Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
File:                     F5FC39B600F811F0BD702A69C4F9AE02.roa (raw, json)
Hash identifier:          9116NXLxQtwPo/GgkPoKQwC8T0+IQ5WfjdteNjA0STk=
Subject key identifier:   E3:67:D2:8C:39:09:36:78:AA:B0:E0:0D:6A:F6:34:02:42:EE:1B:B8
Certificate issuer:       /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial:       D0
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:14:27 +0000
ROA not before:           Sun 18 Jan 2026 23:01:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     32135
IP address blocks:        163.223.40.0/23 maxlen: 23
                          163.223.40.0/24 maxlen: 32
                          163.223.41.0/24 maxlen: 24
                          2401:f460:f000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
                          rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
        Validity
            Not Before: Jan 18 23:01:33 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a465e3-e46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:f6:b4:a3:dd:d3:c5:55:37:ab:a5:77:01:
                    72:76:00:0c:02:c6:7f:13:89:80:81:d9:ec:2f:cb:
                    8d:09:00:08:43:d9:e8:0a:6d:ec:ff:1b:da:e8:8d:
                    e1:35:2d:a6:98:12:d9:80:83:9c:17:7d:0c:de:c5:
                    cb:81:63:bd:b6:fc:7d:22:11:77:ec:95:b2:c2:d5:
                    4a:c4:4e:15:3c:75:c6:cd:0c:5e:25:8f:d6:90:c7:
                    96:43:8c:9a:87:49:ee:b0:45:c1:da:88:e7:b1:27:
                    06:f9:e8:53:ae:6b:02:e2:82:76:d6:56:02:1f:01:
                    12:89:9f:e5:84:fc:b1:22:36:80:c5:4f:30:40:70:
                    73:c9:bf:6f:6b:a8:da:16:1d:f7:86:95:ef:00:b7:
                    24:f6:7e:c9:3d:11:47:a9:13:39:56:42:8b:e7:7b:
                    2c:f3:e7:b0:02:10:95:bc:9c:5a:60:97:57:76:04:
                    a8:33:2c:35:1e:da:07:bb:ff:b6:2f:96:e4:09:cd:
                    74:5c:7f:9b:54:c6:08:c1:22:0a:7f:f7:ba:df:b2:
                    c6:c6:aa:a9:c7:c3:65:d0:ca:d7:8a:db:04:7f:98:
                    35:74:3c:5f:d4:2f:f0:c7:b8:ca:b8:da:56:c7:79:
                    11:b7:ff:8d:fb:02:d1:40:e9:78:31:f5:44:74:03:
                    c1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:67:D2:8C:39:09:36:78:AA:B0:E0:0D:6A:F6:34:02:42:EE:1B:B8
            X509v3 Authority Key Identifier:
                keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/F5FC39B600F811F0BD702A69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.40.0/23
                IPv6:
                  2401:f460:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:2e:9a:a0:32:33:91:f7:20:8c:58:37:b9:1e:d6:80:ea:10:
         94:55:53:27:d5:7f:c0:c2:46:55:c5:45:dc:db:0d:3d:06:c0:
         45:6d:46:82:bc:b6:7f:5b:f9:cb:77:22:e2:ce:21:65:5a:83:
         a0:69:53:cd:56:6b:d4:f5:80:cf:89:f3:4f:9e:2c:78:c7:4a:
         f4:f9:65:f8:37:09:ef:e9:cc:54:87:1d:b2:df:d7:8b:45:ed:
         80:32:27:b0:ca:5c:4c:63:1e:99:d4:99:ac:c8:7c:48:56:a8:
         af:b0:bd:c7:5b:62:bd:a2:76:55:e9:e3:1c:5c:ff:85:eb:b6:
         9f:aa:d0:01:db:a1:a1:0a:8a:74:12:c1:0c:c7:eb:7e:87:68:
         08:14:5f:50:67:ce:17:f9:ce:da:fb:46:0f:98:e3:46:53:13:
         f8:7b:35:2a:3b:ff:e9:f0:e6:a5:e2:77:34:04:aa:10:73:78:
         04:5c:0a:a7:44:c4:ae:90:c3:d8:8d:fc:42:7d:9b:d6:9b:65:
         68:d2:2c:37:4f:4f:7c:19:09:c1:dc:52:c2:06:13:c1:1d:c7:
         db:7d:cf:19:61:f6:ef:fb:aa:d1:6a:44:f0:32:db:02:91:65:
         c1:66:d5:66:56:71:46:33:fc:56:2f:8a:21:2d:6d:7b:10:9a:
         62:65:45:9b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE4MEMxMTAvBgNVBAUTKDMxMjQ0MDIwMUIyRUY3NEI3Q0FDNkMzMUZCODVGNDFF
OUM0Njg2QTAwHhcNMjYwMTE4MjMwMTMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjVlMy1lNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx2L2tKPd08VVN6uldwFydgAMAsZ/E4mAgdnsL8uNCQAIQ9noCm3s/xva6I3h
NS2mmBLZgIOcF30M3sXLgWO9tvx9IhF37JWywtVKxE4VPHXGzQxeJY/WkMeWQ4ya
h0nusEXB2ojnsScG+ehTrmsC4oJ21lYCHwESiZ/lhPyxIjaAxU8wQHBzyb9va6ja
Fh33hpXvALck9n7JPRFHqRM5VkKL53ss8+ewAhCVvJxaYJdXdgSoMyw1HtoHu/+2
L5bkCc10XH+bVMYIwSIKf/e637LGxqqpx8Nl0MrXitsEf5g1dDxf1C/wx7jKuNpW
x3kRt/+N+wLRQOl4MfVEdAPBXwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFONn0ow5
CTZ4qrDgDWr2NAJC7hu4MB8GA1UdIwQYMBaAFDEkQCAbLvdLfKxsMfuF9B6cRoag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTgwQy9ERTk4RUFGMEZC
NjUxMUVGQTM3NkU0NDlDNEY5QUUwMi9NU1JBSUJzdTkwdDhyR3d4LTRYMEhweEdo
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01TUkFJQnN1OTB0OHJHd3gtNFgwSHB4R2hxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE4MEMvREU5OEVBRjBGQjY1MTFFRkEzNzZFNDQ5QzRGOUFFMDIvRjVGQzM5QjYw
MEY4MTFGMEJENzAyQTY5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBo98oMA8EAgACMAkDBwAkAfRg8AAwDQYJKoZIhvcNAQELBQADggEB
AEcumqAyM5H3IIxYN7ke1oDqEJRVUyfVf8DCRlXFRdzbDT0GwEVtRoK8tn9b+ct3
IuLOIWVag6BpU81Wa9T1gM+J80+eLHjHSvT5Zfg3Ce/pzFSHHbLf14tF7YAyJ7DK
XExjHpnUmazIfEhWqK+wvcdbYr2idlXp4xxc/4Xrtp+q0AHboaEKinQSwQzH636H
aAgUX1Bnzhf5ztr7Rg+Y40ZTE/h7NSo7/+nw5qXidzQEqhBzeARcCqdExK6Qw9iN
/EJ9m9abZWjSLDdPT3wZCcHcUsIGE8Edx9t9zxlh9u/7qtFqRPAy2wKRZcFm1WZW
cUYz/FYviiEtbXsQmmJlRZs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:51 2026 by rpki-client