Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/1D1E595CBDF611EFA2777E34C4F9AE02.roa
File:                     1D1E595CBDF611EFA2777E34C4F9AE02.roa (raw, json)
Hash identifier:          pm0HIas0kLFr+Y6oa+ZTieTnR3sWAFIROaOj11LQo5o=
Subject key identifier:   73:C3:98:CA:9D:78:61:E1:90:38:05:2B:E4:9F:27:F0:0E:10:F5:75
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       3829
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/1D1E595CBDF611EFA2777E34C4F9AE02.roa
Signing time:             Thu 08 Oct 2026 15:15:15 +0000
ROA not before:           Thu 08 Oct 2026 15:15:15 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        175.29.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 14:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14377 (0x3829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 15:15:15 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac7b383-d1b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:6d:37:ce:16:c9:89:1a:aa:78:95:74:41:
                    1e:35:0f:06:c2:7a:01:d4:88:5f:26:8a:03:37:bb:
                    91:9c:20:28:9d:34:20:f9:69:b3:c9:43:05:10:95:
                    80:a3:e4:3f:32:ac:94:a0:c8:4b:f8:97:48:1a:d5:
                    58:6d:79:f0:a4:0c:71:f9:fa:ea:e6:bc:27:61:91:
                    95:5b:41:75:f2:2a:ee:65:d4:66:bf:16:ef:91:d3:
                    d0:20:b5:a4:2d:80:a1:8b:7e:06:87:fe:96:da:82:
                    8d:ce:b6:05:13:46:7c:bd:ea:24:ae:6e:61:d8:3c:
                    3e:59:14:7e:02:2e:1c:53:3a:dc:e0:28:2d:da:e1:
                    ef:ac:bf:5f:50:8a:54:36:50:2c:72:7a:ef:3f:2a:
                    53:2a:8d:94:88:e5:d8:fd:2d:e4:c3:32:58:0c:b9:
                    65:db:3b:90:ee:3a:9c:d7:45:95:f7:b9:aa:86:a9:
                    55:39:29:2b:62:3e:33:31:ac:6d:b5:96:2a:c7:9b:
                    b5:d7:3a:83:d9:91:01:4c:1c:d6:1b:96:4c:9e:29:
                    73:ed:00:c4:d1:20:98:fe:e0:d2:21:7a:15:19:89:
                    9e:f8:cd:39:f3:68:8d:14:09:7d:24:0f:04:03:53:
                    b2:b0:73:31:6d:18:50:7d:c8:5f:c3:21:d0:68:58:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C3:98:CA:9D:78:61:E1:90:38:05:2B:E4:9F:27:F0:0E:10:F5:75
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/1D1E595CBDF611EFA2777E34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:0c:37:93:dd:ce:c1:68:73:6c:f8:bf:97:34:16:81:56:
         f3:24:10:10:e7:eb:ef:fb:c6:04:b7:53:0e:3a:10:fa:00:d8:
         4f:c8:04:64:82:63:fc:c0:d2:8d:71:0b:34:a5:22:e7:01:9e:
         f4:16:5c:14:f7:ba:3d:07:79:62:4e:ff:fe:61:02:10:16:9b:
         2f:41:8c:8d:8d:51:a5:9d:e0:04:5d:36:3c:e2:36:e1:e2:07:
         d8:d1:d5:ea:4c:e0:c6:29:ac:04:35:35:d2:eb:9e:1b:e0:38:
         f4:bb:f3:78:67:3e:6e:28:1f:4a:39:ca:c7:0a:45:9d:2b:98:
         15:47:a5:5b:bf:7a:00:af:8c:6a:bc:0d:4b:0d:d9:42:8c:76:
         45:05:62:86:c3:a6:b3:57:8f:a7:5d:3a:09:0f:c1:30:d5:ea:
         7a:da:d7:7e:f5:c1:96:b8:6a:1f:e1:33:2d:f8:33:b3:97:f6:
         fa:05:2c:a0:ed:fe:88:25:ce:c6:49:0a:79:b9:9a:bd:3c:b0:
         a3:cb:d3:d8:0e:d0:7c:ce:cb:de:cb:11:2f:78:76:4b:3e:1b:
         c6:10:0c:9d:bb:ab:bd:5d:1c:fc:de:0e:ab:bd:f9:49:71:65:
         14:1d:6a:90:b6:0c:a1:7f:dd:fb:19:b7:2d:9d:61:16:e5:61:
         2e:8a:bd:ed
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE
RUIwOTIyNTcwHhcNMjYxMDA4MTUxNTE1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM3YjM4My1kMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqBtN84WyYkaqniVdEEeNQ8GwnoB1IhfJooDN7uRnCAonTQg+WmzyUMFEJWA
o+Q/MqyUoMhL+JdIGtVYbXnwpAxx+frq5rwnYZGVW0F18iruZdRmvxbvkdPQILWk
LYChi34Gh/6W2oKNzrYFE0Z8veokrm5h2Dw+WRR+Ai4cUzrc4Cgt2uHvrL9fUIpU
NlAscnrvPypTKo2UiOXY/S3kwzJYDLll2zuQ7jqc10WV97mqhqlVOSkrYj4zMaxt
tZYqx5u11zqD2ZEBTBzWG5ZMnilz7QDE0SCY/uDSIXoVGYme+M0582iNFAl9JA8E
A1OysHMxbRhQfchfwyHQaFiWHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHPDmMqd
eGHhkDgFK+SfJ/AOEPV1MB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE
ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvMUQxRTU5NUNC
REY2MTFFRkEyNzc3RTM0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDrx0IMA0GCSqGSIb3DQEBCwUAA4IBAQCPxww3k93OwWhzbPi/lzQW
gVbzJBAQ5+vv+8YEt1MOOhD6ANhPyARkgmP8wNKNcQs0pSLnAZ70FlwU97o9B3li
Tv/+YQIQFpsvQYyNjVGlneAEXTY84jbh4gfY0dXqTODGKawENTXS654b4Dj0u/N4
Zz5uKB9KOcrHCkWdK5gVR6Vbv3oAr4xqvA1LDdlCjHZFBWKGw6azV4+nXToJD8Ew
1ep62td+9cGWuGof4TMt+DOzl/b6BSyg7f6IJc7GSQp5uZq9PLCjy9PYDtB8zsve
yxEveHZLPhvGEAydu6u9XRz83g6rvflJcWUUHWqQtgyhf937GbctnWEW5WEuir3t
-----END CERTIFICATE-----
Generated at Wed Oct 21 03:56:07 2026 by rpki-client