Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/BAEA3A3C497B11F096DCA14EC4F9AE02.roa
File:                     BAEA3A3C497B11F096DCA14EC4F9AE02.roa (raw, json)
Hash identifier:          gigpKlIJpr67Kh4oClr8KxwyPgzyEXMp5g337eUlQ0A=
Subject key identifier:   C7:F3:38:14:CE:57:CE:11:93:A9:F4:70:37:2F:88:60:AD:0D:9B:D5
Certificate issuer:       /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89
Certificate serial:       0114
Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/BAEA3A3C497B11F096DCA14EC4F9AE02.roa
Signing time:             Tue 03 Nov 2026 07:53:31 +0000
ROA not before:           Tue 03 Nov 2026 07:53:31 +0000
ROA not after:            Mon 01 Mar 2027 00:00:00 +0000
asID:                     45773
IP address blocks:        165.99.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 06:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89
        Validity
            Not Before: Nov  3 07:53:31 2026 GMT
            Not After : Mar  1 00:00:00 2027 GMT
        Subject: CN=6ae992fa-f804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:b1:71:2a:7b:a1:75:47:09:d2:48:3f:a7:
                    a1:c6:bb:1d:f4:39:6e:b0:e3:04:f1:1f:3e:2a:4f:
                    12:ca:c5:e8:6d:61:8c:1b:1b:45:ba:6f:fc:0a:0e:
                    2a:9f:a9:8c:59:ec:cc:48:af:37:5b:3b:55:bb:7d:
                    86:d6:40:76:a7:dc:71:cb:2c:9f:c2:ec:72:d6:6b:
                    87:39:64:e8:82:b4:a1:c2:ee:4b:bd:c6:4d:6b:85:
                    93:d5:c4:1c:9a:50:5a:30:73:bc:60:40:ea:cc:98:
                    90:5e:0a:68:a6:a4:76:31:8d:3f:a1:72:0b:26:74:
                    f6:2b:f5:35:28:5e:f7:20:a3:35:88:1a:aa:35:72:
                    b3:7a:89:9e:b8:15:a1:b3:54:66:51:c8:95:a6:fc:
                    af:ae:9b:62:cb:ec:b2:b0:5e:b5:c9:ce:e1:1d:29:
                    fc:41:2b:68:7d:c6:77:37:08:2e:27:2a:12:50:77:
                    ed:4d:6a:89:22:07:6b:bf:3a:d2:c7:f9:9b:5d:d6:
                    83:4a:3f:72:b5:e2:14:2f:96:d7:c1:23:f6:28:50:
                    40:ab:e8:c7:cb:6a:f0:34:37:e1:e7:ba:9f:03:3c:
                    1c:86:f5:4f:71:8b:02:12:53:e1:1e:55:66:62:c8:
                    be:a6:ff:d7:1b:1f:6f:e4:3c:03:42:42:e9:54:77:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F3:38:14:CE:57:CE:11:93:A9:F4:70:37:2F:88:60:AD:0D:9B:D5
            X509v3 Authority Key Identifier:
                keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/BAEA3A3C497B11F096DCA14EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:90:fe:8b:15:88:5e:48:f7:c4:3f:f0:5e:d2:14:bd:92:
         d3:01:79:52:38:60:d6:0c:4a:5d:6b:dc:bd:6c:9e:4a:fa:85:
         9e:ed:c9:a8:8c:79:81:b4:5a:93:d4:25:ca:5f:61:7d:41:a4:
         72:e5:4e:75:c0:5c:56:ba:32:2d:65:8b:ce:cc:35:25:ca:32:
         a4:11:1b:04:d0:4f:45:18:0c:7f:b9:cf:c0:d7:e2:4d:6f:9a:
         3b:bb:3f:51:72:50:29:ae:7d:be:ad:7e:70:47:a9:f4:27:5c:
         3f:18:1c:8a:3e:97:dd:35:9f:86:6e:7d:03:93:ea:93:0b:9d:
         c5:be:c1:0e:a6:f7:e4:1a:2e:d8:1c:9e:db:35:63:37:7d:d9:
         56:12:cc:73:06:4c:ca:da:78:3a:b5:db:26:17:90:4f:49:0a:
         db:9e:c6:77:8a:c6:47:42:11:8d:92:9f:2b:4d:dc:7f:f6:37:
         60:4f:ed:02:5b:5a:81:4d:35:e1:b6:98:52:cf:12:3a:82:58:
         58:f0:a6:27:cf:58:b7:54:4f:03:c2:e0:ad:f5:f8:5f:87:c4:
         08:7b:d7:49:eb:d2:72:46:bf:44:20:f4:78:81:c0:86:74:00:
         e0:2d:8f:bf:0b:b9:d0:d2:6d:3b:a5:bb:2b:00:2c:33:24:e4:
         ac:df:2a:e9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0
OUJDNDZDODkwHhcNMjYxMTAzMDc1MzMxWhcNMjcwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWU5OTJmYS1mODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/axcSp7oXVHCdJIP6ehxrsd9DlusOME8R8+Kk8SysXobWGMGxtFum/8Cg4q
n6mMWezMSK83WztVu32G1kB2p9xxyyyfwuxy1muHOWTogrShwu5LvcZNa4WT1cQc
mlBaMHO8YEDqzJiQXgpopqR2MY0/oXILJnT2K/U1KF73IKM1iBqqNXKzeomeuBWh
s1RmUciVpvyvrptiy+yysF61yc7hHSn8QStofcZ3NwguJyoSUHftTWqJIgdrvzrS
x/mbXdaDSj9yteIUL5bXwSP2KFBAq+jHy2rwNDfh57qfAzwchvVPcYsCElPhHlVm
Ysi+pv/XGx9v5DwDQkLpVHe/dQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMfzOBTO
V84Rk6n0cDcviGCtDZvVMB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy
MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi
SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0ZGQ0IvRUQwRjExRjQ0MjA1MTFGMEJGN0E4NzExQzRGOUFFMDIvQkFFQTNBM0M0
OTdCMTFGMDk2RENBMTRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWPOMA0GCSqGSIb3DQEBCwUAA4IBAQCC/JD+ixWIXkj3xD/wXtIU
vZLTAXlSOGDWDEpda9y9bJ5K+oWe7cmojHmBtFqT1CXKX2F9QaRy5U51wFxWujIt
ZYvOzDUlyjKkERsE0E9FGAx/uc/A1+JNb5o7uz9RclAprn2+rX5wR6n0J1w/GByK
PpfdNZ+Gbn0Dk+qTC53FvsEOpvfkGi7YHJ7bNWM3fdlWEsxzBkzK2ng6tdsmF5BP
SQrbnsZ3isZHQhGNkp8rTdx/9jdgT+0CW1qBTTXhtphSzxI6glhY8KYnz1i3VE8D
wuCt9fhfh8QIe9dJ69JyRr9EIPR4gcCGdADgLY+/C7nQ0m07pbsrACwzJOSs3yrp
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:29:04 2026 by rpki-client