Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/826FCEE8D9B611F1B016681B2566CEF9.roa
File:                     826FCEE8D9B611F1B016681B2566CEF9.roa (raw, json)
Hash identifier:          nhw8JISVdM0a+XQA9zVwDNVv6XLekFjSPlH17p8yeXM=
Subject key identifier:   B8:A6:16:42:4B:67:7D:27:BD:CD:81:14:30:80:2D:0A:6A:F0:2B:D9
Certificate issuer:       /CN=A9183A53/serialNumber=E1A337F07CA05B4B162104A48BD58532EB54DFDA
Certificate serial:       06
Authority key identifier: E1:A3:37:F0:7C:A0:5B:4B:16:21:04:A4:8B:D5:85:32:EB:54:DF:DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4aM38HygW0sWIQSki9WFMutU39o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/826FCEE8D9B611F1B016681B2566CEF9.roa
Signing time:             Fri 06 Nov 2026 07:48:52 +0000
ROA not before:           Fri 06 Nov 2026 07:48:52 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139922
IP address blocks:        204.115.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.crl
                          rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4aM38HygW0sWIQSki9WFMutU39o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 18:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A53, serialNumber=E1A337F07CA05B4B162104A48BD58532EB54DFDA
        Validity
            Not Before: Nov  6 07:48:52 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aed8664-b59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:e5:96:2d:b3:cc:66:48:bf:97:28:5e:de:
                    0d:e9:05:ce:d8:82:08:d1:85:06:ea:4d:3b:06:76:
                    47:e9:ac:02:1b:80:fc:ed:7d:97:21:b5:9b:54:49:
                    c5:17:2c:31:3a:bd:49:2d:f9:00:d0:62:4d:99:42:
                    0d:52:09:be:ef:43:70:86:72:f7:a0:c5:1d:4e:21:
                    5e:c5:2f:45:c1:b6:ea:eb:f1:2e:ee:4b:a3:7a:cf:
                    b9:60:64:8b:28:ea:a6:de:8a:89:26:b1:78:c4:30:
                    6a:1d:45:c4:ae:e3:93:a8:ab:9f:3b:46:b6:81:77:
                    be:09:5b:3d:14:45:a3:75:71:c0:0e:b1:df:8e:a6:
                    6a:31:fd:ef:d8:e0:2e:a3:38:d0:f7:c0:f7:00:a9:
                    e3:37:20:92:31:4c:df:08:a8:9f:2b:be:ff:d7:b9:
                    4a:58:0e:69:95:5c:27:13:8d:ab:c3:fc:f2:f2:26:
                    f8:8c:c4:47:a3:47:51:7a:23:8b:ab:78:82:e4:e8:
                    b9:11:fb:6d:64:6e:dd:7d:94:b9:ab:39:25:a6:f1:
                    47:2c:5e:52:9f:32:b2:89:76:94:aa:35:fe:9d:c6:
                    b8:38:63:62:88:b2:0b:b0:ee:95:29:a9:7f:be:ab:
                    34:eb:77:b7:51:87:13:ab:fb:cb:09:bf:4e:71:f9:
                    b1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:16:42:4B:67:7D:27:BD:CD:81:14:30:80:2D:0A:6A:F0:2B:D9
            X509v3 Authority Key Identifier:
                keyid:E1:A3:37:F0:7C:A0:5B:4B:16:21:04:A4:8B:D5:85:32:EB:54:DF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/4aM38HygW0sWIQSki9WFMutU39o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4aM38HygW0sWIQSki9WFMutU39o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A53/F2D9716AD8A411F191B1CBD297EE528E/826FCEE8D9B611F1B016681B2566CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.115.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:92:43:c1:9a:11:89:56:c3:86:7b:d7:97:f1:c3:26:06:
         9d:9c:c9:9f:ff:2d:a6:88:36:3a:25:37:06:b3:ec:93:2b:2f:
         d8:49:d9:b8:05:31:dd:73:c9:6d:60:0e:42:d5:00:23:7d:0d:
         87:7b:2a:f8:76:6e:ad:08:9c:ee:2b:38:48:19:c7:ff:6e:0d:
         cb:75:84:65:d5:ce:21:ad:a6:6f:0a:c3:97:60:3a:3d:b3:bb:
         86:4c:05:cc:47:7f:9c:d0:a4:8d:3b:bc:c4:b5:89:9a:25:fc:
         4f:4b:02:5c:5a:5b:f8:5b:8e:d9:35:3c:f6:51:c7:a3:bc:1c:
         43:ae:ef:b2:e0:59:78:c7:85:a5:3c:e1:d1:aa:06:d1:22:21:
         7f:bf:82:4f:7c:3b:08:db:22:50:75:60:9e:a5:1e:7d:16:c3:
         4d:70:cf:11:02:86:0f:ed:70:b5:ef:47:d2:f4:e3:87:da:bb:
         d7:ad:36:16:20:ab:7d:95:3c:8e:1a:89:df:31:8c:5e:27:bd:
         dd:73:e1:8f:f4:bf:14:8f:d6:ad:5f:64:89:9e:be:65:69:90:
         a8:ed:f4:b5:74:6d:b1:fe:29:01:b7:bd:1b:4b:30:84:32:a2:
         01:63:8a:92:1a:87:70:43:2d:1d:33:43:a3:69:fe:1b:37:c3:
         22:d2:28:76
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
M0E1MzExMC8GA1UEBRMoRTFBMzM3RjA3Q0EwNUI0QjE2MjEwNEE0OEJENTg1MzJF
QjU0REZEQTAeFw0yNjExMDYwNzQ4NTJaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZWQ4NjY0LWI1OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCkOWWLbPMZki/lyhe3g3pBc7YggjRhQbqTTsGdkfprAIbgPztfZchtZtUScUX
LDE6vUkt+QDQYk2ZQg1SCb7vQ3CGcvegxR1OIV7FL0XBturr8S7uS6N6z7lgZIso
6qbeiokmsXjEMGodRcSu45Ooq587RraBd74JWz0URaN1ccAOsd+Opmox/e/Y4C6j
OND3wPcAqeM3IJIxTN8IqJ8rvv/XuUpYDmmVXCcTjavD/PLyJviMxEejR1F6I4ur
eILk6LkR+21kbt19lLmrOSWm8UcsXlKfMrKJdpSqNf6dxrg4Y2KIsguw7pUpqX++
qzTrd7dRhxOr+8sJv05x+bEJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUuKYWQktn
fSe9zYEUMIAtCmrwK9kwHwYDVR0jBBgwFoAU4aM38HygW0sWIQSki9WFMutU39ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzQTUzL0YyRDk3MTZBRDhB
NDExRjE5MUIxQ0JEMjk3RUU1MjhFLzRhTTM4SHlnVzBzV0lRU2tpOVdGTXV0VTM5
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNGFNMzhIeWdXMHNXSVFTa2k5V0ZNdXRVMzlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0E1My9GMkQ5NzE2QUQ4QTQxMUYxOTFCMUNCRDI5N0VFNTI4RS84MjZGQ0VFOEQ5
QjYxMUYxQjAxNjY4MUIyNTY2Q0VGOS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALMc/gwDQYJKoZIhvcNAQELBQADggEBAEsGkkPBmhGJVsOGe9eX8cMm
Bp2cyZ//LaaINjolNwaz7JMrL9hJ2bgFMd1zyW1gDkLVACN9DYd7Kvh2bq0InO4r
OEgZx/9uDct1hGXVziGtpm8Kw5dgOj2zu4ZMBcxHf5zQpI07vMS1iZol/E9LAlxa
W/hbjtk1PPZRx6O8HEOu77LgWXjHhaU84dGqBtEiIX+/gk98OwjbIlB1YJ6lHn0W
w01wzxEChg/tcLXvR9L044fau9etNhYgq32VPI4aid8xjF4nvd1z4Y/0vxSP1q1f
ZImevmVpkKjt9LV0bbH+KQG3vRtLMIQyogFjipIah3BDLR0zQ6Np/hs3wyLSKHY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:13:42 2026 by rpki-client