Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/78E836FCC15C11F1A32C9D3E5611F970.roa
File:                     78E836FCC15C11F1A32C9D3E5611F970.roa (raw, json)
Hash identifier:          SAHcV4+v8gjwWofKWjvp14TRAKSVjyzRX4nhcfbztRs=
Subject key identifier:   5C:83:94:E8:A7:84:9B:7C:75:0E:67:E5:34:ED:EE:A4:75:C6:D0:AB
Certificate issuer:       /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
Certificate serial:       A9
Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/78E836FCC15C11F1A32C9D3E5611F970.roa
Signing time:             Tue 06 Oct 2026 08:03:54 +0000
ROA not before:           Tue 06 Oct 2026 08:03:53 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135566
IP address blocks:        141.140.32.0/24 maxlen: 24
                          141.140.33.0/24 maxlen: 24
                          141.140.34.0/24 maxlen: 24
                          141.140.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719
        Validity
            Not Before: Oct  6 08:03:53 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ac4ab69-1f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:92:b0:64:84:ba:2c:4e:4f:f2:be:91:3d:
                    b4:d7:8e:65:7b:6a:a7:77:48:0c:07:41:bf:16:b9:
                    9f:b5:8b:68:a0:b5:46:34:38:44:23:cd:69:a0:51:
                    d0:39:fb:de:a8:66:f7:47:60:9b:3e:94:10:2b:b8:
                    d8:01:7f:7e:93:d8:5c:cd:8e:cf:85:ff:4f:00:1a:
                    2a:ee:86:67:3c:64:49:63:c7:76:bd:98:27:13:b9:
                    9c:e6:f4:95:9b:e6:9b:37:15:8c:91:19:69:69:3c:
                    9a:b6:8a:76:dd:13:02:fa:26:61:cc:8a:ec:48:56:
                    2b:53:e9:5a:3e:3a:67:dc:db:bf:a5:12:c5:e3:71:
                    3c:f2:2d:64:1f:28:ab:43:f8:13:88:ef:b5:f5:52:
                    ad:34:75:71:0d:45:35:73:7d:fc:38:bc:d8:91:55:
                    9d:e9:fc:99:5c:9a:96:f7:f6:2a:fc:8a:ca:69:11:
                    f2:49:62:8a:62:76:92:02:70:c6:62:dd:40:9f:82:
                    82:31:35:f1:73:45:86:28:68:f5:83:ac:79:d3:a5:
                    54:5a:f4:e3:0e:5e:3d:0b:77:80:54:fd:98:fd:45:
                    49:c6:bc:bc:62:99:6b:72:ae:2d:81:c6:fc:a5:59:
                    c5:01:fc:d6:23:ae:b2:7f:98:2f:34:af:5a:1a:02:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:83:94:E8:A7:84:9B:7C:75:0E:67:E5:34:ED:EE:A4:75:C6:D0:AB
            X509v3 Authority Key Identifier:
                keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/78E836FCC15C11F1A32C9D3E5611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.32.0-141.140.34.255
                  141.140.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c8:fd:52:8e:d0:94:39:ab:89:8e:28:5b:8d:89:d7:f9:05:
         60:70:39:7d:02:6e:a0:9f:37:c9:2d:ee:f9:05:84:5a:2c:8d:
         a5:ed:ca:f3:05:34:f5:53:6b:8b:52:00:e8:f7:b5:a9:28:3f:
         8f:b1:5d:79:3a:59:71:26:b5:36:56:da:a7:59:af:69:8a:38:
         f3:3b:f9:44:a8:89:ed:cb:37:8f:c2:eb:db:1c:25:4e:eb:06:
         61:9e:4e:cc:2b:00:6f:4e:e4:aa:81:67:9c:a0:95:c3:dc:99:
         26:a4:e5:85:11:eb:e9:a1:ff:6d:a7:73:d0:a8:b1:91:b7:d5:
         10:fb:11:c6:0a:50:2d:4a:3a:56:de:92:32:75:69:c0:d0:db:
         38:6a:f9:92:7d:58:22:04:d3:89:72:49:7e:41:d9:d0:e1:85:
         37:21:b6:87:90:2c:ff:56:b7:76:01:00:b0:65:93:bb:be:e6:
         57:9d:8a:a7:ca:69:04:c4:04:6c:30:b2:9c:4d:be:0e:ad:b0:
         40:e2:81:07:b9:14:2c:41:37:92:cd:aa:f8:d0:6f:35:b9:12:
         4f:6c:80:20:c0:07:25:71:5d:8a:16:52:d8:56:ae:bc:ae:1e:
         a2:06:36:da:df:5b:85:56:ee:6b:18:3b:74:ee:9f:a2:f9:fa:
         85:03:37:49
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5OEQxMTAvBgNVBAUTKEEyNTY5NzUxMkFBMjY1MjdDRTRBRDYxQUNDMDlBMTBC
RUQzQzk3MTkwHhcNMjYxMDA2MDgwMzUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM0YWI2OS0xZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy1qSsGSEuixOT/K+kT20145le2qnd0gMB0G/FrmftYtooLVGNDhEI81poFHQ
OfveqGb3R2CbPpQQK7jYAX9+k9hczY7Phf9PABoq7oZnPGRJY8d2vZgnE7mc5vSV
m+abNxWMkRlpaTyatop23RMC+iZhzIrsSFYrU+laPjpn3Nu/pRLF43E88i1kHyir
Q/gTiO+19VKtNHVxDUU1c338OLzYkVWd6fyZXJqW9/Yq/IrKaRHySWKKYnaSAnDG
Yt1An4KCMTXxc0WGKGj1g6x506VUWvTjDl49C3eAVP2Y/UVJxry8Yplrcq4tgcb8
pVnFAfzWI66yf5gvNK9aGgLMAwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFFyDlOin
hJt8dQ5n5TTt7qR1xtCrMB8GA1UdIwQYMBaAFKJWl1EqomUnzkrWGswJoQvtPJcZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9FMzlEOEUwQ0M4
RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpTZk9TdFlhekFtaEMtMDhs
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU5OEQvRTM5RDhFMENDOEVDMTFGMDhDNzhBQjQ1QzRGOUFFMDIvNzhFODM2RkND
MTVDMTFGMUEzMkM5RDNFNTYxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUMAwDBAWNjCADBACNjCIDBACNjCcwDQYJKoZIhvcNAQELBQADggEBAC/I
/VKO0JQ5q4mOKFuNidf5BWBwOX0CbqCfN8kt7vkFhFosjaXtyvMFNPVTa4tSAOj3
takoP4+xXXk6WXEmtTZW2qdZr2mKOPM7+USoie3LN4/C69scJU7rBmGeTswrAG9O
5KqBZ5yglcPcmSak5YUR6+mh/22nc9CosZG31RD7EcYKUC1KOlbekjJ1acDQ2zhq
+ZJ9WCIE04lySX5B2dDhhTchtoeQLP9Wt3YBALBlk7u+5lediqfKaQTEBGwwspxN
vg6tsEDigQe5FCxBN5LNqvjQbzW5Ek9sgCDAByVxXYoWUthWrryuHqIGNtrfW4VW
7msYO3Tun6L5+oUDN0k=
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:48:33 2026 by rpki-client