Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa
File:                     B644549E9AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier:          wVBjCjP1Zp7SZIhstkx9vOa/CNJ3ab6dg6RMZduCqVg=
Subject key identifier:   1E:04:C2:67:23:27:E8:FE:C9:31:F6:61:E0:FF:13:C2:DE:CB:C3:C1
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       023B
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa
Signing time:             Wed 09 Sep 2026 07:02:52 +0000
ROA not before:           Wed 09 Sep 2026 07:02:52 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     174
IP address blocks:        61.16.40.0/21 maxlen: 24
                          202.52.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Sep  9 07:02:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6aa1049c-45ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:59:fb:e8:e4:0c:99:1d:55:88:85:f4:65:
                    f0:12:a4:93:a7:ce:18:f5:b3:28:cf:32:c9:8a:37:
                    43:6b:0a:ea:b1:ef:55:0e:3d:84:f1:f1:85:1c:3f:
                    3c:e8:61:e5:ae:b3:14:21:f4:83:1b:5e:9d:74:a4:
                    46:d6:e6:65:d1:fd:5d:7a:bb:a5:b2:ff:22:90:21:
                    c0:d0:28:6a:d0:00:5a:d1:36:ad:03:e3:c7:25:b7:
                    08:35:de:e2:3a:fe:87:16:12:b2:c9:ea:c0:85:8e:
                    45:e1:52:94:4a:cb:6e:0d:21:15:3d:9b:78:ac:e8:
                    44:8e:7c:42:9b:71:bc:83:89:35:5f:c5:fe:72:44:
                    b5:f1:44:dc:68:c9:c1:05:78:1a:2f:9a:65:72:77:
                    12:e9:1b:15:cb:a8:51:29:f1:c1:e6:33:60:c3:f8:
                    72:b5:c3:22:01:76:db:d6:38:36:30:81:21:ad:85:
                    aa:59:12:da:5f:a5:e3:e7:a3:0d:ec:42:eb:72:23:
                    9c:72:a5:a8:fb:32:11:fa:b3:0e:b5:e3:64:de:45:
                    74:f8:83:c8:df:8b:a8:5f:8f:75:5a:25:36:c4:60:
                    0e:af:ce:d4:18:d3:c4:71:8d:79:2f:72:fa:06:23:
                    e2:e7:4b:c6:11:2c:ed:5e:77:da:2e:5f:fb:c0:01:
                    4b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:04:C2:67:23:27:E8:FE:C9:31:F6:61:E0:FF:13:C2:DE:CB:C3:C1
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B644549E9AB611F1A85C11C64311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.16.40.0/21
                  202.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:e6:2c:dd:3f:ad:f3:f0:93:dc:6b:9f:6b:71:82:46:15:70:
         b4:db:23:cd:e3:e3:7d:76:48:e6:ad:3a:fc:7d:f5:fb:8d:7f:
         f1:5d:f0:f4:d1:92:8b:d2:81:b6:09:fd:80:ca:fd:20:85:db:
         ae:fd:10:54:87:58:fb:11:15:8b:c7:60:d6:4f:6f:da:c6:3b:
         61:15:fc:59:63:bf:7b:79:ac:99:d6:b9:11:18:cb:3a:56:69:
         04:35:dd:70:8b:03:50:3b:38:7b:bd:6f:10:12:c8:31:4d:6b:
         7e:58:33:d2:1e:48:c1:63:64:68:62:dd:b4:b7:a3:8b:1b:49:
         fe:da:74:5d:f1:94:b6:16:03:a0:2a:c2:7b:e9:5a:36:18:5a:
         63:ab:41:e1:63:be:14:10:99:3f:9a:74:4c:e5:25:ca:06:8b:
         63:5d:b0:ab:e1:37:a9:09:98:1f:51:1e:ba:2e:d0:f3:a2:2c:
         68:d2:69:45:9a:5a:97:d2:72:2f:49:14:e2:96:b8:cd:a3:e4:
         0a:21:39:9e:d6:02:3f:4f:d9:4d:c8:e5:f9:12:e1:19:59:d9:
         6a:c4:6c:82:7d:cc:9a:17:09:1e:89:c8:5f:48:34:75:89:3a:
         9d:bf:49:b0:20:fc:5c:6b:16:b5:68:a2:23:0e:4d:2c:31:50:
         db:c9:11:53
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE3NkQxMTAvBgNVBAUTKEFBMDE3OEVBNzg1MTFBMTVCMTQ3MEVCRkMwQzU3MjFB
NzBFMjc2OUYwHhcNMjYwOTA5MDcwMjUyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWExMDQ5Yy00NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0CNZ++jkDJkdVYiF9GXwEqSTp84Y9bMozzLJijdDawrqse9VDj2E8fGFHD88
6GHlrrMUIfSDG16ddKRG1uZl0f1derulsv8ikCHA0Chq0ABa0TatA+PHJbcINd7i
Ov6HFhKyyerAhY5F4VKUSstuDSEVPZt4rOhEjnxCm3G8g4k1X8X+ckS18UTcaMnB
BXgaL5plcncS6RsVy6hRKfHB5jNgw/hytcMiAXbb1jg2MIEhrYWqWRLaX6Xj56MN
7ELrciOccqWo+zIR+rMOteNk3kV0+IPI34uoX491WiU2xGAOr87UGNPEcY15L3L6
BiPi50vGESztXnfaLl/7wAFL7wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB4Ewmcj
J+j+yTH2YeD/E8Ley8PBMB8GA1UdIwQYMBaAFKoBeOp4URoVsUcOv8DFchpw4naf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTc2RC9GMDJBMzVFOEE5
MTQxMUVFQjI3MTJEM0ZDNEY5QUUwMi9xZ0Y0Nm5oUkdoV3hSdzZfd01WeUduRGlk
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FnRjQ2bmhSR2hXeFJ3Nl93TVZ5R25EaWRwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE3NkQvRjAyQTM1RThBOTE0MTFFRUIyNzEyRDNGQzRGOUFFMDIvQjY0NDU0OUU5
QUI2MTFGMUE4NUMxMUM2NDMxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDPRAoAwQEyjRwMA0GCSqGSIb3DQEBCwUAA4IBAQCi5izdP63z8JPc
a59rcYJGFXC02yPN4+N9dkjmrTr8ffX7jX/xXfD00ZKL0oG2Cf2Ayv0ghduu/RBU
h1j7ERWLx2DWT2/axjthFfxZY797eayZ1rkRGMs6VmkENd1wiwNQOzh7vW8QEsgx
TWt+WDPSHkjBY2RoYt20t6OLG0n+2nRd8ZS2FgOgKsJ76Vo2GFpjq0HhY74UEJk/
mnRM5SXKBotjXbCr4TepCZgfUR66LtDzoixo0mlFmlqX0nIvSRTilrjNo+QKITme
1gI/T9lNyOX5EuEZWdlqxGyCfcyaFwkeichfSDR1iTqdv0mwIPxcaxa1aKIjDk0s
MVDbyRFT
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:26 2026 by rpki-client