Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/065E09BC732F11F09E8D4450C4F9AE02.roa
File:                     065E09BC732F11F09E8D4450C4F9AE02.roa (raw, json)
Hash identifier:          lPETiWe8GHpbSTMrlHOlT/Ey7B1kvBXtUjo0VwOql0I=
Subject key identifier:   75:D1:E0:7D:54:D6:6A:14:EA:1A:88:76:74:5A:B1:5D:70:06:71:FA
Certificate issuer:       /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3
Certificate serial:       6B
Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/065E09BC732F11F09E8D4450C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:13:23 +0000
ROA not before:           Thu 07 Aug 2025 01:37:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154121
IP address blocks:        192.190.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl
                          rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3
        Validity
            Not Before: Aug  7 01:37:06 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3e713-29ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:a5:2d:89:66:aa:e6:51:7c:66:45:c3:4d:
                    79:3f:b0:8a:ea:fc:e1:6d:71:31:79:28:48:ed:40:
                    a5:ba:0c:ef:cd:9a:51:9b:1b:ac:e6:9e:86:c3:8e:
                    89:04:c4:d8:6c:ed:7f:9e:26:17:88:7f:2a:4f:07:
                    bb:98:71:a6:d0:65:b7:b8:89:1a:79:14:bd:1e:d9:
                    ec:cf:77:8e:e5:57:90:1a:6f:05:7b:1a:20:e6:45:
                    c3:66:66:34:d9:7d:70:93:12:0d:71:39:ff:1f:38:
                    83:31:69:e8:bd:b7:b1:55:39:e4:2e:ae:52:0a:b1:
                    90:c4:13:d0:6b:cf:f3:a1:e3:74:ed:1c:ad:64:39:
                    3f:64:c1:4d:08:4d:57:06:96:d6:53:8b:ea:88:40:
                    39:ac:a7:c2:fa:5e:bc:52:3a:b6:43:fb:d1:b4:e7:
                    a7:3b:16:93:65:3c:86:cd:f8:cd:8e:eb:2b:4c:f7:
                    45:66:17:e6:87:aa:7c:aa:22:44:fd:c6:83:bd:a1:
                    f9:38:3e:2a:da:79:87:34:2e:3c:64:38:c2:a2:76:
                    ac:e1:79:06:fc:e6:87:0a:28:e9:ff:ae:a4:9a:71:
                    76:e1:38:95:71:99:26:d8:32:6a:96:18:d3:17:b0:
                    b3:bf:05:f9:3a:0b:d6:5a:2f:69:9b:af:d8:b4:98:
                    b7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D1:E0:7D:54:D6:6A:14:EA:1A:88:76:74:5A:B1:5D:70:06:71:FA
            X509v3 Authority Key Identifier:
                keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/065E09BC732F11F09E8D4450C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:54:b3:b5:0c:14:5f:d3:1e:29:84:8b:8a:a8:aa:3b:be:a3:
         e5:d2:0d:b9:97:4e:f7:99:ea:78:50:4b:d4:63:cc:ff:57:3d:
         11:9d:55:98:7f:e8:cc:0d:aa:20:ba:1b:03:61:43:37:df:40:
         92:62:3e:cd:fa:84:08:6f:1f:12:94:2b:49:4b:0a:a6:a8:eb:
         7f:cd:e8:d7:7a:a6:1d:d4:8b:36:47:a3:dd:15:02:51:e7:1d:
         ea:f3:ee:be:1f:7d:2d:9d:c2:e1:63:93:46:a8:17:c8:c7:4a:
         2f:f2:8b:ef:db:19:8c:f2:87:47:3e:f7:e9:f7:7f:5b:a6:64:
         97:67:4a:5b:db:e2:4f:9e:c8:90:9b:51:fd:48:e8:e7:b8:8e:
         fe:6b:65:0d:14:f5:3b:2c:03:1c:d3:68:1a:1f:ce:bb:ed:dc:
         a9:48:bd:9b:fd:58:84:9c:4e:d4:ab:f0:31:54:25:44:99:d1:
         ed:29:90:be:ae:b4:5b:cf:2c:dd:65:fd:07:f9:55:dd:16:ef:
         d3:6c:98:80:e9:b3:32:e5:bc:b9:02:50:cf:ed:6c:51:d3:18:
         50:f6:32:1f:84:c2:98:73:a6:f5:86:a4:7e:80:f7:e7:80:a0:
         77:a0:7a:49:44:1b:ff:ed:97:01:9e:df:25:52:7a:67:a4:2d:
         0a:95:a1:6b
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF
M0UxNjlFMzAeFw0yNTA4MDcwMTM3MDZaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNzEzLTI5ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLV6UtiWaq5lF8ZkXDTXk/sIrq/OFtcTF5KEjtQKW6DO/NmlGbG6zmnobDjokE
xNhs7X+eJheIfypPB7uYcabQZbe4iRp5FL0e2ezPd47lV5AabwV7GiDmRcNmZjTZ
fXCTEg1xOf8fOIMxaei9t7FVOeQurlIKsZDEE9Brz/Oh43TtHK1kOT9kwU0ITVcG
ltZTi+qIQDmsp8L6XrxSOrZD+9G056c7FpNlPIbN+M2O6ytM90VmF+aHqnyqIkT9
xoO9ofk4PiraeYc0LjxkOMKidqzheQb85ocKKOn/rqSacXbhOJVxmSbYMmqWGNMX
sLO/Bfk6C9ZaL2mbr9i0mLeNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUddHgfVTW
ahTqGoh2dFqxXXAGcfowHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy
NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTczNi81QTZEOEI1QzczMjcxMUYwQjE1MjY0NkZDNEY5QUUwMi8wNjVFMDlCQzcz
MkYxMUYwOUU4RDQ0NTBDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADAvrUwDQYJKoZIhvcNAQELBQADggEBADNUs7UMFF/THimEi4qoqju+
o+XSDbmXTveZ6nhQS9RjzP9XPRGdVZh/6MwNqiC6GwNhQzffQJJiPs36hAhvHxKU
K0lLCqao63/N6Nd6ph3UizZHo90VAlHnHerz7r4ffS2dwuFjk0aoF8jHSi/yi+/b
GYzyh0c+9+n3f1umZJdnSlvb4k+eyJCbUf1I6Oe4jv5rZQ0U9TssAxzTaBofzrvt
3KlIvZv9WIScTtSr8DFUJUSZ0e0pkL6utFvPLN1l/Qf5Vd0W79NsmIDpszLlvLkC
UM/tbFHTGFD2Mh+EwphzpvWGpH6A9+eAoHegeklEG//tlwGe3yVSemekLQqVoWs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:45 2026 by rpki-client