Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/B0FA33FE6F9611ED8A672F69C4F9AE02.roa
File:                     B0FA33FE6F9611ED8A672F69C4F9AE02.roa (raw, json)
Hash identifier:          S/EdC/f4qlpZIxwIMYpUjGP+LCPFuaPa/KXIT0/hvzM=
Subject key identifier:   E5:43:76:C7:9C:69:08:9B:42:57:D4:1E:AA:EB:86:63:5F:A9:20:B2
Certificate issuer:       /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Certificate serial:       039D
Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/B0FA33FE6F9611ED8A672F69C4F9AE02.roa
Signing time:             Sat 03 Oct 2026 01:48:57 +0000
ROA not before:           Sat 03 Oct 2026 01:48:57 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        146.144.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
        Validity
            Not Before: Oct  3 01:48:57 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac05f09-50ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:91:19:87:d0:82:87:ba:e1:84:cf:d6:bd:
                    5e:1a:54:e8:d9:44:21:8b:58:a2:a0:5f:84:80:6e:
                    5d:3a:41:3e:6b:f7:2f:c5:7b:b2:7a:49:19:5b:65:
                    35:52:e1:8b:87:64:93:6e:01:da:0f:b5:39:46:5c:
                    5e:e6:9d:1b:74:09:a8:5b:43:05:8c:40:ac:8c:78:
                    f1:fb:78:6c:bf:29:2f:10:b2:4f:4c:46:21:aa:16:
                    40:ae:49:98:68:f9:4e:0e:37:1e:a0:5b:65:d2:3d:
                    16:ac:41:fe:01:41:af:dc:9b:fa:d8:c4:60:66:c0:
                    11:78:a0:b5:f6:df:a4:03:93:49:de:e7:00:cf:5a:
                    57:de:a8:be:f3:0a:cf:fa:52:df:3c:88:ff:9d:10:
                    fd:2e:d9:d7:9b:85:28:d9:73:e9:59:16:da:6e:8f:
                    e5:e2:c1:a3:ea:c6:aa:7f:bf:44:d6:46:69:63:e4:
                    c5:ac:ce:c7:ad:fa:b5:f2:92:f1:f6:ab:ed:af:ee:
                    36:6e:d7:74:4c:71:f6:c0:5e:0c:ef:a8:de:3e:6a:
                    85:83:1d:9d:fe:a2:55:b9:d2:28:36:11:d9:9b:2a:
                    59:4e:9e:db:cb:58:81:0c:c5:9a:e1:61:f8:76:c0:
                    16:7c:f8:84:2f:df:ae:ff:59:1e:4c:66:a5:91:64:
                    90:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:43:76:C7:9C:69:08:9B:42:57:D4:1E:AA:EB:86:63:5F:A9:20:B2
            X509v3 Authority Key Identifier:
                keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/B0FA33FE6F9611ED8A672F69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.144.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ab:85:3c:2d:c6:f1:04:54:a5:1d:cd:7f:63:c2:5b:30:ff:
         dd:25:a5:27:fc:18:da:f3:c3:68:41:c4:a7:55:d3:8c:0f:2c:
         16:a6:51:bd:d3:34:f5:48:f1:f6:0a:1b:6c:d3:0c:5d:b7:31:
         ea:fc:14:af:58:dc:01:43:d0:40:6f:95:e9:97:05:91:fa:ad:
         b4:d1:be:37:40:c9:b0:38:fc:a0:4d:50:3a:4b:31:d7:7a:49:
         8b:b6:33:98:25:53:4a:4d:6d:14:d5:93:40:e1:ce:78:13:84:
         a1:78:5e:6e:59:9b:2a:30:b8:f6:1b:78:47:0a:d2:17:c6:de:
         6f:50:ab:5a:01:c8:08:46:77:2c:b7:11:fa:43:82:5e:f1:b6:
         04:cc:be:ba:4e:db:80:66:54:e6:c1:55:a1:ef:b7:5e:64:c7:
         71:86:7d:48:23:4d:a0:ea:9b:32:a1:13:6a:5f:df:6a:28:37:
         87:ce:14:f3:c9:ee:6c:64:1d:82:c4:33:05:7f:0a:ec:f9:6c:
         27:88:c1:c7:32:ae:4f:82:2b:1d:36:e9:39:d5:4a:b9:fd:bf:
         56:77:9f:b7:44:5b:d3:8b:5c:63:0b:34:19:03:51:90:08:02:
         13:18:13:78:74:42:6f:48:de:79:8f:04:be:b9:21:b8:0c:3d:
         a9:36:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 04:11:08 2026 by rpki-client