Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/FF1FE402898011EEB3403779C4F9AE02.roa
File:                     FF1FE402898011EEB3403779C4F9AE02.roa (raw, json)
Hash identifier:          esJHSwP5qiLnITDA6HOx8pEFmC6BOBPZgF6kgLGLSk8=
Subject key identifier:   9A:D9:B1:2E:E2:4C:35:2E:A7:98:AF:0D:97:4E:C6:F5:DA:D0:21:B1
Certificate issuer:       /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
Certificate serial:       01F3
Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/FF1FE402898011EEB3403779C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 05:32:19 +0000
ROA not before:           Thu 09 Jul 2026 05:32:19 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152106
IP address blocks:        202.36.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl
                          rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31
        Validity
            Not Before: Jul  9 05:32:19 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4f3262-34c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:7b:1c:e4:e6:14:e2:c4:77:05:cb:a7:5a:
                    c7:2e:37:f0:de:c4:81:b6:f9:18:af:57:37:6c:86:
                    b8:20:51:f1:eb:46:a2:31:8c:ba:63:6f:38:36:74:
                    c1:e0:6c:3c:e8:2a:12:94:29:32:81:04:60:dc:4c:
                    30:62:44:92:d5:dd:e8:33:49:2a:f2:d9:a2:ad:2f:
                    b5:7d:44:ad:8e:3a:21:5a:87:80:0e:f1:cc:67:16:
                    bb:34:7f:48:30:88:dd:85:7b:c5:9f:ef:57:d7:7b:
                    3a:4e:b7:1e:57:fa:f2:46:7e:d8:55:1c:04:a5:a0:
                    cc:e2:5a:cd:10:bc:ad:f4:83:24:03:fd:2a:c7:6c:
                    ee:87:96:c3:f4:d8:76:1c:25:1c:7a:db:3f:bc:05:
                    e3:32:5d:c9:82:c5:d0:ed:65:e2:e8:cd:20:0e:62:
                    78:c3:a6:61:e0:af:4a:4c:47:ce:1e:00:70:c3:7e:
                    60:bd:cc:f1:5a:c8:bc:87:76:5d:41:33:c3:cc:eb:
                    1b:71:3b:cd:8e:6c:52:6d:cd:96:76:42:4c:32:9c:
                    12:4d:11:65:45:2f:d3:1d:96:18:e4:20:bf:d4:c7:
                    fa:e8:bc:6e:10:80:65:02:09:b2:a0:6c:e9:ab:1d:
                    4a:e0:4e:9c:3e:cf:5a:ac:bb:d3:6a:87:63:88:e5:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D9:B1:2E:E2:4C:35:2E:A7:98:AF:0D:97:4E:C6:F5:DA:D0:21:B1
            X509v3 Authority Key Identifier:
                keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/FF1FE402898011EEB3403779C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4f:ed:0b:b7:be:22:13:b0:91:2d:39:8e:c4:43:ab:0f:69:
         06:df:db:bb:cf:ff:21:02:bc:7e:d4:b8:a5:35:22:a3:51:ac:
         42:46:05:cf:26:f3:9e:5c:45:ed:5f:a8:21:7a:f0:b9:c7:f0:
         eb:b1:d5:7d:0b:16:46:68:c6:64:19:38:46:a6:60:ab:4e:7e:
         79:54:02:c0:aa:5a:24:44:ff:c1:e9:ea:ad:ca:0b:e7:d9:0c:
         7c:d2:29:cc:3e:5b:ff:c5:49:2f:6d:db:1f:a0:ae:ce:e2:83:
         7e:67:12:7f:32:f3:fc:a6:95:6a:16:10:66:a7:82:0b:37:08:
         fa:6b:ff:ca:c3:70:00:83:d1:c0:b4:25:17:15:e4:de:1a:f8:
         0c:59:be:8d:77:3d:82:83:a2:e6:21:15:2a:ee:dd:a0:61:d7:
         e7:55:9f:67:7a:18:da:6c:ab:26:10:40:d4:04:7f:f8:84:d3:
         ea:e5:64:0d:df:b9:11:c7:a7:02:ac:9b:ae:d7:5f:cf:92:2c:
         dc:75:00:0b:f5:e1:d2:ba:6c:70:75:8c:a4:f1:eb:c6:2c:c8:
         9f:84:fc:be:9c:5a:18:d9:92:01:dd:bd:1e:62:62:eb:c7:3d:
         f1:87:53:ed:3f:1d:95:99:9a:0f:c0:86:e1:bc:ec:b6:3b:10:
         01:a8:49:ac
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3
N0UzQzFDMzEwHhcNMjYwNzA5MDUzMjE5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmMzI2Mi0zNGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlvl7HOTmFOLEdwXLp1rHLjfw3sSBtvkYr1c3bIa4IFHx60aiMYy6Y284NnTB
4Gw86CoSlCkygQRg3EwwYkSS1d3oM0kq8tmirS+1fUStjjohWoeADvHMZxa7NH9I
MIjdhXvFn+9X13s6TrceV/ryRn7YVRwEpaDM4lrNELyt9IMkA/0qx2zuh5bD9Nh2
HCUcets/vAXjMl3JgsXQ7WXi6M0gDmJ4w6Zh4K9KTEfOHgBww35gvczxWsi8h3Zd
QTPDzOsbcTvNjmxSbc2WdkJMMpwSTRFlRS/THZYY5CC/1Mf66LxuEIBlAgmyoGzp
qx1K4E6cPs9arLvTaodjiOXO1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJrZsS7i
TDUup5ivDZdOxvXa0CGxMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4
QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI
REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U1MjQvMEMyQzJCRDY4OEM1MTFFRUE4MzExQzcxQzRGOUFFMDIvRkYxRkU0MDI4
OTgwMTFFRUIzNDAzNzc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyiTkMA0GCSqGSIb3DQEBCwUAA4IBAQCsT+0Lt74iE7CRLTmOxEOr
D2kG39u7z/8hArx+1LilNSKjUaxCRgXPJvOeXEXtX6ghevC5x/DrsdV9CxZGaMZk
GThGpmCrTn55VALAqlokRP/B6eqtygvn2Qx80inMPlv/xUkvbdsfoK7O4oN+ZxJ/
MvP8ppVqFhBmp4ILNwj6a//Kw3AAg9HAtCUXFeTeGvgMWb6Ndz2Cg6LmIRUq7t2g
YdfnVZ9nehjabKsmEEDUBH/4hNPq5WQN37kRx6cCrJuu11/PkizcdQAL9eHSumxw
dYyk8evGLMifhPy+nFoY2ZIB3b0eYmLrxz3xh1PtPx2VmZoPwIbhvOy2OxABqEms
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:14 2026 by rpki-client