Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa
File:                     E3BDC64224D411F191B1E656AB833773.roa (raw, json)
Hash identifier:          sIg+Xdz5Qyeb7OrBu/I41LeMBOQVEGrHUaZBzwqV+U4=
Subject key identifier:   C5:47:49:B6:7D:48:02:5D:46:3B:47:7A:64:64:9D:8E:97:33:76:4F
Certificate issuer:       /CN=A91FCA47/serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
Certificate serial:       5B
Authority key identifier: 9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa
Signing time:             Mon 07 Sep 2026 08:58:58 +0000
ROA not before:           Mon 07 Sep 2026 08:58:58 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        45.126.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl
                          rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCA47, serialNumber=9C6290A8A12E8886413743D7F10577F439169C7D
        Validity
            Not Before: Sep  7 08:58:58 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e7cd2-6c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:f1:c5:df:d4:4f:08:08:f5:67:c1:10:9d:
                    f5:2c:66:c7:b4:30:3b:e3:70:e8:52:00:61:be:c0:
                    85:50:de:38:73:d2:de:4b:85:cc:80:16:3c:33:cf:
                    c6:29:aa:6c:8b:1f:b9:0c:a7:6b:0c:4e:74:b5:25:
                    e5:92:8a:da:e2:00:f3:2f:c2:85:23:28:98:71:cd:
                    a2:68:84:81:d3:24:e1:0c:de:11:68:cd:bb:11:f0:
                    f6:79:96:52:25:d0:bb:f1:36:e7:3f:88:84:31:c0:
                    ea:00:9e:f2:1e:03:57:af:b8:27:58:53:68:bd:b5:
                    a8:6e:22:91:60:85:22:81:30:69:42:4e:9b:79:58:
                    77:80:cc:44:e0:05:10:b2:22:a5:c2:4c:6a:c4:b6:
                    7c:9c:5d:ee:60:16:84:c5:ef:f2:08:b7:ad:93:7d:
                    ac:f8:d0:1b:7a:91:36:f2:11:13:fe:96:73:34:ef:
                    8d:7e:f0:80:6c:6e:e7:23:b0:d5:c6:05:c1:8c:33:
                    4b:69:ab:56:7d:56:fd:55:48:32:4a:22:e1:14:fa:
                    cb:9b:bf:78:1d:fa:56:d8:6f:02:ad:05:be:36:c0:
                    21:27:6a:ce:3d:cc:3e:bf:44:05:e8:dd:52:8a:47:
                    51:f6:1e:d6:69:60:a7:9e:28:36:f2:bd:59:4a:0c:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:47:49:B6:7D:48:02:5D:46:3B:47:7A:64:64:9D:8E:97:33:76:4F
            X509v3 Authority Key Identifier:
                keyid:9C:62:90:A8:A1:2E:88:86:41:37:43:D7:F1:05:77:F4:39:16:9C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/nGKQqKEuiIZBN0PX8QV39DkWnH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nGKQqKEuiIZBN0PX8QV39DkWnH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA47/95E76D6024D411F18AAA0942AB833773/E3BDC64224D411F191B1E656AB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:49:8c:27:4c:22:de:ed:42:78:8d:04:3b:df:73:58:68:
         90:0d:a8:a4:6e:00:01:3b:be:cd:2d:27:0f:6a:63:73:a4:86:
         1b:59:35:53:42:52:fc:fc:90:87:06:3c:98:ff:a2:68:3e:73:
         66:eb:f4:da:13:ad:09:7b:c2:fb:e0:de:9c:ab:0a:6d:8a:dc:
         08:0e:f3:d2:34:c6:7a:03:39:81:df:58:9c:39:05:3f:40:21:
         a7:8a:f9:9c:7a:1b:c0:28:23:1c:ae:04:c2:35:9d:0f:dd:31:
         a2:f8:96:fe:b4:9b:d3:b0:c3:84:c7:ab:46:f7:27:0e:1d:0e:
         37:6d:dd:21:d5:a2:8b:90:92:37:b0:11:fe:fb:be:66:44:7c:
         61:cb:db:6f:bd:b9:76:fa:16:a4:0f:60:00:b5:11:8e:16:d5:
         a9:d1:e4:48:97:3b:30:b6:06:6c:1d:b4:5b:38:ad:61:2b:8f:
         47:95:84:e9:ec:9f:cb:5f:86:7a:24:a8:71:48:c2:f9:cd:94:
         43:87:d9:5e:f1:2e:46:f5:b3:d5:81:2e:2e:f5:ad:e6:ce:79:
         e1:31:bc:10:b8:28:42:ed:d4:fe:c2:3e:e4:6e:71:0e:13:f9:
         94:4b:42:55:71:63:ce:7e:f7:b2:48:27:fe:77:91:71:64:90:
         78:3a:f9:d1
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
Q0E0NzExMC8GA1UEBRMoOUM2MjkwQThBMTJFODg4NjQxMzc0M0Q3RjEwNTc3RjQz
OTE2OUM3RDAeFw0yNjA5MDcwODU4NThaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOWU3Y2QyLTZjMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsNPHF39RPCAj1Z8EQnfUsZse0MDvjcOhSAGG+wIVQ3jhz0t5LhcyAFjwzz8Yp
qmyLH7kMp2sMTnS1JeWSitriAPMvwoUjKJhxzaJohIHTJOEM3hFozbsR8PZ5llIl
0LvxNuc/iIQxwOoAnvIeA1evuCdYU2i9tahuIpFghSKBMGlCTpt5WHeAzETgBRCy
IqXCTGrEtnycXe5gFoTF7/IIt62Tfaz40Bt6kTbyERP+lnM0741+8IBsbucjsNXG
BcGMM0tpq1Z9Vv1VSDJKIuEU+subv3gd+lbYbwKtBb42wCEnas49zD6/RAXo3VKK
R1H2HtZpYKeeKDbyvVlKDAV7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUxUdJtn1I
Al1GO0d6ZGSdjpczdk8wHwYDVR0jBBgwFoAUnGKQqKEuiIZBN0PX8QV39DkWnH0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDQTQ3Lzk1RTc2RDYwMjRE
NDExRjE4QUFBMDk0MkFCODMzNzczL25HS1FxS0V1aUlaQk4wUFg4UVYzOURrV25I
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbkdLUXFLRXVpSVpCTjBQWDhRVjM5RGtXbkgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0E0Ny85NUU3NkQ2MDI0RDQxMUYxOEFBQTA5NDJBQjgzMzc3My9FM0JEQzY0MjI0
RDQxMUYxOTFCMUU2NTZBQjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAAtfokwDQYJKoZIhvcNAQELBQADggEBAIPuSYwnTCLe7UJ4jQQ733NY
aJANqKRuAAE7vs0tJw9qY3OkhhtZNVNCUvz8kIcGPJj/omg+c2br9NoTrQl7wvvg
3pyrCm2K3AgO89I0xnoDOYHfWJw5BT9AIaeK+Zx6G8AoIxyuBMI1nQ/dMaL4lv60
m9Oww4THq0b3Jw4dDjdt3SHVoouQkjewEf77vmZEfGHL22+9uXb6FqQPYAC1EY4W
1anR5EiXOzC2BmwdtFs4rWErj0eVhOnsn8tfhnokqHFIwvnNlEOH2V7xLkb1s9WB
Li71rebOeeExvBC4KELt1P7CPuRucQ4T+ZRLQlVxY85+97JIJ/53kXFkkHg6+dE=
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:40:08 2026 by rpki-client