Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B1E3B88C81B511F19B8C01DE60A30FBC.roa
File:                     B1E3B88C81B511F19B8C01DE60A30FBC.roa (raw, json)
Hash identifier:          dx7DvWfirCJZBr5eZJEHjm/706Q8/9o4UK2W9LgRjMo=
Subject key identifier:   9F:FB:82:CF:E2:58:CA:FA:86:9A:A0:0C:9D:F7:F1:05:D3:32:61:C8
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28F4
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B1E3B88C81B511F19B8C01DE60A30FBC.roa
Signing time:             Fri 17 Jul 2026 08:01:20 +0000
ROA not before:           Fri 17 Jul 2026 08:01:20 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     154735
IP address blocks:        203.213.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10484 (0x28f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Jul 17 08:01:20 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a59e150-846d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5a:78:38:e3:24:ab:d8:f3:c4:26:8c:0a:f1:
                    1e:1e:74:84:e6:2a:56:f2:2b:b6:36:bc:76:10:c8:
                    d6:1d:0a:24:16:16:0a:a1:57:51:bd:88:f5:c8:be:
                    f3:d8:e2:ea:74:89:c7:ce:a7:6b:17:bb:57:bd:3a:
                    f6:ef:6d:65:6b:fa:c3:c5:e7:50:3f:30:e6:31:48:
                    e4:b9:30:76:c0:95:c1:e8:41:64:d7:db:2e:50:18:
                    f9:f3:c4:d5:a7:cb:d5:3b:5e:e0:23:9d:76:82:fa:
                    7c:11:84:bb:a7:00:da:2e:ea:02:67:dc:10:56:ee:
                    d7:fe:bc:18:d1:bf:21:23:1d:01:ef:90:1d:c7:cc:
                    37:bd:f8:3a:13:ce:3c:a1:11:5f:c6:4a:f8:3e:43:
                    b2:b6:c8:db:55:dd:49:d4:95:15:01:4b:75:c3:64:
                    5f:eb:1e:ae:67:ad:e1:8f:15:27:13:38:13:49:af:
                    2a:2d:e9:f5:b0:12:51:f6:f8:78:dc:05:9d:9b:86:
                    7f:86:04:d1:55:f1:1f:45:80:54:52:a9:81:9b:7d:
                    38:fb:9b:32:43:db:da:27:23:dc:1d:cd:54:77:f0:
                    17:ac:2e:29:44:94:fb:ca:77:55:9e:ce:f1:31:21:
                    38:98:60:78:2c:b0:20:32:01:b1:7d:0b:9a:f0:15:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FB:82:CF:E2:58:CA:FA:86:9A:A0:0C:9D:F7:F1:05:D3:32:61:C8
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B1E3B88C81B511F19B8C01DE60A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.213.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d0:92:82:5a:13:5a:19:b3:10:1e:8c:2f:85:5c:1f:1d:fe:
         e9:2b:b5:d7:43:28:3a:bf:6e:e0:7f:57:f0:1a:8f:a7:4d:4b:
         78:39:46:9c:d6:3b:94:4b:ec:2a:f5:96:05:ac:89:f7:79:89:
         fa:db:90:0b:83:c7:b9:0a:25:34:23:48:83:11:66:ed:77:81:
         38:57:c3:a3:d4:07:99:6d:95:d8:f4:6a:70:fb:52:7f:a2:85:
         53:9e:e6:6c:25:e1:10:7b:2e:a4:8e:0a:71:02:f7:f9:1f:71:
         95:c2:0a:36:7c:f4:d3:02:ad:c8:c6:71:0a:91:74:2d:1b:5d:
         6b:cf:2a:ca:78:57:c9:7a:df:6b:fb:af:ba:68:25:96:c8:19:
         e5:9a:25:62:f6:5f:44:e3:94:15:63:f4:44:22:cc:0d:12:35:
         f4:81:0b:4e:e4:81:63:69:40:4e:c5:87:7e:fd:fc:80:9f:65:
         99:77:7f:cb:32:b6:8c:33:b4:6c:39:cc:cc:11:35:aa:54:65:
         4f:b7:d0:1f:14:53:29:ce:ac:df:46:2e:ff:0b:3a:6f:d8:d3:
         db:e0:80:f0:aa:f4:1f:05:63:b1:dc:ef:bd:e7:69:18:75:0d:
         a6:4b:c3:cc:40:8f:6a:b7:29:e3:64:af:06:c2:15:80:2b:37:
         e5:66:0f:ea
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw
NDU5MjhBQjgwHhcNMjYwNzE3MDgwMTIwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU5ZTE1MC04NDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjlp4OOMkq9jzxCaMCvEeHnSE5ipW8iu2Nrx2EMjWHQokFhYKoVdRvYj1yL7z
2OLqdInHzqdrF7tXvTr2721la/rDxedQPzDmMUjkuTB2wJXB6EFk19suUBj588TV
p8vVO17gI512gvp8EYS7pwDaLuoCZ9wQVu7X/rwY0b8hIx0B75Adx8w3vfg6E848
oRFfxkr4PkOytsjbVd1J1JUVAUt1w2Rf6x6uZ63hjxUnEzgTSa8qLen1sBJR9vh4
3AWdm4Z/hgTRVfEfRYBUUqmBm304+5syQ9vaJyPcHc1Ud/AXrC4pRJT7yndVns7x
MSE4mGB4LLAgMgGxfQua8BVG9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ/7gs/i
WMr6hpqgDJ338QXTMmHIMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz
OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvQjFFM0I4OEM4
MUI1MTFGMTlCOEMwMURFNjBBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy9XPMA0GCSqGSIb3DQEBCwUAA4IBAQAw0JKCWhNaGbMQHowvhVwf
Hf7pK7XXQyg6v27gf1fwGo+nTUt4OUac1juUS+wq9ZYFrIn3eYn625ALg8e5CiU0
I0iDEWbtd4E4V8Oj1AeZbZXY9Gpw+1J/ooVTnuZsJeEQey6kjgpxAvf5H3GVwgo2
fPTTAq3IxnEKkXQtG11rzyrKeFfJet9r+6+6aCWWyBnlmiVi9l9E45QVY/REIswN
EjX0gQtO5IFjaUBOxYd+/fyAn2WZd3/LMraMM7RsOczMETWqVGVPt9AfFFMpzqzf
Ri7/Czpv2NPb4IDwqvQfBWOx3O+952kYdQ2mS8PMQI9qtynjZK8GwhWAKzflZg/q
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:19:01 2026 by rpki-client