Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa
File:                     1EC99BBCA2F811F0ACA39B18C4F9AE02.roa (raw, json)
Hash identifier:          Bc+OItusdmVYlG7x1nDSJYph20gwRZ6Y6Oa7EutrvpQ=
Subject key identifier:   21:06:33:D5:C5:91:F8:4A:88:A0:BB:F2:91:7D:5D:5C:F3:FE:7C:F0
Certificate issuer:       /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial:       5A
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:14:34 +0000
ROA not before:           Mon 06 Oct 2025 21:05:00 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        156.69.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
                          rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
        Validity
            Not Before: Oct  6 21:05:00 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3e75a-aae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c5:29:23:0c:37:0b:04:35:c3:70:27:20:87:
                    09:e9:1b:32:09:61:47:49:3c:7d:7c:37:97:e4:00:
                    d3:0a:cd:25:d5:73:00:c7:90:c8:e0:0e:15:98:a9:
                    50:39:e1:f0:0f:21:4f:2d:78:16:2b:11:cb:6b:65:
                    ec:4f:08:e9:fd:b9:9b:17:ae:42:38:31:bb:9f:2e:
                    ca:f3:f5:32:20:cd:84:d1:f1:23:e7:74:81:e6:c8:
                    41:13:1e:18:ff:a7:08:d9:d7:e7:83:5f:f4:37:78:
                    66:a6:4b:48:63:18:c1:33:9b:eb:5e:6c:68:41:56:
                    69:e6:97:2d:bb:6f:8f:5e:10:d0:1a:58:79:aa:48:
                    f0:aa:16:b0:46:73:45:34:1f:6a:3e:b7:7d:06:08:
                    26:69:f5:31:6c:c9:48:73:b7:77:df:ec:5c:43:ba:
                    db:89:c7:c9:94:9a:7c:c3:57:ff:83:45:a4:ce:c4:
                    e5:6e:74:d0:b8:eb:8a:dc:18:dc:8b:8d:7d:d1:17:
                    ed:40:bd:b4:84:0d:b8:04:33:4a:75:03:2b:7e:5e:
                    38:a7:b3:d5:03:1d:40:26:8b:27:45:59:16:34:c9:
                    0b:c9:4c:20:e0:64:71:ad:a0:a1:a9:28:b0:d3:cb:
                    97:32:b9:d1:80:01:dd:1d:ba:70:2f:2a:8e:ee:58:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:06:33:D5:C5:91:F8:4A:88:A0:BB:F2:91:7D:5D:5C:F3:FE:7C:F0
            X509v3 Authority Key Identifier:
                keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.69.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:12:09:90:0a:bb:68:fe:5b:44:b6:7e:46:e8:38:03:6d:b3:
         d3:35:ba:ee:36:85:56:0d:7a:5c:dc:66:74:9f:bd:03:42:59:
         1f:56:0f:e3:22:08:15:83:66:8a:45:d3:5c:9f:48:56:78:38:
         3f:b2:88:15:90:dd:6b:a4:b8:35:93:67:93:54:24:77:c6:b1:
         35:eb:4c:98:bc:6c:10:72:0c:d1:9e:73:3c:89:95:95:2c:32:
         c4:6d:91:c3:f7:5c:c5:07:42:eb:7b:75:28:95:36:67:04:5f:
         55:4a:a7:04:aa:f7:67:e3:60:1d:71:7c:fa:c9:6a:38:b6:c5:
         0d:ea:95:79:dd:a9:0d:5d:88:fd:61:9e:46:c4:77:1c:44:b8:
         d1:b7:77:0d:0d:a5:e0:8d:e0:8d:b0:ca:0e:fe:d3:20:7b:f2:
         15:ee:26:a2:0a:00:6c:9f:d6:88:3b:99:ae:43:5c:2c:f1:7a:
         35:68:ef:24:91:3b:96:65:53:65:01:41:5a:cd:42:57:02:05:
         5d:f0:b4:fc:54:2a:87:fd:1f:e6:41:9f:5d:aa:bc:76:8e:ed:
         c4:b4:8e:83:00:4e:f7:fe:5a:78:bd:9e:92:8b:48:8f:3e:7d:
         f5:da:52:75:16:14:4a:d2:ed:5e:de:8f:1c:6d:6a:85:37:aa:
         6c:c4:45:8d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QTI5NDExMC8GA1UEBRMoMTlCRDgyMkQzRUI2RkY2RTkzNzAyNDVFRTg3NEJFQTlF
QjhCRUU1NTAeFw0yNTEwMDYyMTA1MDBaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNzVhLWFhZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDoxSkjDDcLBDXDcCcghwnpGzIJYUdJPH18N5fkANMKzSXVcwDHkMjgDhWYqVA5
4fAPIU8teBYrEctrZexPCOn9uZsXrkI4MbufLsrz9TIgzYTR8SPndIHmyEETHhj/
pwjZ1+eDX/Q3eGamS0hjGMEzm+tebGhBVmnmly27b49eENAaWHmqSPCqFrBGc0U0
H2o+t30GCCZp9TFsyUhzt3ff7FxDutuJx8mUmnzDV/+DRaTOxOVudNC464rcGNyL
jX3RF+1AvbSEDbgEM0p1Ayt+Xjins9UDHUAmiydFWRY0yQvJTCDgZHGtoKGpKLDT
y5cyudGAAd0dunAvKo7uWE3XAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUIQYz1cWR
+EqIoLvykX1dXPP+fPAwHwYDVR0jBBgwFoAUGb2CLT62/26TcCRe6HS+qeuL7lUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0JEQzA5QTJBOURB
QTExRjA5NjQyMEI2M0M0RjlBRTAyL0diMkNMVDYyXzI2VGNDUmU2SFMtcWV1TDds
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR2IyQ0xUNjJfMjZUY0NSZTZIUy1xZXVMN2xVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTI5NC9CREMwOUEyQTlEQUExMUYwOTY0MjBCNjNDNEY5QUUwMi8xRUM5OUJCQ0Ey
RjgxMUYwQUNBMzlCMThDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACcRR8wDQYJKoZIhvcNAQELBQADggEBABoSCZAKu2j+W0S2fkboOANt
s9M1uu42hVYNelzcZnSfvQNCWR9WD+MiCBWDZopF01yfSFZ4OD+yiBWQ3WukuDWT
Z5NUJHfGsTXrTJi8bBByDNGeczyJlZUsMsRtkcP3XMUHQut7dSiVNmcEX1VKpwSq
92fjYB1xfPrJaji2xQ3qlXndqQ1diP1hnkbEdxxEuNG3dw0NpeCN4I2wyg7+0yB7
8hXuJqIKAGyf1og7ma5DXCzxejVo7ySRO5ZlU2UBQVrNQlcCBV3wtPxUKof9H+ZB
n12qvHaO7cS0joMATvf+Wni9npKLSI8+ffXaUnUWFErS7V7ejxxtaoU3qmzERY0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:37 2026 by rpki-client