Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa
File:                     0AE155E6833411ECBB74C786C4F9AE02.roa (raw, json)
Hash identifier:          r+7oz5JlM3EplII/E3OzQaa11I2nGxr/y1+o2I6Ijg8=
Subject key identifier:   85:19:6C:CB:D6:75:CF:75:E1:68:76:53:90:FC:65:7F:4C:5B:EC:48
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       0512
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa
Signing time:             Tue 03 Nov 2026 00:46:35 +0000
ROA not before:           Tue 03 Nov 2026 00:46:35 +0000
ROA not after:            Mon 01 Mar 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        149.234.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
                          rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298 (0x512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
        Validity
            Not Before: Nov  3 00:46:35 2026 GMT
            Not After : Mar  1 00:00:00 2027 GMT
        Subject: CN=6ae92eeb-c945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1d:55:14:3c:28:34:98:21:c4:f3:aa:ee:fb:
                    02:47:8b:e6:c3:e4:96:d4:b5:c7:15:85:50:ff:6f:
                    26:38:ee:9a:8e:e6:ca:f5:9b:01:8d:7a:19:30:ee:
                    23:21:64:e8:48:ea:6d:12:3c:ad:9e:aa:24:87:f0:
                    95:d8:15:66:f4:ee:52:f6:d9:52:db:92:37:60:fe:
                    fd:36:59:18:35:4f:8c:cb:96:87:ea:af:3a:6c:43:
                    2f:3f:4f:f1:80:37:c8:46:f4:1a:8c:20:f3:b4:f6:
                    cd:91:fe:8c:57:d6:dd:14:d0:d7:f7:0e:6a:24:73:
                    8e:0f:3e:1d:5d:ff:78:9d:9b:6b:9b:76:e2:6d:88:
                    17:af:5d:e4:57:49:93:a1:86:e2:ff:22:98:04:82:
                    aa:2b:81:00:2e:5e:92:4e:d4:4c:50:78:e6:59:67:
                    54:96:23:a8:14:46:b5:6a:15:02:cb:76:07:60:f1:
                    cb:2b:1b:a3:31:bd:39:41:11:8a:1a:6c:79:30:dc:
                    f8:cd:5b:c0:bd:c8:97:4d:1b:46:97:90:68:83:ac:
                    73:c5:8d:8d:a9:35:7f:b6:78:41:49:6c:08:67:65:
                    46:97:60:40:40:88:54:9c:b5:5b:4a:6b:a1:e8:ac:
                    61:5c:e9:49:c7:82:98:88:31:ce:c7:8e:23:ee:fc:
                    df:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:6C:CB:D6:75:CF:75:E1:68:76:53:90:FC:65:7F:4C:5B:EC:48
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/0AE155E6833411ECBB74C786C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:5f:f8:58:68:92:ff:e0:cf:08:27:0e:a4:68:60:8a:11:0a:
         a0:b6:0c:23:35:34:77:69:fb:75:43:d8:ef:1a:da:07:a7:17:
         db:44:81:0b:27:51:0e:05:f6:4b:02:24:4d:5c:88:e7:9d:ec:
         4e:98:8f:27:34:df:65:58:00:bc:03:66:dd:c1:cb:56:a6:63:
         08:68:64:ec:fe:5e:f1:57:d9:25:2c:9b:21:7d:d4:83:5a:7a:
         aa:31:f1:50:e4:eb:23:ae:cf:f7:91:61:b5:8e:10:35:2e:37:
         ba:14:b2:40:83:10:b4:bb:f0:66:35:f7:38:c6:bf:3c:53:d4:
         0f:4e:ac:07:b0:0e:c4:40:f0:3a:bd:cb:4f:b9:be:d9:8f:34:
         2f:f2:c8:1e:7c:df:51:bf:f1:da:60:da:ff:4b:57:44:99:89:
         c8:56:52:6f:51:5c:95:8a:0b:6d:85:6f:ac:7c:79:57:58:55:
         9e:c8:aa:81:a2:38:d8:88:bb:e4:4e:0a:11:bc:e5:d2:76:71:
         1f:f1:bc:ea:03:06:14:cc:78:eb:33:b9:13:be:b8:77:66:15:
         19:f0:8b:fa:74:00:4e:6c:44:a0:a7:88:6d:6b:35:4b:56:d4:
         52:2f:37:8c:5c:f9:d5:ce:b0:8c:e0:e3:f0:eb:a1:83:c6:0e:
         8b:43:9f:3b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw
MEFDQjc2MEMwHhcNMjYxMTAzMDA0NjM1WhcNMjcwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWU5MmVlYi1jOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8h1VFDwoNJghxPOq7vsCR4vmw+SW1LXHFYVQ/28mOO6ajubK9ZsBjXoZMO4j
IWToSOptEjytnqokh/CV2BVm9O5S9tlS25I3YP79NlkYNU+My5aH6q86bEMvP0/x
gDfIRvQajCDztPbNkf6MV9bdFNDX9w5qJHOODz4dXf94nZtrm3bibYgXr13kV0mT
oYbi/yKYBIKqK4EALl6STtRMUHjmWWdUliOoFEa1ahUCy3YHYPHLKxujMb05QRGK
Gmx5MNz4zVvAvciXTRtGl5Bog6xzxY2NqTV/tnhBSWwIZ2VGl2BAQIhUnLVbSmuh
6KxhXOlJx4KYiDHOx44j7vzfwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIUZbMvW
dc914Wh2U5D8ZX9MW+xIMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz
MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTk2QzQvRjNEREVFREU4MzMwMTFFQzhGRjM5MzgzQzRGOUFFMDIvMEFFMTU1RTY4
MzM0MTFFQ0JCNzRDNzg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAleq9MA0GCSqGSIb3DQEBCwUAA4IBAQCyX/hYaJL/4M8IJw6kaGCK
EQqgtgwjNTR3aft1Q9jvGtoHpxfbRIELJ1EOBfZLAiRNXIjnnexOmI8nNN9lWAC8
A2bdwctWpmMIaGTs/l7xV9klLJshfdSDWnqqMfFQ5Osjrs/3kWG1jhA1Lje6FLJA
gxC0u/BmNfc4xr88U9QPTqwHsA7EQPA6vctPub7ZjzQv8sgefN9Rv/HaYNr/S1dE
mYnIVlJvUVyVigtthW+sfHlXWFWeyKqBojjYiLvkTgoRvOXSdnEf8bzqAwYUzHjr
M7kTvrh3ZhUZ8Iv6dABObESgp4htazVLVtRSLzeMXPnVzrCM4OPw66GDxg6LQ587
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:12 2026 by rpki-client