Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa
File:                     48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (raw, json)
Hash identifier:          z+HwCEnQPM1ZWbTaxIobMQlSkN1lILUyzjqFvMLdIyM=
Subject key identifier:   CA:E9:9F:17:81:17:F3:B3:7B:75:4F:1A:C8:4D:71:25:25:F0:B3:54
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       0952
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:41:33 +0000
ROA not before:           Fri 12 Sep 2025 08:05:45 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153259
IP address blocks:        169.136.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2386 (0x952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Sep 12 08:05:45 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47a4d-7449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6d:c0:35:b9:91:57:16:e6:a2:3e:9e:d3:9e:
                    07:69:af:c7:5a:09:b7:ee:30:cc:fd:68:90:c3:3f:
                    ff:46:89:44:50:a7:43:a4:cc:d2:81:ec:d8:f7:41:
                    a4:22:90:54:f7:95:42:a9:9d:81:ea:05:9c:22:e5:
                    35:0e:9c:2a:d9:47:dd:fd:b1:7a:89:92:09:f3:4d:
                    58:11:0e:b7:75:7b:87:2c:5d:90:59:c1:ad:9c:1c:
                    f2:cb:46:1a:84:6d:b7:3c:b0:a0:64:88:d5:73:22:
                    05:fc:65:5d:15:4a:51:41:38:da:66:77:97:20:52:
                    f2:ff:f4:a3:c8:84:b1:d1:cf:73:5b:71:25:b2:c3:
                    80:52:46:c9:02:e0:06:f3:50:60:48:3d:ed:05:22:
                    84:e7:3b:f9:d0:17:e6:77:db:81:f8:53:e9:9d:d6:
                    05:92:51:96:8e:2b:c5:9e:f6:be:f2:27:a5:37:2f:
                    df:5e:f8:e8:64:10:ae:a8:46:39:22:bf:df:c1:26:
                    d6:f4:ca:be:f8:4e:73:65:d8:d8:fc:e4:55:72:5b:
                    c6:29:de:c5:7e:4c:b0:9f:b7:e6:3b:71:eb:b8:6f:
                    c6:ed:97:5c:aa:9c:a4:5b:eb:0c:05:0a:c1:bc:0c:
                    af:1b:b6:19:8a:bb:b2:c0:5c:b0:f4:e6:de:63:b2:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E9:9F:17:81:17:F3:B3:7B:75:4F:1A:C8:4D:71:25:25:F0:B3:54
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:5d:02:aa:65:8e:8b:c7:e9:96:c7:2a:2b:07:de:03:07:1e:
         9f:0a:0f:80:5f:f1:9f:7e:88:9f:06:4d:5a:f2:17:54:b3:b1:
         bb:96:76:88:27:26:41:fa:85:49:f7:bc:85:fa:d3:49:01:da:
         1d:e4:ce:1c:f9:57:f9:95:71:d0:bb:d5:9d:82:23:7f:a3:66:
         17:a3:6b:7e:3b:d7:83:0f:7a:04:48:32:8a:33:7c:a3:6a:46:
         7c:5e:b8:d8:4c:65:df:2f:f9:5b:7f:4c:94:a5:76:b7:3e:a3:
         1b:62:a8:9d:23:cf:ac:21:f9:1f:fd:8e:27:e3:6a:2e:9e:15:
         c9:f5:c4:b4:0a:81:9b:82:2d:8c:18:ab:2e:e6:63:22:99:3c:
         dc:06:9a:74:7d:89:34:8a:36:e2:19:26:b6:85:4a:5f:6b:9b:
         a3:67:48:b7:17:e6:9b:2e:c2:70:01:3f:d6:b4:27:fc:56:20:
         cd:63:ab:a7:f5:0e:a0:b6:4d:fe:45:44:fe:79:53:cf:be:cf:
         f0:93:9b:50:c0:3c:44:10:b8:bb:88:49:46:ea:98:5e:4c:a6:
         8f:39:1d:c9:1b:99:82:93:f9:94:c0:ab:1a:6a:f5:06:a2:22:
         da:1c:bb:75:19:17:e8:d5:fd:36:1f:4d:21:dd:2e:78:b1:cc:
         d8:c8:7a:3a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5
RTlBQ0RCODgwHhcNMjUwOTEyMDgwNTQ1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2E0ZC03NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1G3ANbmRVxbmoj6e054Haa/HWgm37jDM/WiQwz//RolEUKdDpMzSgezY90Gk
IpBU95VCqZ2B6gWcIuU1Dpwq2Ufd/bF6iZIJ801YEQ63dXuHLF2QWcGtnBzyy0Ya
hG23PLCgZIjVcyIF/GVdFUpRQTjaZneXIFLy//SjyISx0c9zW3ElssOAUkbJAuAG
81BgSD3tBSKE5zv50Bfmd9uB+FPpndYFklGWjivFnva+8ielNy/fXvjoZBCuqEY5
Ir/fwSbW9Mq++E5zZdjY/ORVclvGKd7Ffkywn7fmO3HruG/G7ZdcqpykW+sMBQrB
vAyvG7YZiruywFyw9ObeY7IxJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMrpnxeB
F/Oze3VPGshNcSUl8LNUMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRjdERkE3MkVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvNDhEREZCOEU4
RkFGMTFGMEI1OUYwOTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAqYhtMA0GCSqGSIb3DQEBCwUAA4IBAQBsXQKqZY6Lx+mWxyorB94D
Bx6fCg+AX/GffoifBk1a8hdUs7G7lnaIJyZB+oVJ97yF+tNJAdod5M4c+Vf5lXHQ
u9WdgiN/o2YXo2t+O9eDD3oESDKKM3yjakZ8XrjYTGXfL/lbf0yUpXa3PqMbYqid
I8+sIfkf/Y4n42ounhXJ9cS0CoGbgi2MGKsu5mMimTzcBpp0fYk0ijbiGSa2hUpf
a5ujZ0i3F+abLsJwAT/WtCf8ViDNY6un9Q6gtk3+RUT+eVPPvs/wk5tQwDxEELi7
iElG6pheTKaPOR3JG5mCk/mUwKsaavUGoiLaHLt1GRfo1f02H00h3S54sczYyHo6
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:09 2026 by rpki-client