Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa
File:                     09F2AE3EF36811F0BB995E0C666F56BC.roa (raw, json)
Hash identifier:          3qyXQf9X9ypzRtr6ed01ZGzQMiK+H459JYw687uWAE4=
Subject key identifier:   FB:37:79:48:FC:41:33:44:9D:19:A1:E6:67:7B:1E:BF:92:17:4A:B9
Certificate issuer:       /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial:       014B
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa
Signing time:             Sun 01 Mar 2026 16:54:27 +0000
ROA not before:           Sat 17 Jan 2026 05:47:42 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4755
IP address blocks:        192.8.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
        Validity
            Not Before: Jan 17 05:47:42 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a46f43-836f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:92:ec:36:b4:ac:d2:85:14:d8:29:ee:de:
                    3e:73:4c:38:f5:99:75:e6:a5:b2:33:ff:c3:93:e8:
                    84:de:4d:fe:7a:d0:5f:c5:85:17:e6:8a:67:57:ba:
                    fa:5d:5f:d1:aa:95:17:73:6b:66:b4:e9:b5:74:ab:
                    e3:0d:7c:12:a0:5d:03:59:2b:09:37:41:e8:c8:74:
                    7d:07:14:3f:a9:0f:ba:e8:11:4d:8b:9e:68:72:dc:
                    52:d5:2b:87:5a:62:1d:10:39:71:3c:b4:64:d2:11:
                    fb:81:f8:a0:17:45:9c:fb:35:1a:9d:a3:ac:36:f7:
                    5f:8b:8c:0a:d1:04:c5:8e:61:ad:61:23:04:4d:0c:
                    1c:c4:fc:94:88:e4:58:1e:43:cc:45:0e:91:26:d0:
                    82:92:3d:3d:4c:e2:9c:6f:fa:19:30:2f:f6:19:2c:
                    73:84:dc:18:7d:83:48:14:34:c4:da:ac:14:5d:06:
                    3b:f2:92:09:3d:6a:c6:72:89:cf:d1:f0:03:79:c1:
                    4b:27:0f:57:d1:35:6e:ca:b9:8f:5a:54:97:b2:80:
                    2b:5f:21:df:b5:2e:3b:94:ec:13:c1:a6:f1:7e:4f:
                    e2:6e:ed:3f:1f:5b:d9:95:1b:74:c7:fd:d2:c8:ea:
                    3a:91:80:34:b4:63:52:e3:88:a8:74:99:e7:7b:1d:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:37:79:48:FC:41:33:44:9D:19:A1:E6:67:7B:1E:BF:92:17:4A:B9
            X509v3 Authority Key Identifier:
                keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09F2AE3EF36811F0BB995E0C666F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.8.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:71:fb:9f:11:9f:90:95:50:ff:80:ae:9f:da:3c:01:35:
         a6:4d:fb:42:fc:81:62:eb:8d:b0:9e:84:8d:d4:cd:cd:b5:01:
         01:25:ab:c7:a0:d6:4d:d3:d7:2a:d3:f8:ca:9c:8c:4a:1a:4f:
         f6:2c:9c:f8:5b:85:47:38:a4:eb:5e:fc:ef:9b:19:f5:2a:d8:
         2a:47:cd:d4:1e:e7:56:da:9b:2b:79:f4:4a:58:35:c3:06:35:
         56:62:48:43:a9:2a:38:9d:89:2d:16:7f:9d:ff:24:92:a5:ed:
         8b:00:11:ef:84:07:15:79:10:f8:b6:ea:58:d2:05:d0:8d:20:
         38:7f:3b:3a:5e:f7:81:18:40:5e:8f:bc:63:bf:30:69:39:52:
         75:8f:c0:54:d8:9a:76:3f:7b:0d:1e:fb:8d:e6:c3:60:ad:fc:
         ec:f3:d5:92:c8:9e:be:a9:f4:f7:8d:f3:ce:8c:cc:4a:96:c6:
         ca:76:9e:fd:68:70:55:ee:03:1d:ff:60:a2:28:b9:d9:8c:a2:
         f7:7e:16:5c:05:de:68:d7:93:69:93:ab:f3:ea:2d:8d:0f:c3:
         f2:22:25:84:f4:c6:47:87:b2:44:87:32:1e:95:dc:46:70:a9:
         50:18:5f:7b:dc:e4:02:49:e4:90:43:89:29:ed:b5:87:94:a4:
         02:a5:e1:df
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw
RjAzQkY3QzYwHhcNMjYwMTE3MDU0NzQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmY0My04MzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvTqS7Da0rNKFFNgp7t4+c0w49Zl15qWyM//Dk+iE3k3+etBfxYUX5opnV7r6
XV/RqpUXc2tmtOm1dKvjDXwSoF0DWSsJN0HoyHR9BxQ/qQ+66BFNi55octxS1SuH
WmIdEDlxPLRk0hH7gfigF0Wc+zUanaOsNvdfi4wK0QTFjmGtYSMETQwcxPyUiORY
HkPMRQ6RJtCCkj09TOKcb/oZMC/2GSxzhNwYfYNIFDTE2qwUXQY78pIJPWrGconP
0fADecFLJw9X0TVuyrmPWlSXsoArXyHftS47lOwTwabxfk/ibu0/H1vZlRt0x/3S
yOo6kYA0tGNS44iodJnnex2XIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPs3eUj8
QTNEnRmh5md7Hr+SF0q5MB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw
NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5
OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc4MkYvNkQyMDc1RjY0MDcwMTFFRkJEQTlENjZGQzRGOUFFMDIvMDlGMkFFM0VG
MzY4MTFGMEJCOTk1RTBDNjY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwAghMA0GCSqGSIb3DQEBCwUAA4IBAQB3S3H7nxGfkJVQ/4Cun9o8
ATWmTftC/IFi642wnoSN1M3NtQEBJavHoNZN09cq0/jKnIxKGk/2LJz4W4VHOKTr
Xvzvmxn1KtgqR83UHudW2psrefRKWDXDBjVWYkhDqSo4nYktFn+d/ySSpe2LABHv
hAcVeRD4tupY0gXQjSA4fzs6XveBGEBej7xjvzBpOVJ1j8BU2Jp2P3sNHvuN5sNg
rfzs89WSyJ6+qfT3jfPOjMxKlsbKdp79aHBV7gMd/2CiKLnZjKL3fhZcBd5o15Np
k6vz6i2ND8PyIiWE9MZHh7JEhzIeldxGcKlQGF973OQCSeSQQ4kp7bWHlKQCpeHf
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:47 2026 by rpki-client