Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa
File:                     14564AB0E83311E6A72DC543C4F9AE02.roa (raw, json)
Hash identifier:          yeTkxTdBgNi4XQcUnG+Z1pVZk+XziWDEhTeQDqhiWOs=
Subject key identifier:   FC:7A:99:58:95:9C:88:AA:E3:6C:10:98:F5:0E:C0:99:5D:3B:C0:9E
Certificate issuer:       /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial:       1CE4
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa
Signing time:             Fri 10 Apr 2026 16:19:41 +0000
ROA not before:           Fri 10 Apr 2026 16:19:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55795
IP address blocks:        101.128.5.0/24 maxlen: 24
                          101.128.6.0/24 maxlen: 24
                          101.128.7.0/24 maxlen: 24
                          103.9.16.0/22 maxlen: 22
                          202.52.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7396 (0x1ce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
        Validity
            Not Before: Apr 10 16:19:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d9231d-4df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:bf:fa:72:c8:1d:3c:6f:46:bf:2f:26:0c:
                    74:1f:92:fd:56:e0:34:9b:ea:c6:b3:61:fb:48:29:
                    66:8b:66:6c:13:0e:70:62:38:86:66:d0:48:5f:1a:
                    59:17:34:ac:10:b6:bd:4c:64:fe:fc:11:c5:29:eb:
                    4d:1b:3c:9f:65:4b:88:5f:19:f0:9c:77:da:18:f6:
                    68:ae:7f:d7:05:c5:8c:fe:74:60:94:45:86:75:1d:
                    18:86:55:f7:93:fc:4f:03:c2:71:09:10:a4:36:a5:
                    f8:73:55:cc:cf:6b:5d:15:f2:3d:ca:db:48:a4:59:
                    39:71:b0:c7:bc:60:d2:eb:74:a4:62:c9:d7:08:1f:
                    57:c1:99:01:0e:3d:1c:c8:a0:0a:90:d0:77:9b:bf:
                    3a:23:ff:76:58:4b:b3:46:fd:69:54:32:67:59:2b:
                    41:7d:3c:a5:c8:c0:ef:4f:5e:57:69:14:ce:a7:dd:
                    cd:7a:e7:63:94:8d:68:63:93:77:a0:38:a7:da:52:
                    01:c5:3d:18:c8:f1:89:b7:1e:3e:1a:b8:b3:7a:8a:
                    a5:8a:e8:c6:59:1c:e6:99:16:83:7f:0a:fc:d5:dc:
                    d3:0d:96:6d:39:94:ec:d6:c0:d8:09:29:55:de:7c:
                    dc:46:ab:44:6b:12:4d:67:e2:25:c3:4c:dc:67:8c:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:99:58:95:9C:88:AA:E3:6C:10:98:F5:0E:C0:99:5D:3B:C0:9E
            X509v3 Authority Key Identifier:
                keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.5.0-101.128.7.255
                  103.9.16.0/22
                  202.52.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:2c:67:15:68:7b:30:73:34:40:97:ac:bb:c3:41:da:03:
         28:d9:d3:db:1f:6e:2f:dd:ca:09:eb:68:53:8c:35:5b:56:61:
         f7:22:02:aa:26:4b:1d:f9:ef:bd:8e:57:d7:28:9c:6e:2b:6b:
         1c:15:be:30:6e:aa:c6:18:2d:7f:76:91:66:7d:94:ed:4e:f0:
         56:65:a0:93:a7:a9:8e:4b:9b:ea:94:bb:ba:cb:1b:ee:f5:1f:
         ad:b9:06:5f:ca:f4:3a:d3:a7:25:51:33:30:55:d3:c2:b2:4f:
         54:da:7f:b2:83:41:82:ed:9d:46:bf:ac:e2:82:e5:4a:ed:30:
         2c:73:ea:e8:95:dc:dc:50:89:d6:d7:91:09:16:87:7b:3a:b4:
         57:d5:08:ad:44:db:e1:e4:f7:b2:d1:99:5d:73:bb:ab:1b:13:
         d7:32:cc:c5:2f:3e:df:de:0b:1c:d6:9b:96:4d:d7:cd:18:0f:
         4d:15:53:a0:9a:50:3d:da:16:6a:49:1d:aa:91:61:4b:10:74:
         a3:ae:c8:bd:15:5a:d8:8f:de:f2:42:41:d2:71:99:ee:77:66:
         b5:e5:ed:68:6b:66:13:4c:a5:89:d1:0a:16:6d:57:84:e6:47:
         a7:45:89:23:2c:dd:63:70:4e:35:03:9a:ac:de:5f:48:51:fa:
         1c:ca:22:ab
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICHOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0
ODIyNjBFRDgwHhcNMjYwNDEwMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ5MjMxZC00ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnmy/+nLIHTxvRr8vJgx0H5L9VuA0m+rGs2H7SClmi2ZsEw5wYjiGZtBIXxpZ
FzSsELa9TGT+/BHFKetNGzyfZUuIXxnwnHfaGPZorn/XBcWM/nRglEWGdR0YhlX3
k/xPA8JxCRCkNqX4c1XMz2tdFfI9yttIpFk5cbDHvGDS63SkYsnXCB9XwZkBDj0c
yKAKkNB3m786I/92WEuzRv1pVDJnWStBfTylyMDvT15XaRTOp93NeudjlI1oY5N3
oDin2lIBxT0YyPGJtx4+GrizeoqliujGWRzmmRaDfwr81dzTDZZtOZTs1sDYCSlV
3nzcRqtEaxJNZ+Ilw0zcZ4zuGQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFPx6mViV
nIiq42wQmPUOwJldO8CeMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4
MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E
dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjBGRTIvMkZGOUJCMjJFODMyMTFFNkJGNTEyODQyQzRGOUFFMDIvMTQ1NjRBQjBF
ODMzMTFFNkE3MkRDNTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaMAwDBABlgAUDBANlgAADBAJnCRADBADKNC4wDQYJKoZIhvcNAQELBQAD
ggEBADpYLGcVaHswczRAl6y7w0HaAyjZ09sfbi/dygnraFOMNVtWYfciAqomSx35
772OV9conG4raxwVvjBuqsYYLX92kWZ9lO1O8FZloJOnqY5Lm+qUu7rLG+71H625
Bl/K9DrTpyVRMzBV08KyT1Taf7KDQYLtnUa/rOKC5UrtMCxz6uiV3NxQidbXkQkW
h3s6tFfVCK1E2+Hk97LRmV1zu6sbE9cyzMUvPt/eCxzWm5ZN180YD00VU6CaUD3a
FmpJHaqRYUsQdKOuyL0VWtiP3vJCQdJxme53ZrXl7WhrZhNMpYnRChZtV4TmR6dF
iSMs3WNwTjUDmqzeX0hR+hzKIqs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:41 2026 by rpki-client