Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/836F847C340011EFA88BE541C4F9AE02.roa
File:                     836F847C340011EFA88BE541C4F9AE02.roa (raw, json)
Hash identifier:          HlUO0ONie9spEM92jusEyJRYy9zRFqGpZ3NndsommrM=
Subject key identifier:   80:37:6D:C2:19:11:31:D1:89:3D:39:3B:30:83:21:E7:32:C0:2D:E3
Certificate issuer:       /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial:       013C
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/836F847C340011EFA88BE541C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:22:35 +0000
ROA not before:           Tue 15 Jul 2025 06:12:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152899
IP address blocks:        160.22.52.0/24 maxlen: 24
                          160.22.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Validity
            Not Before: Jul 15 06:12:48 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5ab3b-0e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:cf:fe:ec:ea:e9:39:37:92:2c:6f:2d:7b:
                    ef:65:e9:37:10:58:2a:20:79:67:49:78:14:57:f8:
                    f3:20:11:72:4f:41:19:87:fe:ed:ee:dd:c1:ee:b0:
                    38:a1:04:07:f7:e8:61:ed:d2:d0:f1:80:e8:42:af:
                    a6:d9:09:4a:f1:af:77:f0:8b:42:78:48:0e:ec:5e:
                    7e:29:6f:9b:31:82:1e:dc:f8:d1:2b:72:01:c1:92:
                    92:66:4e:36:40:4a:52:41:af:b6:a9:ae:71:13:f6:
                    35:91:6e:0b:61:ee:6c:89:b7:9e:ea:50:1f:bc:3a:
                    0b:d7:f6:13:ce:6e:f9:41:3b:79:89:c0:ef:76:5a:
                    f0:20:ff:ef:93:bd:4c:15:d3:a2:03:90:de:cd:e0:
                    9e:0c:2c:3e:3a:03:2b:c6:88:6f:fd:51:b9:af:a3:
                    a6:6e:83:24:3d:d2:d7:97:af:bc:3b:23:1e:60:e8:
                    21:53:6f:b1:a1:3c:04:7f:f6:27:bd:8a:5c:e7:4a:
                    07:50:8e:b1:12:87:b7:cc:8f:7f:70:03:80:0d:db:
                    3b:66:ce:a4:b7:f5:ac:37:95:ea:22:0e:1d:97:ef:
                    ec:c1:4d:53:99:ba:47:72:6e:81:78:c8:8c:a7:b8:
                    a3:fd:cc:46:2b:3d:0d:68:56:bc:b3:a6:97:1e:d4:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:37:6D:C2:19:11:31:D1:89:3D:39:3B:30:83:21:E7:32:C0:2D:E3
            X509v3 Authority Key Identifier:
                keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/836F847C340011EFA88BE541C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:04:55:91:6d:b7:1d:09:da:bc:8d:cb:6f:f9:8b:14:81:9c:
         a1:7d:99:7a:18:7b:b6:15:99:86:90:19:74:16:af:70:0d:65:
         c2:c1:de:ed:bc:2e:8f:a5:12:52:54:24:b4:90:ac:df:8a:88:
         24:4e:76:58:45:89:11:b5:73:96:9a:0b:9d:43:53:ca:a5:3c:
         48:50:80:38:33:3f:b1:10:7b:7d:64:91:64:70:47:c9:fa:0d:
         c9:60:47:4e:15:1c:59:ce:29:ae:5c:c3:33:b3:65:91:aa:29:
         2d:77:d5:46:76:b6:89:3c:79:25:65:99:66:1d:f9:a4:e0:54:
         57:07:7a:20:f2:c2:03:5f:5c:a5:73:c7:14:b2:53:83:8d:e0:
         d3:c4:e7:bf:64:b8:1f:7b:c3:38:c9:38:db:62:c4:4b:ba:c6:
         91:a8:67:ef:74:17:82:1d:f5:f4:64:ba:46:95:12:79:25:cc:
         31:7d:83:7b:5b:3a:7d:9a:ab:de:20:25:b7:c0:11:6a:97:5c:
         e9:fd:39:b3:7f:21:2d:3a:26:cb:96:a8:0d:61:1d:54:5a:44:
         61:c6:5c:d0:c0:fa:d2:7f:9c:87:9c:f4:84:70:c2:73:6c:13:
         ac:f0:9d:6a:c1:54:3f:04:7f:38:9e:97:09:96:a1:12:79:11:
         f5:14:ea:a7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM0RjAxMTAvBgNVBAUTKDEzNDZGNjVENjI5RkZGOTM2QjBGQzRDRjEyNzUwOUI2
ODJFOEUzRTQwHhcNMjUwNzE1MDYxMjQ4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YWIzYi0wZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkpPP/uzq6Tk3kixvLXvvZek3EFgqIHlnSXgUV/jzIBFyT0EZh/7t7t3B7rA4
oQQH9+hh7dLQ8YDoQq+m2QlK8a938ItCeEgO7F5+KW+bMYIe3PjRK3IBwZKSZk42
QEpSQa+2qa5xE/Y1kW4LYe5sibee6lAfvDoL1/YTzm75QTt5icDvdlrwIP/vk71M
FdOiA5DezeCeDCw+OgMrxohv/VG5r6OmboMkPdLXl6+8OyMeYOghU2+xoTwEf/Yn
vYpc50oHUI6xEoe3zI9/cAOADds7Zs6kt/WsN5XqIg4dl+/swU1TmbpHcm6BeMiM
p7ij/cxGKz0NaFa8s6aXHtQC+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIA3bcIZ
ETHRiT05OzCDIecywC3jMB8GA1UdIwQYMBaAFBNG9l1in/+Taw/EzxJ1CbaC6OPk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8wRDQ2Q0JFODM0
MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81TnJEOFRQRW5VSnRvTG80
LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0UwYjJYV0tmXzVOckQ4VFBFblVKdG9MbzQtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzM0RjAvMEQ0NkNCRTgzNDAwMTFFRjk0Nzc5NTQwQzRGOUFFMDIvODM2Rjg0N0Mz
NDAwMTFFRkE4OEJFNTQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBY0MA0GCSqGSIb3DQEBCwUAA4IBAQAnBFWRbbcdCdq8jctv+YsU
gZyhfZl6GHu2FZmGkBl0Fq9wDWXCwd7tvC6PpRJSVCS0kKzfiogkTnZYRYkRtXOW
mgudQ1PKpTxIUIA4Mz+xEHt9ZJFkcEfJ+g3JYEdOFRxZzimuXMMzs2WRqiktd9VG
draJPHklZZlmHfmk4FRXB3og8sIDX1ylc8cUslODjeDTxOe/ZLgfe8M4yTjbYsRL
usaRqGfvdBeCHfX0ZLpGlRJ5JcwxfYN7Wzp9mqveICW3wBFql1zp/TmzfyEtOibL
lqgNYR1UWkRhxlzQwPrSf5yHnPSEcMJzbBOs8J1qwVQ/BH84npcJlqESeRH1FOqn
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:51 2026 by rpki-client