk
Ytn3oe6GFiAambmqdzyuMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw
RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkM2REQvRjNGQjkwNTZDMEY0MTFFQUIwNURGQzVFQzRGOUFFMDIvREIxNzU2NThF
OUQ3MTFFQkEzNTQ5QjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQALXRTMA0GCSqGSIb3DQEBCwUAA4IBAQBrbScqqqVCAyzRpwZzu9w4
nUzss58aS0RA3qN9Y1f5GDIUToxpzXiiUW1UJN6lvKl+M7VyWomUVLU1pKpn4M3X
nyR14YnhPk2IIYYZNm8HfmTAHb6sjaHuWiWb29pefsSxtJmqUL+LlCfMhTA0VAPf
2JtRWbWNhOg+d81A4YDBCEcfg4gWHGRgDr8DQL60Tjf3b2OBEnxtcU9R6BEYFnGM
Wp+xtyYwV8iEVcUVhi5MAWm7YkICDkTj2xw/2VUyRNptLWm5tHPpoqlPzTnES6sW
e8V50se5kqPpOTB0+BKJGX7tmdj2bBeX0QgUure+G4dcDL0TAnbVUwQxNyLCEzES
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:43 2026 by rpki-client