Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa
File:                     DB208FD4175911EC87322F85C4F9AE02.roa (raw, json)
Hash identifier:          Aiyh5u8GDVLoN3Fgru0NzcB9kxObiOTjfl6VZSmSgGQ=
Subject key identifier:   B1:C0:FC:7C:C7:6D:DF:26:C8:32:14:48:73:6A:4A:B1:AD:51:42:D0
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       071A
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 23:44:14 +0000
ROA not before:           Wed 02 Sep 2026 23:44:14 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     56080
IP address blocks:        59.154.80.0/24 maxlen: 24
                          119.225.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818 (0x71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Sep  2 23:44:14 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98b4ce-762e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:ef:b2:95:73:08:de:c3:1e:ae:bc:99:90:
                    f9:3b:e7:d3:22:28:27:31:cc:58:12:bc:e7:f1:49:
                    2b:ac:83:6c:ef:7b:c3:c2:c7:47:d7:d6:94:03:b7:
                    90:98:74:36:a4:25:d1:86:cd:13:03:d2:76:1d:50:
                    f9:1b:57:bf:70:a9:d3:3b:76:16:63:0e:ab:59:49:
                    fd:33:ad:ca:67:36:5c:53:ca:23:99:75:ad:b8:8e:
                    4d:47:23:f7:b9:86:78:8c:34:4c:04:e8:97:27:2a:
                    b0:c2:7f:fd:8b:57:04:6b:18:16:53:3c:19:90:65:
                    8b:b1:cd:7d:e1:23:66:1e:00:2d:c2:83:a7:55:9d:
                    62:78:ee:07:f4:12:2b:02:e9:1b:1f:bd:df:e9:96:
                    a9:ea:0e:6d:3c:5c:a8:bd:c9:25:cc:e6:e9:8f:63:
                    cb:ea:78:11:2a:ec:3e:d6:29:e9:22:77:f0:75:a6:
                    9d:e6:64:7b:55:31:f5:15:91:8b:0f:86:25:44:db:
                    8c:22:d3:30:7f:9b:1a:96:d9:5f:53:a1:15:c4:b0:
                    a4:08:70:e3:30:a5:fc:63:c5:e2:92:d2:bd:d3:83:
                    07:4d:60:29:b4:2f:81:fb:40:38:2a:d3:5a:18:51:
                    1c:5c:4a:7a:25:36:2e:b5:58:9d:3f:34:9d:50:16:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C0:FC:7C:C7:6D:DF:26:C8:32:14:48:73:6A:4A:B1:AD:51:42:D0
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.154.80.0/24
                  119.225.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:22:d4:ab:5a:5c:46:93:30:03:63:28:a6:e4:9a:be:aa:34:
         91:75:29:2c:32:c5:8d:5a:df:39:c2:2d:6e:51:0b:88:33:8d:
         e6:ba:e2:d2:b7:cb:5b:6f:46:4d:6a:08:bb:f1:65:59:56:92:
         15:18:35:76:46:5c:2f:ac:fd:b9:e6:f9:3d:d7:95:c8:58:c0:
         72:dd:85:9c:12:ae:56:f5:d7:de:02:83:c6:bf:38:3d:a5:fc:
         3e:94:34:c0:39:06:41:4f:2f:98:8c:91:7c:3a:64:c5:bd:58:
         12:e2:f8:ed:34:15:97:c9:6e:47:5e:a7:85:2e:8d:40:f9:fc:
         8c:21:ca:46:f8:a6:2e:dc:b4:79:a2:a7:a2:d4:3e:10:fb:d7:
         db:81:77:34:17:ff:c3:5a:ca:a1:e4:93:20:17:4a:2a:3a:ec:
         f1:86:92:e6:a9:dd:33:c0:00:b6:0c:1b:5a:7b:76:83:14:a0:
         20:1c:90:77:69:be:4d:5a:e8:1a:86:52:f1:73:a9:a8:77:c7:
         49:ca:0e:8c:71:9e:f3:f9:ae:fd:0e:64:f7:ea:c2:c9:d6:4f:
         90:63:88:cb:c2:35:19:b7:53:1d:b6:b6:f0:86:c4:bd:fa:ed:
         c2:e7:c3:98:9f:01:b5:9e:fd:de:f6:40:75:dc:b9:ef:08:86:
         a9:94:56:38
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjYwOTAyMjM0NDE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4YjRjZS03NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfvvspVzCN7DHq68mZD5O+fTIignMcxYErzn8UkrrINs73vDwsdH19aUA7eQ
mHQ2pCXRhs0TA9J2HVD5G1e/cKnTO3YWYw6rWUn9M63KZzZcU8ojmXWtuI5NRyP3
uYZ4jDRMBOiXJyqwwn/9i1cEaxgWUzwZkGWLsc194SNmHgAtwoOnVZ1ieO4H9BIr
AukbH73f6Zap6g5tPFyovcklzObpj2PL6ngRKuw+1inpInfwdaad5mR7VTH1FZGL
D4YlRNuMItMwf5saltlfU6EVxLCkCHDjMKX8Y8XiktK904MHTWAptC+B+0A4KtNa
GFEcXEp6JTYutVidPzSdUBZ24QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLHA/HzH
bd8myDIUSHNqSrGtUULQMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvREIyMDhGRDQx
NzU5MTFFQzg3MzIyRjg1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAO5pQAwQAd+HZMA0GCSqGSIb3DQEBCwUAA4IBAQCRItSrWlxGkzAD
Yyim5Jq+qjSRdSksMsWNWt85wi1uUQuIM43muuLSt8tbb0ZNagi78WVZVpIVGDV2
RlwvrP255vk915XIWMBy3YWcEq5W9dfeAoPGvzg9pfw+lDTAOQZBTy+YjJF8OmTF
vVgS4vjtNBWXyW5HXqeFLo1A+fyMIcpG+KYu3LR5oqei1D4Q+9fbgXc0F//DWsqh
5JMgF0oqOuzxhpLmqd0zwAC2DBtae3aDFKAgHJB3ab5NWugahlLxc6mod8dJyg6M
cZ7z+a79DmT36sLJ1k+QY4jLwjUZt1MdtrbwhsS9+u3C58OYnwG1nv3e9kB13Lnv
CIaplFY4
-----END CERTIFICATE-----
Generated at Tue Sep 15 08:51:41 2026 by rpki-client