Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa
File:                     882F06DEFF0E11EABBCCCF56C4F9AE02.roa (raw, json)
Hash identifier:          qjLg+hKaCW+xuhGBi5lblITRW04TYZ+2VG9H1ZCe3no=
Subject key identifier:   7C:62:3F:F6:DD:7A:E3:6A:FB:DB:37:9B:43:2E:C2:EF:37:FF:EA:1E
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       6146
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:39:24 +0000
ROA not before:           Wed 30 Apr 2025 20:29:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     63673
IP address blocks:        118.143.198.0/24 maxlen: 24
                          118.143.199.0/24 maxlen: 24
                          118.143.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24902 (0x6146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Apr 30 20:29:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a487db-159e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:e5:f5:a4:1d:26:d8:10:e8:01:fd:45:17:
                    f8:2f:de:f9:f0:23:5e:93:a4:7b:51:4f:42:da:55:
                    4d:c6:d7:f1:0d:68:29:7f:73:a5:89:7d:b0:df:c6:
                    89:01:81:31:9f:16:d5:3c:b8:f3:b4:77:41:64:8a:
                    9d:5f:fc:26:c7:30:07:8b:eb:30:70:49:60:9e:19:
                    fd:83:b8:54:3f:a9:51:5e:4d:e3:ef:7a:99:b7:2c:
                    d2:d6:f7:f1:2e:68:41:1d:a8:af:75:20:1c:fd:7f:
                    36:b3:d4:d5:fc:e9:47:b5:dc:02:4f:64:d3:24:d9:
                    eb:bf:87:84:3d:a7:ff:39:96:51:f7:3f:4f:6b:8c:
                    50:38:5c:e8:bd:8c:77:9a:09:be:ef:ad:e8:46:26:
                    cc:be:f9:ce:f3:40:76:b0:f0:54:13:47:3a:71:23:
                    ca:e1:c6:f0:81:90:04:88:b4:42:5b:b2:e5:51:9d:
                    75:06:dd:f8:fc:a8:f8:18:1c:27:82:67:49:fb:fc:
                    3a:a5:69:39:2e:b4:08:f2:eb:7e:ed:82:eb:e0:61:
                    a3:fa:3f:77:62:fb:c4:fa:e1:80:75:ee:0d:97:b3:
                    11:b2:5f:55:8e:fe:1d:62:59:e3:5d:37:fe:e0:8b:
                    bb:02:bb:61:9d:c8:6a:c3:92:3c:93:4f:01:4b:eb:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:62:3F:F6:DD:7A:E3:6A:FB:DB:37:9B:43:2E:C2:EF:37:FF:EA:1E
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.143.198.0/23
                  118.143.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:0f:37:fb:49:94:d0:d6:1b:dd:d6:57:8f:d4:2f:75:8f:e2:
         f4:b8:51:fb:b9:34:f4:d2:46:3d:c3:14:8a:44:dd:9c:36:7e:
         45:4b:30:87:e0:f6:fe:52:a9:c0:3a:b0:96:b6:03:2f:82:64:
         7f:90:8e:60:71:76:a6:60:86:b9:02:5e:1e:70:aa:99:3d:cf:
         f4:5b:2e:5f:15:11:0e:31:2b:e9:54:33:e2:e8:15:9c:b0:d7:
         73:1d:60:c4:89:9b:2c:03:32:7e:a4:d9:b8:a4:91:c1:11:e1:
         53:c2:62:d9:aa:f9:ea:04:ea:b0:d8:ea:23:54:d7:5a:af:f1:
         6c:a7:76:e9:7e:40:45:47:96:69:e3:59:80:bf:45:c0:f1:5a:
         51:29:12:f1:12:e3:e7:65:cd:f7:50:e0:38:25:be:b3:6f:93:
         1e:ec:6e:b7:b5:30:9e:02:06:bc:ac:8d:98:01:26:80:e9:f7:
         c9:d3:ca:31:c7:80:52:39:1e:de:fe:58:fc:9a:b2:4b:5c:71:
         f1:a4:d8:59:13:47:5c:3f:05:1d:fc:2d:e3:46:bb:46:4c:96:
         fb:41:ab:74:d8:ca:1b:18:bb:88:d0:2b:9f:ef:c2:90:29:85:
         e1:17:18:bc:d1:82:a6:d4:9d:eb:89:74:4e:9a:0e:01:91:8e:
         cb:e8:54:f3
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICYUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy
RkVENDQ4NTcwHhcNMjUwNDMwMjAyOTE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODdkYi0xNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApqzl9aQdJtgQ6AH9RRf4L9758CNek6R7UU9C2lVNxtfxDWgpf3OliX2w38aJ
AYExnxbVPLjztHdBZIqdX/wmxzAHi+swcElgnhn9g7hUP6lRXk3j73qZtyzS1vfx
LmhBHaivdSAc/X82s9TV/OlHtdwCT2TTJNnrv4eEPaf/OZZR9z9Pa4xQOFzovYx3
mgm+763oRibMvvnO80B2sPBUE0c6cSPK4cbwgZAEiLRCW7LlUZ11Bt34/Kj4GBwn
gmdJ+/w6pWk5LrQI8ut+7YLr4GGj+j93YvvE+uGAde4Nl7MRsl9Vjv4dYlnjXTf+
4Iu7Arthnchqw5I8k08BS+ubCQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHxiP/bd
euNq+9s3m0Muwu83/+oeMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1
QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvODgyRjA2REVG
RjBFMTFFQUJCQ0NDRjU2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBdo/GAwQAdo/XMA0GCSqGSIb3DQEBCwUAA4IBAQCYDzf7SZTQ1hvd
1leP1C91j+L0uFH7uTT00kY9wxSKRN2cNn5FSzCH4Pb+UqnAOrCWtgMvgmR/kI5g
cXamYIa5Al4ecKqZPc/0Wy5fFREOMSvpVDPi6BWcsNdzHWDEiZssAzJ+pNm4pJHB
EeFTwmLZqvnqBOqw2OojVNdar/Fsp3bpfkBFR5Zp41mAv0XA8VpRKRLxEuPnZc33
UOA4Jb6zb5Me7G63tTCeAga8rI2YASaA6ffJ08oxx4BSOR7e/lj8mrJLXHHxpNhZ
E0dcPwUd/C3jRrtGTJb7Qat02MobGLuI0Cuf78KQKYXhFxi80YKm1J3riXROmg4B
kY7L6FTz
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:58 2026 by rpki-client