Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/51E2DA3C032811F1B93270B91D3D8C67.roa
File:                     51E2DA3C032811F1B93270B91D3D8C67.roa (raw, json)
Hash identifier:          3U4FEVRGy9jE+wB4tgnDMOY88kDC7cd7O9eOZNx+krU=
Subject key identifier:   8A:D6:FE:B7:74:5C:6E:DF:12:DF:2F:82:41:E0:79:5E:74:80:E9:2E
Certificate issuer:       /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial:       9B
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/51E2DA3C032811F1B93270B91D3D8C67.roa
Signing time:             Sun 01 Mar 2026 15:15:52 +0000
ROA not before:           Fri 06 Feb 2026 06:51:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131471
IP address blocks:        165.99.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
        Validity
            Not Before: Feb  6 06:51:53 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a45828-987b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:6f:a5:d5:f5:5d:3c:8c:94:a2:5f:11:c8:
                    7e:de:81:4c:4d:65:4f:0a:00:75:d4:32:c9:33:ad:
                    02:f6:60:41:ad:5e:d1:28:09:ac:d1:5d:cd:d4:b5:
                    10:e6:80:41:83:2a:e8:ea:91:7f:8d:db:7e:5b:fc:
                    a8:3b:80:4a:88:ed:e6:e2:d1:21:d9:1e:b1:57:30:
                    ff:39:a8:a0:6c:f6:8a:46:62:bb:c3:50:e5:52:3d:
                    98:e3:11:7e:76:12:22:34:e4:01:de:aa:0a:b5:26:
                    5f:28:34:b8:77:d7:a9:fc:09:bf:00:c4:1c:d6:af:
                    5f:ac:c3:4d:07:9e:b5:60:e4:25:88:07:d1:e6:71:
                    71:68:9d:f0:83:8d:14:e0:2d:e7:f4:2f:01:6a:22:
                    3c:4e:4f:9f:a0:bd:38:0e:d0:71:f8:d9:e3:97:36:
                    91:74:82:2b:ca:25:89:fe:a1:43:2b:50:11:8c:a0:
                    a2:37:a5:34:7b:81:9d:ba:0e:54:21:ac:8a:68:bb:
                    e1:e5:1b:94:0f:c0:a1:24:26:fb:bf:ff:52:8d:3c:
                    57:cc:1a:29:cd:f0:97:59:0a:dd:12:d6:5b:13:1f:
                    bf:3c:90:90:9f:fd:a8:5e:59:0c:45:7c:1e:35:98:
                    de:11:95:28:1a:4c:35:7b:33:54:ad:73:08:cc:67:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:FE:B7:74:5C:6E:DF:12:DF:2F:82:41:E0:79:5E:74:80:E9:2E
            X509v3 Authority Key Identifier:
                keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/51E2DA3C032811F1B93270B91D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:81:61:5b:45:69:34:52:50:86:9f:04:39:1b:5a:f5:a2:
         73:1a:a4:44:fe:10:3e:51:cd:2e:ea:b1:e2:ba:fd:ac:8b:de:
         a6:e7:01:fc:82:70:c1:88:c1:36:72:10:37:9a:80:9a:a6:ad:
         6d:dc:cf:b3:5a:2c:25:89:e0:e4:0c:82:46:8f:5d:43:c5:c3:
         2d:75:28:a1:1c:d6:ba:7f:a5:8e:56:5f:e8:f7:05:92:0e:fc:
         e0:90:f3:12:a0:98:5d:f6:c3:b2:7e:63:f6:1b:66:8d:47:3a:
         57:bf:fb:f7:5b:b2:f8:4c:55:70:48:15:de:96:52:bb:cf:be:
         4d:0a:75:f0:55:61:94:32:29:de:56:67:ad:0d:96:c0:b8:2f:
         f0:61:8c:7d:4c:f4:af:f8:64:cb:21:1a:51:6b:bd:7d:b5:62:
         47:3b:ac:c6:2c:da:ea:bc:34:31:ac:fc:a9:f7:01:ae:86:f1:
         b7:e8:e6:76:1a:02:46:26:87:32:cc:33:fa:db:aa:0b:38:ad:
         da:ab:43:79:ea:85:40:9a:2c:3a:e8:cb:31:60:31:14:bb:a8:
         cd:cc:a7:e5:63:1c:e5:9a:2a:80:b0:8b:9a:8e:75:11:b0:b0:
         be:ba:4a:a4:94:a3:8a:ef:8e:65:ec:0e:09:ff:2e:8f:32:bd:
         fc:45:f7:2a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5QzAxMTAvBgNVBAUTKDdBNzMwMDIxMTEzRDI0NTExRDZFOEI4NTYyRTcyNEVD
OUU5ODI1MUIwHhcNMjYwMjA2MDY1MTUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTgyOC05ODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmMtvpdX1XTyMlKJfEch+3oFMTWVPCgB11DLJM60C9mBBrV7RKAms0V3N1LUQ
5oBBgyro6pF/jdt+W/yoO4BKiO3m4tEh2R6xVzD/OaigbPaKRmK7w1DlUj2Y4xF+
dhIiNOQB3qoKtSZfKDS4d9ep/Am/AMQc1q9frMNNB561YOQliAfR5nFxaJ3wg40U
4C3n9C8BaiI8Tk+foL04DtBx+NnjlzaRdIIryiWJ/qFDK1ARjKCiN6U0e4Gdug5U
IayKaLvh5RuUD8ChJCb7v/9SjTxXzBopzfCXWQrdEtZbEx+/PJCQn/2oXlkMRXwe
NZjeEZUoGkw1ezNUrXMIzGehQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIrW/rd0
XG7fEt8vgkHgeV50gOkuMB8GA1UdIwQYMBaAFHpzACERPSRRHW6LhWLnJOyemCUb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81MjlCQzJGQzM4
ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9lbk1BSVJFOUpGRWRib3VGWXVjazdKNllK
UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpScy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE5QzAvNTI5QkMyRkMzODgyMTFGMDhDQ0IxODY2QzRGOUFFMDIvNTFFMkRBM0Mw
MzI4MTFGMUI5MzI3MEI5MUQzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWMtMA0GCSqGSIb3DQEBCwUAA4IBAQA5rYFhW0VpNFJQhp8EORta
9aJzGqRE/hA+Uc0u6rHiuv2si96m5wH8gnDBiME2chA3moCapq1t3M+zWiwlieDk
DIJGj11DxcMtdSihHNa6f6WOVl/o9wWSDvzgkPMSoJhd9sOyfmP2G2aNRzpXv/v3
W7L4TFVwSBXellK7z75NCnXwVWGUMineVmetDZbAuC/wYYx9TPSv+GTLIRpRa719
tWJHO6zGLNrqvDQxrPyp9wGuhvG36OZ2GgJGJocyzDP626oLOK3aq0N56oVAmiw6
6MsxYDEUu6jNzKflYxzlmiqAsIuajnURsLC+ukqklKOK745l7A4J/y6PMr38Rfcq
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:15 2026 by rpki-client