Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/5F22E1129B3011EF952F2762C4F9AE02.roa
File:                     5F22E1129B3011EF952F2762C4F9AE02.roa (raw, json)
Hash identifier:          35VgX9rf+XhH26LlIXgW4m4oJdqmNJWXhKFWnvMUpIg=
Subject key identifier:   6B:18:4D:9F:C3:60:E6:32:74:99:A0:75:E9:D8:4C:DC:ED:B0:E5:88
Certificate issuer:       /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial:       35F2
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/5F22E1129B3011EF952F2762C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:45:02 +0000
ROA not before:           Tue 02 Sep 2025 14:30:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17827
IP address blocks:        182.52.48.0/24 maxlen: 24
                          182.52.54.0/24 maxlen: 24
                          2001:ec0:8ab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13810 (0x35f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
        Validity
            Not Before: Sep  2 14:30:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4892e-d3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:79:05:87:8b:d6:ad:22:69:9d:3d:a4:1e:
                    16:11:4d:d6:5b:be:d1:2f:67:8a:c6:db:6d:85:3a:
                    76:b5:9a:f6:60:1c:8c:29:d5:04:38:ee:c1:b3:91:
                    33:66:7a:a2:c6:23:fe:a5:c9:00:21:28:4c:ad:c5:
                    58:20:6b:22:1f:11:4b:0c:57:3e:90:56:ff:76:fd:
                    0f:2d:f4:e8:03:43:38:97:93:dd:41:c2:9e:3c:12:
                    10:06:ce:e8:55:51:71:d4:16:9b:08:47:ec:55:f3:
                    1d:7c:49:74:e7:6c:2a:3f:0e:31:21:08:d2:7f:01:
                    73:e7:18:c4:93:b0:3c:36:e1:ce:13:15:14:b2:dc:
                    89:2a:94:45:dc:f6:74:43:f6:18:3d:0f:6e:89:9f:
                    95:bd:0b:01:7c:2c:13:94:8c:fe:4e:c5:24:64:b9:
                    d2:f2:28:8c:43:ce:e2:66:d0:1a:ce:a8:1b:31:c7:
                    60:6a:38:d1:27:62:ae:f6:63:36:33:35:c9:2a:78:
                    42:90:db:9e:8c:12:57:c2:ea:9b:5a:fa:74:70:25:
                    c9:f7:80:fe:7f:70:5b:1d:c2:bf:90:bc:03:a9:10:
                    8f:32:f8:f5:53:3c:db:c0:5f:e5:00:68:f6:19:18:
                    2e:a5:72:de:ac:de:64:6f:74:47:96:ef:e0:ff:ea:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:18:4D:9F:C3:60:E6:32:74:99:A0:75:E9:D8:4C:DC:ED:B0:E5:88
            X509v3 Authority Key Identifier:
                keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/5F22E1129B3011EF952F2762C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.52.48.0/24
                  182.52.54.0/24
                IPv6:
                  2001:ec0:8ab::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:1f:15:92:51:ee:9e:88:30:4b:88:24:f6:bd:e5:04:a9:09:
         15:cd:52:69:d0:80:6b:73:a3:ca:97:7e:4e:c9:ba:11:be:b6:
         96:f7:10:e5:f7:1e:01:60:e5:b2:a6:8b:30:7d:a3:64:fa:30:
         db:05:9f:c7:1f:5a:cb:5c:3b:4d:d7:b8:66:71:c2:77:3f:16:
         f8:d5:80:25:9a:4d:dc:d3:c4:59:ba:bb:8a:92:99:34:1b:d5:
         37:e8:49:a1:19:0a:1b:81:97:83:e0:e6:a4:ed:a9:3b:1c:55:
         e2:d7:30:e5:fc:56:cb:18:ee:46:f1:97:b1:51:db:60:14:1c:
         2e:28:1d:7d:70:21:9d:35:03:0c:9c:dc:f8:f3:2f:e7:7a:9f:
         bb:c4:ef:dc:ed:31:b8:4e:bd:12:e3:d7:e6:1d:50:ef:04:9d:
         ae:d4:77:bc:9a:ac:66:2f:ec:62:4a:25:24:81:28:11:2f:31:
         47:7e:fe:e6:85:a8:64:2e:8f:42:62:19:bb:74:dc:b1:6b:11:
         9a:55:ee:86:29:f3:86:76:e2:07:ae:a3:86:41:74:c7:8d:68:
         73:f5:01:b8:c5:71:7b:e2:0b:d0:d0:61:e5:64:e2:cb:1c:78:
         30:ad:b9:1e:46:e4:a7:63:42:a6:33:df:31:94:55:3f:a8:ff:
         ae:2b:a9:de
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICNfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx
NUIxQ0JGRTgwHhcNMjUwOTAyMTQzMDM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODkyZS1kM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTF5BYeL1q0iaZ09pB4WEU3WW77RL2eKxttthTp2tZr2YByMKdUEOO7Bs5Ez
ZnqixiP+pckAIShMrcVYIGsiHxFLDFc+kFb/dv0PLfToA0M4l5PdQcKePBIQBs7o
VVFx1BabCEfsVfMdfEl052wqPw4xIQjSfwFz5xjEk7A8NuHOExUUstyJKpRF3PZ0
Q/YYPQ9uiZ+VvQsBfCwTlIz+TsUkZLnS8iiMQ87iZtAazqgbMcdgajjRJ2Ku9mM2
MzXJKnhCkNuejBJXwuqbWvp0cCXJ94D+f3BbHcK/kLwDqRCPMvj1UzzbwF/lAGj2
GRgupXLerN5kb3RHlu/g/+oBWwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFGsYTZ/D
YOYydJmgdenYTNztsOWIMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE
ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvNUYyMkUxMTI5
QjMwMTFFRjk1MkYyNzYyQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQAtjQwAwQAtjQ2MA8EAgACMAkDBwAgAQ7ACKswDQYJKoZIhvcNAQEL
BQADggEBAJ0fFZJR7p6IMEuIJPa95QSpCRXNUmnQgGtzo8qXfk7JuhG+tpb3EOX3
HgFg5bKmizB9o2T6MNsFn8cfWstcO03XuGZxwnc/FvjVgCWaTdzTxFm6u4qSmTQb
1TfoSaEZChuBl4Pg5qTtqTscVeLXMOX8VssY7kbxl7FR22AUHC4oHX1wIZ01Awyc
3PjzL+d6n7vE79ztMbhOvRLj1+YdUO8Ena7Ud7yarGYv7GJKJSSBKBEvMUd+/uaF
qGQuj0JiGbt03LFrEZpV7oYp84Z24geuo4ZBdMeNaHP1AbjFcXviC9DQYeVk4ssc
eDCtuR5G5KdjQqYz3zGUVT+o/64rqd4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:12 2026 by rpki-client