Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa
File:                     48D65BC2D28F11EB9F83683DC4F9AE02.roa (raw, json)
Hash identifier:          PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=
Subject key identifier:   29:2B:80:41:12:20:05:B4:0F:BA:72:D4:C7:CF:CB:B6:8B:EC:D8:3D
Certificate issuer:       /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial:       073D
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:42:14 +0000
ROA not before:           Wed 08 Oct 2025 20:51:39 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     17439
IP address blocks:        217.18.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
        Validity
            Not Before: Oct  8 20:51:39 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45e56-f90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:8e:db:4b:bf:4f:6e:56:1c:ab:4d:00:25:
                    dc:70:52:1d:ad:58:93:e8:bd:52:ad:3c:13:4e:26:
                    e7:dd:98:f5:06:11:25:25:e3:bf:b7:02:1b:4e:ff:
                    d9:b6:ee:11:9c:b6:11:2b:e3:f5:18:06:4b:43:7b:
                    a1:c5:36:f3:8c:1e:68:7e:f0:41:c7:24:b1:6a:90:
                    18:b0:e9:e1:8f:c4:0a:eb:14:6a:f2:9e:8b:c1:a5:
                    7e:11:53:83:f4:5c:84:67:0c:c6:b6:3b:88:d3:31:
                    d4:d6:6f:f9:2b:06:e6:79:2c:fd:2e:4f:dc:81:82:
                    61:ca:1f:16:eb:b8:41:ca:eb:98:38:c0:b4:db:7e:
                    88:30:9b:fe:2a:fa:ff:dc:f0:d5:47:fd:52:54:3a:
                    ba:21:d1:af:6c:09:61:e7:f5:90:a1:77:b5:ed:f8:
                    84:9d:d8:59:73:d8:14:c8:72:96:71:ac:e9:6a:62:
                    d9:1d:aa:7d:24:5e:ae:4f:ed:62:74:ed:59:9b:75:
                    36:f5:92:21:d8:3d:4c:d8:c1:23:ba:88:c8:89:fd:
                    f9:c5:64:63:9e:34:db:57:84:d1:cb:f3:c7:a2:33:
                    69:d2:60:e9:08:3c:74:95:14:e3:e2:7a:14:40:aa:
                    3d:35:05:17:e2:e0:db:68:f3:6b:73:45:68:78:7e:
                    66:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2B:80:41:12:20:05:B4:0F:BA:72:D4:C7:CF:CB:B6:8B:EC:D8:3D
            X509v3 Authority Key Identifier:
                keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/48D65BC2D28F11EB9F83683DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.18.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:6c:41:3c:5a:f6:00:e8:ca:da:f2:3f:70:dd:33:5b:3a:
         67:cd:30:9d:76:72:3f:60:7e:e8:9e:b7:e1:46:02:f3:fd:68:
         52:5a:97:a2:aa:d8:6d:f7:08:b5:26:60:1f:6f:94:a9:78:b5:
         47:43:dc:a1:2d:b3:8e:ea:63:5b:14:5a:1d:eb:e9:be:48:0e:
         b6:79:78:c4:c5:9c:58:f1:3b:89:4f:37:2e:49:98:ce:7e:3b:
         19:f5:8e:ab:02:7f:74:3b:03:a9:e9:a7:99:b3:5f:cd:36:ab:
         f8:d6:f9:b8:6f:bf:ab:d5:b6:fa:77:56:0f:43:b6:da:3d:26:
         45:d7:a0:58:d0:d4:20:d1:a0:c6:c7:53:e9:5b:e1:dc:5d:93:
         02:72:41:bb:77:64:7c:69:85:66:4d:6d:9a:ac:d4:ff:ac:52:
         f5:ea:4d:76:5a:3a:ff:a4:2b:23:44:09:0b:3d:05:31:1f:34:
         4a:de:36:6e:1c:ee:69:b4:31:a1:b9:b0:92:87:d0:c0:ff:b9:
         be:38:7d:34:bd:68:4e:96:45:a8:86:93:ef:73:ce:f1:e8:0b:
         91:b0:60:99:c4:c4:84:29:e5:9b:8e:d9:ca:00:64:e9:a0:b1:
         82:7c:f3:d0:cf:e1:5e:b2:57:1d:23:d0:be:47:0a:09:50:c3:
         fd:eb:85:1d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE
M0UwMjY4MUIwHhcNMjUxMDA4MjA1MTM5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWU1Ni1mOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+uO20u/T25WHKtNACXccFIdrViT6L1SrTwTTibn3Zj1BhElJeO/twIbTv/Z
tu4RnLYRK+P1GAZLQ3uhxTbzjB5ofvBBxySxapAYsOnhj8QK6xRq8p6LwaV+EVOD
9FyEZwzGtjuI0zHU1m/5KwbmeSz9Lk/cgYJhyh8W67hByuuYOMC0236IMJv+Kvr/
3PDVR/1SVDq6IdGvbAlh5/WQoXe17fiEndhZc9gUyHKWcazpamLZHap9JF6uT+1i
dO1Zm3U29ZIh2D1M2MEjuojIif35xWRjnjTbV4TRy/PHojNp0mDpCDx0lRTj4noU
QKo9NQUX4uDbaPNrc0VoeH5mSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCkrgEES
IAW0D7py1MfPy7aL7Ng9MB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx
RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RERDQjYvNkU5QUM4MDY3MUQ4MTFFQjgwNDc3MjFEQzRGOUFFMDIvNDhENjVCQzJE
MjhGMTFFQjlGODM2ODNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC2RI0MA0GCSqGSIb3DQEBCwUAA4IBAQBa6WxBPFr2AOjK2vI/cN0z
WzpnzTCddnI/YH7onrfhRgLz/WhSWpeiqtht9wi1JmAfb5SpeLVHQ9yhLbOO6mNb
FFod6+m+SA62eXjExZxY8TuJTzcuSZjOfjsZ9Y6rAn90OwOp6aeZs1/NNqv41vm4
b7+r1bb6d1YPQ7baPSZF16BY0NQg0aDGx1PpW+HcXZMCckG7d2R8aYVmTW2arNT/
rFL16k12Wjr/pCsjRAkLPQUxHzRK3jZuHO5ptDGhubCSh9DA/7m+OH00vWhOlkWo
hpPvc87x6AuRsGCZxMSEKeWbjtnKAGTpoLGCfPPQz+FeslcdI9C+RwoJUMP964Ud
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:01 2026 by rpki-client