Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/C7AAEA76637311EF97465324C4F9AE02.roa
File:                     C7AAEA76637311EF97465324C4F9AE02.roa (raw, json)
Hash identifier:          bxCZLljr+spnnN33dMd2+qlwJCFH7g3OgeoGnhL9s+w=
Subject key identifier:   AA:8C:AF:5A:84:89:7F:90:79:A8:53:6C:15:EC:95:0B:03:F5:10:8F
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       0201
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/C7AAEA76637311EF97465324C4F9AE02.roa
Signing time:             Thu 08 Oct 2026 23:43:10 +0000
ROA not before:           Thu 08 Oct 2026 23:43:10 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     142629
IP address blocks:        157.20.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: Oct  8 23:43:10 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac82a8e-1ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:7f:3c:50:b2:9b:8d:d7:75:20:8f:6e:f2:
                    6e:63:c0:a9:31:6c:cc:08:b6:20:29:7f:6b:ec:da:
                    ef:ab:3f:db:4f:41:43:1b:6a:7e:0d:6a:aa:9d:68:
                    b8:a2:b4:58:9c:12:16:26:39:f1:0c:26:10:b4:58:
                    d4:a7:96:ea:59:5e:18:02:e2:25:6d:1a:a7:26:26:
                    c9:aa:2a:f3:0f:76:a1:7b:7f:cc:ae:ce:a5:f4:d1:
                    fb:f0:7b:0d:b2:17:50:50:ca:ae:23:46:27:44:3f:
                    2a:61:90:72:3d:af:ca:cf:6f:94:f3:9e:5b:34:f7:
                    91:cb:40:b6:73:1b:9b:0d:e0:90:81:01:4f:b0:48:
                    36:74:e1:de:b6:bf:13:98:c9:a0:da:06:0e:a6:83:
                    fe:18:1c:0f:a3:8f:03:13:da:9f:eb:dd:56:02:74:
                    5b:39:ad:81:c3:b7:ac:aa:27:49:38:15:12:7d:97:
                    39:47:f6:66:62:02:ad:d3:4a:44:d9:25:01:a9:bc:
                    78:85:b1:ee:5f:be:7a:1a:ad:21:03:b9:89:fc:2f:
                    af:e5:f8:72:72:5e:55:4a:04:0b:83:8b:3e:f6:4a:
                    b6:b7:e5:6c:74:01:91:13:26:d5:5b:0e:52:de:58:
                    af:47:84:8a:e4:63:5d:ee:fa:c3:91:e2:91:3e:2a:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8C:AF:5A:84:89:7F:90:79:A8:53:6C:15:EC:95:0B:03:F5:10:8F
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/C7AAEA76637311EF97465324C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:41:b6:f0:c6:e1:e0:98:bb:e8:fa:5a:55:08:26:f5:b2:
         9d:66:eb:e5:79:fa:16:51:7d:14:4a:1a:d7:34:1f:d9:b2:88:
         4e:3d:c2:6b:0f:29:f2:e1:cd:22:4b:1a:71:24:14:36:b5:7b:
         27:fa:ed:56:c4:09:ae:c1:84:97:19:a3:63:84:a9:ed:f1:4c:
         62:08:b6:0c:97:db:67:ae:05:21:18:26:87:30:de:b5:4b:e4:
         26:b1:8d:9b:36:b6:d8:0a:a6:98:37:cf:79:c3:31:1a:53:22:
         a6:77:b0:01:ad:5e:9a:b8:65:84:5d:7d:58:81:4a:c6:ee:95:
         1e:de:ff:32:6a:b9:7b:c9:5b:d0:8c:cb:6f:5d:2e:90:21:bc:
         de:4c:12:f3:6c:29:e1:93:a2:e9:eb:78:a6:92:86:8b:2a:3d:
         1a:d1:ed:56:68:6b:05:23:e9:b3:2a:4a:88:a3:c7:de:af:82:
         ef:1c:0b:45:f7:3f:d7:45:51:33:55:f3:d2:2f:be:8c:ba:48:
         e4:45:4c:93:34:8e:1f:79:34:d4:50:82:aa:61:df:ad:5d:8d:
         26:d8:2d:ab:a5:b3:9d:ab:8a:5f:67:f7:27:37:87:6c:c9:5f:
         ee:bc:28:6e:44:83:64:f4:7b:7d:57:79:5a:82:a7:4a:72:a9:
         1a:64:00:c6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz
RjA4Q0M4RTIwHhcNMjYxMDA4MjM0MzEwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4MmE4ZS0xY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAJ/PFCym43XdSCPbvJuY8CpMWzMCLYgKX9r7Nrvqz/bT0FDG2p+DWqqnWi4
orRYnBIWJjnxDCYQtFjUp5bqWV4YAuIlbRqnJibJqirzD3ahe3/Mrs6l9NH78HsN
shdQUMquI0YnRD8qYZByPa/Kz2+U855bNPeRy0C2cxubDeCQgQFPsEg2dOHetr8T
mMmg2gYOpoP+GBwPo48DE9qf691WAnRbOa2Bw7esqidJOBUSfZc5R/ZmYgKt00pE
2SUBqbx4hbHuX756Gq0hA7mJ/C+v5fhycl5VSgQLg4s+9kq2t+VsdAGREybVWw5S
3livR4SK5GNd7vrDkeKRPirlEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKqMr1qE
iX+QeahTbBXslQsD9RCPMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3
OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkUwNTYvMDAzRTExNThENzhCMTFFRUEyRUJENzEyQzRGOUFFMDIvQzdBQUVBNzY2
MzczMTFFRjk3NDY1MzI0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnRSOMA0GCSqGSIb3DQEBCwUAA4IBAQBmWkG28Mbh4Ji76PpaVQgm
9bKdZuvlefoWUX0UShrXNB/ZsohOPcJrDyny4c0iSxpxJBQ2tXsn+u1WxAmuwYSX
GaNjhKnt8UxiCLYMl9tnrgUhGCaHMN61S+QmsY2bNrbYCqaYN895wzEaUyKmd7AB
rV6auGWEXX1YgUrG7pUe3v8yarl7yVvQjMtvXS6QIbzeTBLzbCnhk6Lp63imkoaL
Kj0a0e1WaGsFI+mzKkqIo8fer4LvHAtF9z/XRVEzVfPSL76MukjkRUyTNI4feTTU
UIKqYd+tXY0m2C2rpbOdq4pfZ/cnN4dsyV/uvChuRINk9Ht9V3lagqdKcqkaZADG
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:17:09 2026 by rpki-client