Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa
File:                     96F24818744F11ECBFE4A57DC4F9AE02.roa (raw, json)
Hash identifier:          niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=
Subject key identifier:   B3:22:78:B3:F3:F0:12:5C:88:3B:FE:7B:BC:C5:88:64:B1:15:72:0C
Certificate issuer:       /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial:       04A5
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:38:43 +0000
ROA not before:           Sat 31 Jan 2026 00:20:42 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        203.19.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
        Validity
            Not Before: Jan 31 00:20:42 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46b93-e595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:66:f9:ba:64:4f:30:f3:db:fe:b6:93:06:
                    53:e0:e4:43:ab:e1:bc:5f:20:bc:06:5c:71:2a:68:
                    19:2c:99:7b:dc:b3:03:76:89:2f:28:a5:ca:af:1d:
                    ba:56:12:8a:e4:54:0f:da:2b:78:8d:00:0a:c3:54:
                    b2:cd:c4:c0:24:9c:d4:52:76:a6:32:f0:36:32:02:
                    27:f0:6e:84:32:51:55:6d:63:9b:d0:5c:9d:e4:6c:
                    39:cf:eb:a8:1b:3f:c3:64:6d:06:bc:91:36:bd:0f:
                    84:29:76:ca:bb:79:53:95:79:54:89:41:db:38:a8:
                    d9:53:cc:42:40:54:5f:e6:ae:04:84:4c:6a:2a:cb:
                    47:0d:7a:95:cf:1f:a2:7d:a5:86:ab:2c:3d:9e:fa:
                    c1:e8:6f:d6:b2:b2:99:fe:4a:1e:52:b7:7c:f7:4a:
                    79:81:83:63:83:69:db:1b:1f:7a:6f:3a:15:6f:0e:
                    a1:ce:c7:f9:f1:2f:64:a2:39:60:9c:3c:3a:ff:96:
                    ae:33:e4:0f:78:cf:e1:a5:61:b8:79:1d:b8:6f:f6:
                    29:51:7a:fb:c0:37:a6:33:12:98:86:7d:4f:63:22:
                    11:71:59:4f:cf:b0:ef:84:3e:8a:d0:54:69:c1:ea:
                    ba:2c:04:76:c2:3d:d6:df:53:b5:0f:c7:61:0c:21:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:22:78:B3:F3:F0:12:5C:88:3B:FE:7B:BC:C5:88:64:B1:15:72:0C
            X509v3 Authority Key Identifier:
                keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/96F24818744F11ECBFE4A57DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.19.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:75:cd:c5:51:fa:16:46:62:52:87:26:d8:7f:5f:56:6a:59:
         57:62:6b:b7:33:75:1a:dd:eb:bd:b8:e3:84:30:12:68:68:f6:
         ab:66:8f:55:d3:db:b9:83:7b:67:98:48:cd:5a:4c:90:4f:0f:
         6a:41:a6:8e:43:81:38:36:c3:78:dd:71:95:ee:f7:b9:71:c6:
         38:f7:fc:da:7a:8f:17:c4:8d:fb:aa:94:10:f9:fc:96:91:4a:
         80:55:6c:05:5c:c7:8a:71:b5:77:25:94:ce:71:1b:3b:5e:f2:
         7d:6d:2a:e3:24:b3:17:07:92:12:b7:81:17:95:fd:d0:31:9b:
         3e:58:53:9b:2d:4d:4f:8e:40:89:55:58:42:95:99:45:f2:32:
         f9:73:37:a8:7d:ea:1a:11:c7:0b:07:5b:f7:a0:6a:d2:a5:49:
         c7:e8:2f:b2:34:cb:f1:d6:cb:29:57:42:03:a4:d4:82:5a:d5:
         c2:71:8a:4b:5e:a8:e9:82:46:c2:3c:d9:ad:9f:ea:7c:c2:76:
         97:e8:90:e5:62:67:1f:ce:c8:ce:00:60:02:26:6a:ad:b7:31:
         0e:22:b2:4d:74:30:93:d8:8a:e8:c0:0e:77:e7:11:a1:7b:85:
         e6:71:ca:21:44:90:ca:eb:63:7e:80:3c:b4:8e:b0:04:b8:66:
         41:98:e3:b5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB
MEVCOThBMjYwHhcNMjYwMTMxMDAyMDQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmI5My1lNTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4Nm+bpkTzDz2/62kwZT4ORDq+G8XyC8BlxxKmgZLJl73LMDdokvKKXKrx26
VhKK5FQP2it4jQAKw1SyzcTAJJzUUnamMvA2MgIn8G6EMlFVbWOb0Fyd5Gw5z+uo
Gz/DZG0GvJE2vQ+EKXbKu3lTlXlUiUHbOKjZU8xCQFRf5q4EhExqKstHDXqVzx+i
faWGqyw9nvrB6G/WsrKZ/koeUrd890p5gYNjg2nbGx96bzoVbw6hzsf58S9kojlg
nDw6/5auM+QPeM/hpWG4eR24b/YpUXr7wDemMxKYhn1PYyIRcVlPz7DvhD6K0FRp
weq6LAR2wj3W31O1D8dhDCH2JQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLMieLPz
8BJciDv+e7zFiGSxFXIMMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0
NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp
aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjczMzQvN0E0MDQ5REE3NDRCMTFFQ0I5QUE4RDc0QzRGOUFFMDIvOTZGMjQ4MTg3
NDRGMTFFQ0JGRTRBNTdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxOeMA0GCSqGSIb3DQEBCwUAA4IBAQCwdc3FUfoWRmJShybYf19W
allXYmu3M3Ua3eu9uOOEMBJoaParZo9V09u5g3tnmEjNWkyQTw9qQaaOQ4E4NsN4
3XGV7ve5ccY49/zaeo8XxI37qpQQ+fyWkUqAVWwFXMeKcbV3JZTOcRs7XvJ9bSrj
JLMXB5ISt4EXlf3QMZs+WFObLU1PjkCJVVhClZlF8jL5czeofeoaEccLB1v3oGrS
pUnH6C+yNMvx1sspV0IDpNSCWtXCcYpLXqjpgkbCPNmtn+p8wnaX6JDlYmcfzsjO
AGACJmqttzEOIrJNdDCT2IrowA535xGhe4XmccohRJDK62N+gDy0jrAEuGZBmOO1
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:51 2026 by rpki-client