Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/4647BCD66E7F11EF9223EA62C4F9AE02.roa
File:                     4647BCD66E7F11EF9223EA62C4F9AE02.roa (raw, json)
Hash identifier:          JPVeqFS8xR3Uu2AP5zfr6KQvfduwIv7keU6B2F9zLVI=
Subject key identifier:   51:A3:C9:E9:97:29:1B:E0:44:DF:4A:68:30:5A:1B:A9:CC:59:5E:BF
Certificate issuer:       /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial:       0183
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/4647BCD66E7F11EF9223EA62C4F9AE02.roa
Signing time:             Sun 07 Jun 2026 04:36:03 +0000
ROA not before:           Sun 07 Jun 2026 04:36:03 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     63801
IP address blocks:        160.22.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
        Validity
            Not Before: Jun  7 04:36:03 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a24f533-ac76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:b7:6e:fd:32:56:74:60:cf:4c:23:70:c6:
                    fb:fb:55:95:55:cd:1d:9f:66:e7:72:28:dc:23:19:
                    cb:48:19:b9:1e:e7:cb:2a:82:a7:d8:79:63:74:ba:
                    49:df:b4:d0:b6:30:20:7d:d9:10:51:fd:f3:bb:b2:
                    e7:e7:da:11:ba:be:a0:1e:a6:f7:64:ef:37:39:fc:
                    b5:39:fd:3e:f9:a0:53:a1:97:dc:8d:5f:fd:d5:f4:
                    9c:97:5a:77:78:7b:df:38:7f:30:c1:cb:a4:9b:79:
                    74:79:55:9d:48:fc:2e:b3:45:9e:76:c1:0c:fc:19:
                    ea:15:4d:ee:1a:1f:b6:0e:ca:2d:82:be:30:36:de:
                    03:0e:67:d7:d2:49:0f:cb:b5:ca:1e:01:97:ac:3e:
                    b4:3e:8c:36:12:99:0b:d9:f8:72:00:b6:b8:e3:fe:
                    dd:9a:36:49:23:43:39:39:ca:9b:9e:cc:b7:6f:f9:
                    fb:11:e2:dc:42:81:a6:11:b1:b0:6c:18:6d:04:27:
                    af:cd:b3:e7:99:5b:d1:02:c3:9f:bb:b8:1f:52:24:
                    3f:d0:d0:f4:1f:a4:48:41:21:18:eb:6f:18:d0:de:
                    98:c8:a3:98:42:04:62:d1:b0:5f:46:62:49:8b:8f:
                    dc:07:b4:f4:15:7f:b7:19:2f:47:f8:67:e0:9f:e0:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:C9:E9:97:29:1B:E0:44:DF:4A:68:30:5A:1B:A9:CC:59:5E:BF
            X509v3 Authority Key Identifier:
                keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/4647BCD66E7F11EF9223EA62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:61:4d:08:8a:32:03:a8:0d:9f:9f:c8:37:a4:de:bd:f3:85:
         3b:7c:a0:ae:4a:87:c7:b1:07:b8:6d:4e:67:90:0a:2d:c2:db:
         ec:18:0e:82:ee:67:84:27:d6:e2:16:0b:dd:53:13:bb:25:4e:
         15:4a:f1:a0:91:ac:5d:74:60:3b:a9:27:5e:1f:bf:e6:53:9c:
         81:eb:15:89:29:04:b9:d9:9e:18:33:55:e3:3e:d3:e1:a1:ee:
         ec:1a:e8:5d:f2:18:90:d0:a8:e9:06:f4:c7:0a:5a:6d:58:91:
         71:17:b1:61:43:94:94:f7:62:a1:a2:83:15:ee:64:ec:63:18:
         c9:d8:19:58:66:d2:2d:ff:b8:56:f0:9e:6c:b8:5e:35:ea:0b:
         57:86:26:f2:98:7b:c8:5a:cc:a4:7a:f8:f9:22:c5:c0:c8:1b:
         0a:47:9b:b8:fa:25:9f:aa:46:47:02:1a:82:2d:fa:e1:f5:c8:
         0a:8d:41:6e:70:e2:a2:89:fe:a8:af:ca:7b:80:0c:c2:e1:61:
         2d:b7:f5:b7:ec:19:27:7f:0b:b5:fd:60:ce:b5:0c:e2:99:0e:
         41:1f:35:5a:66:22:90:da:c8:53:70:fb:e9:21:40:eb:0d:0c:
         7c:66:15:e8:07:f1:c1:d2:fc:39:8a:ff:68:92:f2:d6:14:6e:
         08:7b:a5:d0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3QTkxMTAvBgNVBAUTKDRFMjU5QkE4N0E0MEI2NkQ4NDJBQzhDRTBBRUE3ODRF
NEJENzM4MkUwHhcNMjYwNjA3MDQzNjAzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI0ZjUzMy1hYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnUq3bv0yVnRgz0wjcMb7+1WVVc0dn2bncijcIxnLSBm5HufLKoKn2HljdLpJ
37TQtjAgfdkQUf3zu7Ln59oRur6gHqb3ZO83Ofy1Of0++aBToZfcjV/91fScl1p3
eHvfOH8wwcukm3l0eVWdSPwus0WedsEM/BnqFU3uGh+2Dsotgr4wNt4DDmfX0kkP
y7XKHgGXrD60Pow2EpkL2fhyALa44/7dmjZJI0M5Ocqbnsy3b/n7EeLcQoGmEbGw
bBhtBCevzbPnmVvRAsOfu7gfUiQ/0ND0H6RIQSEY628Y0N6YyKOYQgRi0bBfRmJJ
i4/cB7T0FX+3GS9H+Gfgn+BjjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFGjyemX
KRvgRN9KaDBaG6nMWV6/MB8GA1UdIwQYMBaAFE4lm6h6QLZthCrIzgrqeE5L1zgu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS83QkJEMTFBQzFG
RjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRtMkVLc2pPQ3VwNFRrdlhP
QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9DNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTU3QTkvN0JCRDExQUMxRkYzMTFFRkEzRkIyQzgxQzRGOUFFMDIvNDY0N0JDRDY2
RTdGMTFFRjkyMjNFQTYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBYoMA0GCSqGSIb3DQEBCwUAA4IBAQCGYU0IijIDqA2fn8g3pN69
84U7fKCuSofHsQe4bU5nkAotwtvsGA6C7meEJ9biFgvdUxO7JU4VSvGgkaxddGA7
qSdeH7/mU5yB6xWJKQS52Z4YM1XjPtPhoe7sGuhd8hiQ0KjpBvTHClptWJFxF7Fh
Q5SU92KhooMV7mTsYxjJ2BlYZtIt/7hW8J5suF416gtXhibymHvIWsykevj5IsXA
yBsKR5u4+iWfqkZHAhqCLfrh9cgKjUFucOKiif6or8p7gAzC4WEtt/W37Bknfwu1
/WDOtQzimQ5BHzVaZiKQ2shTcPvpIUDrDQx8ZhXoB/HB0vw5iv9okvLWFG4Ie6XQ
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:09 2026 by rpki-client