Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/5E7BBD38259A11ECB37EA938C4F9AE02.roa
File:                     5E7BBD38259A11ECB37EA938C4F9AE02.roa (raw, json)
Hash identifier:          +zXdWbj90V5wiCW78x9iWppvFwiybMcG8sAJuI2k4as=
Subject key identifier:   60:0F:56:2B:7C:4D:7D:AF:05:46:E4:71:BF:66:0E:FA:C7:87:A0:41
Certificate issuer:       /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Certificate serial:       078C
Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/5E7BBD38259A11ECB37EA938C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 22:26:29 +0000
ROA not before:           Thu 04 Jun 2026 22:26:29 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45355
IP address blocks:        203.202.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl
                          rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
        Validity
            Not Before: Jun  4 22:26:29 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a21fb95-f07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:3b:e4:4f:69:77:6d:62:10:08:d5:4d:e5:
                    35:56:e5:79:07:ca:27:e4:98:2c:29:b0:ca:81:4f:
                    12:d8:f5:4a:11:04:e4:f6:19:ee:2e:af:b4:69:9c:
                    b5:23:7a:36:02:36:49:3a:c4:99:f5:b9:b1:92:79:
                    78:3c:63:25:1a:78:60:37:b9:e4:f2:50:b4:c9:bc:
                    56:b0:18:fd:89:9c:49:3b:8b:b5:66:ec:43:53:ca:
                    c6:ef:65:2b:ee:6a:30:db:91:75:ab:b0:ff:e6:00:
                    8a:ab:47:53:7c:5b:f3:77:8f:34:ea:81:7d:12:1e:
                    5f:b7:f0:10:ff:30:18:7c:8e:65:48:76:b3:b3:5e:
                    37:88:46:4f:66:05:74:e4:77:78:9c:76:13:f6:52:
                    03:b0:82:ff:01:71:7e:6e:f9:fe:5d:e5:0b:46:e7:
                    6f:74:4e:27:a3:62:93:cf:b4:e6:51:30:95:b7:11:
                    e9:78:66:8d:d9:f2:cc:98:51:ff:cb:c9:37:f3:ff:
                    ca:89:dd:3f:58:73:6f:75:d5:f3:b2:e7:52:75:f4:
                    f1:94:2f:f2:e5:4b:e6:68:ba:cc:33:15:43:22:83:
                    c6:35:0d:7e:12:eb:64:94:28:75:cc:65:ee:f9:57:
                    4e:95:76:2e:4a:5e:d3:b5:51:ec:a4:0d:1f:40:81:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0F:56:2B:7C:4D:7D:AF:05:46:E4:71:BF:66:0E:FA:C7:87:A0:41
            X509v3 Authority Key Identifier:
                keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/5E7BBD38259A11ECB37EA938C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.202.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:35:84:6b:2e:31:cf:b4:ad:93:f2:87:f0:0c:8d:65:c0:
         e6:70:24:bd:fd:1d:78:cf:fc:d9:94:40:c3:ae:91:5d:90:b0:
         d5:d9:af:58:44:aa:86:21:df:ac:c9:e8:db:d6:9e:ab:f3:5e:
         15:e5:6d:88:5c:f2:06:84:93:a5:33:9c:26:37:9f:75:07:bc:
         79:cd:98:9f:84:6f:14:2e:ac:3d:b1:6d:1b:a8:db:98:f2:7f:
         9b:15:b2:ac:41:d9:15:82:91:e7:de:6d:9a:51:5e:06:bb:da:
         47:2f:a3:ff:d7:ef:5c:0e:7a:1d:02:ed:c7:9c:63:00:fb:eb:
         a6:70:49:8d:39:f9:7b:18:24:83:8f:62:86:8f:1a:a9:55:10:
         e4:cc:0a:aa:21:fa:f7:c9:0d:0e:68:88:c6:97:fe:19:ec:c0:
         ec:b7:06:a2:71:a3:2e:2e:19:20:be:b0:8e:06:8a:34:fb:b9:
         c2:c8:f9:d6:a3:07:0a:96:e8:92:06:af:3f:80:f6:c3:28:b9:
         e1:64:fb:10:9b:4d:bb:14:32:a8:4a:67:58:75:b9:0f:e6:d3:
         79:6e:fe:3e:29:da:6e:a0:7d:b6:9e:41:97:bd:9b:cb:38:86:
         14:02:9d:77:d5:ba:0b:e0:9c:80:ee:10:b1:e4:c6:c3:a5:bb:
         dc:f8:32:f7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5
MTU0Nzg2QkMwHhcNMjYwNjA0MjIyNjI5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZmI5NS1mMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfw75E9pd21iEAjVTeU1VuV5B8on5JgsKbDKgU8S2PVKEQTk9hnuLq+0aZy1
I3o2AjZJOsSZ9bmxknl4PGMlGnhgN7nk8lC0ybxWsBj9iZxJO4u1ZuxDU8rG72Ur
7mow25F1q7D/5gCKq0dTfFvzd4806oF9Eh5ft/AQ/zAYfI5lSHazs143iEZPZgV0
5Hd4nHYT9lIDsIL/AXF+bvn+XeULRudvdE4no2KTz7TmUTCVtxHpeGaN2fLMmFH/
y8k38//Kid0/WHNvddXzsudSdfTxlC/y5UvmaLrMMxVDIoPGNQ1+EutklCh1zGXu
+VdOlXYuSl7TtVHspA0fQIHeLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGAPVit8
TX2vBUbkcb9mDvrHh6BBMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC
QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTIzN0EvRTg4MkU0NkM1QkEwMTFFQkFFQkU1MzI5QzRGOUFFMDIvNUU3QkJEMzgy
NTlBMTFFQ0IzN0VBOTM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy8rrMA0GCSqGSIb3DQEBCwUAA4IBAQBfnTWEay4xz7Stk/KH8AyN
ZcDmcCS9/R14z/zZlEDDrpFdkLDV2a9YRKqGId+syejb1p6r814V5W2IXPIGhJOl
M5wmN591B7x5zZifhG8ULqw9sW0bqNuY8n+bFbKsQdkVgpHn3m2aUV4Gu9pHL6P/
1+9cDnodAu3HnGMA++umcEmNOfl7GCSDj2KGjxqpVRDkzAqqIfr3yQ0OaIjGl/4Z
7MDstwaicaMuLhkgvrCOBoo0+7nCyPnWowcKluiSBq8/gPbDKLnhZPsQm027FDKo
SmdYdbkP5tN5bv4+KdpuoH22nkGXvZvLOIYUAp131boL4JyA7hCx5MbDpbvc+DL3
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:37 2026 by rpki-client