Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A45B04065A3F11F1886D544AAD833773.roa
File:                     A45B04065A3F11F1886D544AAD833773.roa (raw, json)
Hash identifier:          1AN5k0MNLAYAKTZr9CZ0ez53EwSpf4f9LN0CXmXrk70=
Subject key identifier:   E2:38:EC:B2:96:93:7B:4D:7B:61:D5:ED:29:F9:45:46:EE:43:EA:C5
Certificate issuer:       /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial:       36A0
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A45B04065A3F11F1886D544AAD833773.roa
Signing time:             Sun 30 Aug 2026 15:14:59 +0000
ROA not before:           Sun 30 Aug 2026 15:14:59 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9931
IP address blocks:        1.179.142.0/24 maxlen: 24
                          113.53.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
                          rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13984 (0x36a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
        Validity
            Not Before: Aug 30 15:14:59 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9448f3-86c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:26:fb:cd:ee:81:3d:54:ba:c3:a6:79:e8:
                    a0:ac:91:53:d4:9a:74:7c:14:10:7c:e9:c2:66:1e:
                    9b:ea:8e:d5:97:0d:32:d5:12:bb:5b:dd:ea:59:4c:
                    cb:e1:ce:81:45:39:59:a5:ab:38:fe:55:c5:2b:4a:
                    a9:8c:27:d9:63:5e:fb:73:03:10:40:57:92:f5:f6:
                    97:bb:a2:96:b0:a3:10:55:a6:1a:ae:45:58:2a:4d:
                    88:0d:95:f3:7a:9d:43:e1:61:ed:b0:84:f6:ea:3e:
                    38:45:cf:e1:12:32:a0:08:e1:87:80:70:3a:a3:a7:
                    c3:22:42:93:65:10:32:6f:52:9a:37:98:be:c1:9a:
                    d6:02:60:ee:61:fa:f6:c6:2f:1d:05:94:89:df:d4:
                    2c:d9:d1:eb:c8:16:50:a9:dc:99:3d:d7:6f:d1:78:
                    64:bb:ae:a8:60:f7:d0:f4:81:e1:90:5c:7f:81:aa:
                    c7:29:6d:4d:8c:d0:77:f1:0c:7e:39:cf:a0:4b:07:
                    97:fe:68:24:8d:31:4a:da:9a:a7:51:97:a8:ab:b0:
                    b8:00:da:29:17:66:ae:a8:b5:87:22:d0:b2:27:4d:
                    90:0e:a6:e8:7c:43:33:57:23:01:90:bc:5b:fa:07:
                    df:12:77:86:fb:1d:ca:28:2e:ec:67:f9:c5:3e:23:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:38:EC:B2:96:93:7B:4D:7B:61:D5:ED:29:F9:45:46:EE:43:EA:C5
            X509v3 Authority Key Identifier:
                keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/A45B04065A3F11F1886D544AAD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.179.142.0/24
                  113.53.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:23:03:60:c5:ff:54:20:d9:bc:b3:3f:59:b8:b7:16:03:27:
         ea:22:6d:33:ff:a1:81:18:b6:9c:22:9d:e6:5c:a8:6f:76:b1:
         a9:a4:51:42:44:05:ed:f4:1c:35:4a:13:99:80:94:7f:51:5a:
         54:5e:2e:e0:cb:8a:31:12:ef:72:09:08:10:6b:25:c9:e8:93:
         15:6d:a9:3c:cb:04:ec:de:98:43:98:ff:43:9a:b0:5b:2f:cc:
         94:ff:b4:6f:41:56:2b:b8:64:fd:2f:b5:76:02:88:aa:2b:8f:
         09:8d:68:72:89:35:a5:fd:68:01:62:ff:fd:f0:c4:dd:6a:98:
         0f:b9:c9:d2:f5:e4:d8:83:fb:99:6c:f2:d0:e6:f0:6e:df:29:
         6f:23:bf:03:3c:56:ef:b5:49:c4:ba:08:ce:07:2d:8d:1a:c8:
         25:64:47:ce:a2:3a:cf:ae:40:27:92:53:75:6b:80:8a:4d:13:
         e5:ad:27:c2:40:41:26:f9:f6:11:77:5c:93:ba:16:e7:58:20:
         8d:50:c9:f1:7c:87:51:36:30:43:fc:5b:3a:6c:41:5e:fb:77:
         a8:6f:38:1a:a9:5c:7f:73:20:15:35:ba:a2:64:50:5b:8d:6e:
         91:f0:98:dd:6d:ff:96:ab:e4:58:e9:6b:7c:f3:ae:9c:f4:1b:
         7d:cc:ef:b7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx
NUIxQ0JGRTgwHhcNMjYwODMwMTUxNDU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NDhmMy04NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZkm+83ugT1UusOmeeigrJFT1Jp0fBQQfOnCZh6b6o7Vlw0y1RK7W93qWUzL
4c6BRTlZpas4/lXFK0qpjCfZY177cwMQQFeS9faXu6KWsKMQVaYarkVYKk2IDZXz
ep1D4WHtsIT26j44Rc/hEjKgCOGHgHA6o6fDIkKTZRAyb1KaN5i+wZrWAmDuYfr2
xi8dBZSJ39Qs2dHryBZQqdyZPddv0Xhku66oYPfQ9IHhkFx/garHKW1NjNB38Qx+
Oc+gSweX/mgkjTFK2pqnUZeoq7C4ANopF2auqLWHItCyJ02QDqbofEMzVyMBkLxb
+gffEneG+x3KKC7sZ/nFPiOAmwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOI47LKW
k3tNe2HV7Sn5RUbuQ+rFMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE
ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Y0RkUvQkExMzEyNEUxRDg1MTFFMkE3Nzk5OURDMDhCMDJDRDIvQTQ1QjA0MDY1
QTNGMTFGMTg4NkQ1NDRBQUQ4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAAbOOAwQAcTX2MA0GCSqGSIb3DQEBCwUAA4IBAQARIwNgxf9UINm8
sz9ZuLcWAyfqIm0z/6GBGLacIp3mXKhvdrGppFFCRAXt9Bw1ShOZgJR/UVpUXi7g
y4oxEu9yCQgQayXJ6JMVbak8ywTs3phDmP9DmrBbL8yU/7RvQVYruGT9L7V2Aoiq
K48JjWhyiTWl/WgBYv/98MTdapgPucnS9eTYg/uZbPLQ5vBu3ylvI78DPFbvtUnE
ugjOBy2NGsglZEfOojrPrkAnklN1a4CKTRPlrSfCQEEm+fYRd1yTuhbnWCCNUMnx
fIdRNjBD/Fs6bEFe+3eobzgaqVx/cyAVNbqiZFBbjW6R8Jjdbf+Wq+RY6Wt8866c
9Bt9zO+3
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:21:56 2026 by rpki-client