Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/A0BCB8C6A7F111F1B0B339166211F970.roa
File:                     A0BCB8C6A7F111F1B0B339166211F970.roa (raw, json)
Hash identifier:          L+gYNweejjVhVwFE5Shlv50HmWDXdkDIAWER8QTB8wA=
Subject key identifier:   E5:D6:53:8E:3C:EC:2E:E2:CA:A6:3F:CC:EA:BD:B1:6C:74:C4:35:B4
Certificate issuer:       /CN=A91F6697/serialNumber=14CB30AC2D0B67C770FAFA00285686EB9FCB68DE
Certificate serial:       02
Authority key identifier: 14:CB:30:AC:2D:0B:67:C7:70:FA:FA:00:28:56:86:EB:9F:CB:68:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/A0BCB8C6A7F111F1B0B339166211F970.roa
Signing time:             Thu 03 Sep 2026 23:46:05 +0000
ROA not before:           Thu 03 Sep 2026 23:46:05 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     139673
IP address blocks:        198.15.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.crl
                          rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6697, serialNumber=14CB30AC2D0B67C770FAFA00285686EB9FCB68DE
        Validity
            Not Before: Sep  3 23:46:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a9a06bd-ddc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:ee:a0:cc:17:62:c7:48:7b:2d:8c:7a:0c:
                    4e:85:f9:15:cb:e8:b6:c3:56:b9:7d:2d:49:9b:6b:
                    4e:90:d9:19:10:bf:79:4e:da:0d:7e:05:38:b5:ac:
                    5b:6e:33:5f:47:3b:be:fb:81:14:3a:85:64:a9:a5:
                    0c:fa:18:28:ab:6c:29:8e:ac:88:1b:84:9a:b9:00:
                    a6:7f:99:05:7b:e7:a2:b5:97:20:c1:60:43:0a:c4:
                    a8:b2:2a:54:13:49:0a:92:a5:9e:66:01:bd:47:53:
                    3e:14:12:e4:70:72:03:1c:ec:f9:0c:be:2c:67:d4:
                    8a:17:c7:8a:1b:8e:89:7a:c1:17:63:4f:35:2f:cd:
                    5a:ef:90:94:38:69:3f:c9:a0:8e:9d:8b:79:33:cd:
                    ac:e8:ef:c0:e3:0d:7f:b8:01:6e:14:52:85:8f:c1:
                    8b:d2:76:a4:23:97:36:48:7b:14:6e:e4:8f:55:78:
                    d8:8c:5d:9c:e1:e0:1d:8a:b6:8f:82:37:9b:97:72:
                    51:1f:24:4d:ad:cd:34:18:79:91:48:c4:b5:10:96:
                    1b:00:1a:d9:d5:55:5a:01:e4:63:c1:f9:3f:da:2a:
                    3d:3a:11:b2:1b:3e:8b:7a:e8:50:81:06:f7:e4:ac:
                    c2:db:c1:80:2a:d6:32:6a:ac:4f:da:0c:c3:bd:0a:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D6:53:8E:3C:EC:2E:E2:CA:A6:3F:CC:EA:BD:B1:6C:74:C4:35:B4
            X509v3 Authority Key Identifier:
                keyid:14:CB:30:AC:2D:0B:67:C7:70:FA:FA:00:28:56:86:EB:9F:CB:68:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/A0BCB8C6A7F111F1B0B339166211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:92:5e:61:36:60:f9:b3:b5:00:5e:40:cc:1a:92:48:ef:e7:
         54:b6:bf:13:ef:71:f0:ad:f5:29:21:48:00:ae:27:94:18:01:
         42:db:cf:4c:77:22:73:7a:94:92:bd:47:f3:68:99:5c:46:86:
         e6:93:b6:cf:a5:72:92:c9:4c:b9:82:a2:0b:e7:76:e2:85:fc:
         9f:22:86:a3:03:1c:58:20:97:7e:ae:58:38:0d:0e:5d:a1:b9:
         f6:7b:c9:f9:09:d0:1c:70:56:7b:65:76:19:e1:62:4f:7b:57:
         ae:8c:40:1f:a3:31:30:36:61:5c:9f:ec:56:1b:de:4a:90:23:
         92:65:2c:0c:95:f3:a4:ab:10:0f:76:95:f3:65:e0:26:62:81:
         13:1a:52:67:e0:bd:c9:40:38:2e:d7:a7:9b:ca:e6:54:f2:5d:
         58:f0:e2:1f:62:1e:97:c6:92:0c:21:ca:cc:27:77:13:fc:7f:
         68:3c:94:1f:4e:98:df:04:af:e3:ac:aa:5b:1f:36:76:d7:1c:
         d1:7e:fb:13:7d:dd:ad:31:eb:af:fb:8a:3e:6c:9e:3a:25:43:
         1b:51:c9:e8:7d:84:b5:6a:3f:c6:95:08:fe:fb:8c:c9:c6:70:
         28:a1:fe:f1:80:b4:88:50:4e:25:49:1e:45:6a:c9:db:51:03:
         e9:34:3b:0b
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NjY5NzExMC8GA1UEBRMoMTRDQjMwQUMyRDBCNjdDNzcwRkFGQTAwMjg1Njg2RUI5
RkNCNjhERTAeFw0yNjA5MDMyMzQ2MDVaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOWEwNmJkLWRkYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFRu6gzBdix0h7LYx6DE6F+RXL6LbDVrl9LUmba06Q2RkQv3lO2g1+BTi1rFtu
M19HO777gRQ6hWSppQz6GCirbCmOrIgbhJq5AKZ/mQV756K1lyDBYEMKxKiyKlQT
SQqSpZ5mAb1HUz4UEuRwcgMc7PkMvixn1IoXx4objol6wRdjTzUvzVrvkJQ4aT/J
oI6di3kzzazo78DjDX+4AW4UUoWPwYvSdqQjlzZIexRu5I9VeNiMXZzh4B2Kto+C
N5uXclEfJE2tzTQYeZFIxLUQlhsAGtnVVVoB5GPB+T/aKj06EbIbPot66FCBBvfk
rMLbwYAq1jJqrE/aDMO9CtN7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU5dZTjjzs
LuLKpj/M6r2xbHTENbQwHwYDVR0jBBgwFoAUFMswrC0LZ8dw+voAKFaG65/LaN4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2Njk3L0YyMjlGMDRFQTdG
MDExRjFCN0ExOEREMDYxMTFGOTcwL0ZNc3dyQzBMWjhkdy12b0FLRmFHNjVfTGFO
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRk1zd3JDMExaOGR3LXZvQUtGYUc2NV9MYU40LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjY5Ny9GMjI5RjA0RUE3RjAxMUYxQjdBMThERDA2MTExRjk3MC9BMEJDQjhDNkE3
RjExMUYxQjBCMzM5MTY2MjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADGDxIwDQYJKoZIhvcNAQELBQADggEBADiSXmE2YPmztQBeQMwakkjv
51S2vxPvcfCt9SkhSACuJ5QYAULbz0x3InN6lJK9R/NomVxGhuaTts+lcpLJTLmC
ogvnduKF/J8ihqMDHFggl36uWDgNDl2hufZ7yfkJ0BxwVntldhnhYk97V66MQB+j
MTA2YVyf7FYb3kqQI5JlLAyV86SrEA92lfNl4CZigRMaUmfgvclAOC7Xp5vK5lTy
XVjw4h9iHpfGkgwhyswndxP8f2g8lB9OmN8Er+OsqlsfNnbXHNF++xN93a0x66/7
ij5snjolQxtRyeh9hLVqP8aVCP77jMnGcCih/vGAtIhQTiVJHkVqydtRA+k0Ows=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:31 2026 by rpki-client