Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/6DB991F222A311F195E5C95EB3833773.roa
File:                     6DB991F222A311F195E5C95EB3833773.roa (raw, json)
Hash identifier:          TsyRSdpcyqdq/9uv13YmYRvIQSMzrZWYt0RWLEVXB0g=
Subject key identifier:   1E:7B:42:8D:E2:65:22:81:2F:BF:A5:00:B3:34:03:07:69:8E:E6:31
Certificate issuer:       /CN=A9187BAC/serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
Certificate serial:       F5
Authority key identifier: 7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/6DB991F222A311F195E5C95EB3833773.roa
Signing time:             Wed 18 Mar 2026 08:21:14 +0000
ROA not before:           Wed 18 Mar 2026 08:21:14 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     51031
IP address blocks:        161.248.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 05:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=7B62620BFEB38CEB64D210C9805DC2480415707D
        Validity
            Not Before: Mar 18 08:21:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ba607a-4709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1b:48:6d:a5:01:3a:73:40:e3:8c:e1:c9:5a:
                    a1:50:27:2c:04:86:dd:78:ec:5d:8b:c2:35:65:3f:
                    7c:82:76:57:a5:f4:18:3d:85:ac:fe:a1:fb:7f:ff:
                    c4:3c:fd:82:99:78:b6:39:f6:d7:5a:b2:de:18:65:
                    75:a6:b0:8b:76:9e:a0:e2:35:bf:5b:13:50:ec:88:
                    10:05:5d:59:3f:fc:92:b6:fe:9f:a1:6d:49:40:4c:
                    24:04:65:87:4d:f7:63:95:57:09:9e:85:ff:5b:37:
                    8b:2e:98:36:d6:aa:76:53:95:b5:5a:ba:75:33:b2:
                    f2:51:71:73:c5:ea:64:9e:30:83:ed:dc:78:83:46:
                    58:a3:6f:01:77:8d:17:80:72:74:a2:0e:53:97:9d:
                    8f:00:48:3d:8a:ea:e7:13:10:05:0e:e7:bc:3b:da:
                    7e:32:68:99:c3:42:ae:a9:3c:d7:86:12:fb:56:cf:
                    31:b3:9b:e8:b0:4b:44:26:6f:94:f1:51:83:6f:8e:
                    7e:40:74:94:90:5e:cb:23:2c:40:d8:5a:06:e9:ea:
                    de:0d:c4:11:87:a8:3e:5a:70:bd:42:ab:78:ff:ae:
                    ac:38:58:a6:d1:f4:e2:32:a7:df:af:c4:06:fa:06:
                    75:67:02:bc:de:25:d4:38:1a:40:ad:1f:10:e1:d5:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7B:42:8D:E2:65:22:81:2F:BF:A5:00:B3:34:03:07:69:8E:E6:31
            X509v3 Authority Key Identifier:
                keyid:7B:62:62:0B:FE:B3:8C:EB:64:D2:10:C9:80:5D:C2:48:04:15:70:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/e2JiC_6zjOtk0hDJgF3CSAQVcH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e2JiC_6zjOtk0hDJgF3CSAQVcH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/BE318FB0D02C11EFB5584915C4F9AE02/6DB991F222A311F195E5C95EB3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:86:01:90:d6:70:26:19:5c:83:db:8e:0f:ac:0b:d2:df:94:
         e2:05:56:f0:54:a1:dd:2f:a8:fc:f7:5a:f5:16:e1:b2:6f:60:
         16:10:ab:26:0c:40:5f:c9:fe:7c:a3:0f:57:99:1a:b3:42:1b:
         56:e5:40:bf:e1:73:e0:d7:3d:19:7d:04:c7:a8:d8:41:2d:55:
         08:7f:c1:f9:7d:ca:a9:1e:ed:80:6e:f4:60:2e:5a:34:8c:7c:
         63:ec:f0:74:21:30:c1:20:f6:8f:ab:c3:db:bd:b2:23:a5:8c:
         4e:35:61:9b:59:72:a9:2c:68:c4:77:61:bd:52:b4:9a:12:62:
         2d:92:b6:61:10:b8:f0:47:85:f2:c4:a9:66:82:dc:39:5d:ed:
         cf:88:fd:ff:f3:f6:23:99:a2:8e:77:86:6a:1b:d9:f4:4c:75:
         b2:3a:81:59:49:d6:66:84:b4:af:e6:ef:3b:76:cf:8d:9c:2b:
         de:f9:94:80:2c:f9:00:af:c3:6f:78:63:94:58:b2:e2:e0:61:
         f5:f3:d6:29:d6:77:2b:c7:84:29:81:ca:67:83:d9:ac:e6:6f:
         40:65:b0:58:ab:4a:c2:ed:5b:52:29:50:42:0d:b4:1d:80:cc:
         d8:6c:7c:95:36:93:09:14:32:a6:9f:69:3d:46:45:7d:69:0a:
         e6:96:b8:22
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdCQUMxMTAvBgNVBAUTKDdCNjI2MjBCRkVCMzhDRUI2NEQyMTBDOTgwNURDMjQ4
MDQxNTcwN0QwHhcNMjYwMzE4MDgyMTE0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJhNjA3YS00NzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6BtIbaUBOnNA44zhyVqhUCcsBIbdeOxdi8I1ZT98gnZXpfQYPYWs/qH7f//E
PP2CmXi2OfbXWrLeGGV1prCLdp6g4jW/WxNQ7IgQBV1ZP/yStv6foW1JQEwkBGWH
TfdjlVcJnoX/WzeLLpg21qp2U5W1Wrp1M7LyUXFzxepknjCD7dx4g0ZYo28Bd40X
gHJ0og5Tl52PAEg9iurnExAFDue8O9p+MmiZw0KuqTzXhhL7Vs8xs5vosEtEJm+U
8VGDb45+QHSUkF7LIyxA2FoG6ereDcQRh6g+WnC9Qqt4/66sOFim0fTiMqffr8QG
+gZ1ZwK83iXUOBpArR8Q4dXhvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB57Qo3i
ZSKBL7+lALM0AwdpjuYxMB8GA1UdIwQYMBaAFHtiYgv+s4zrZNIQyYBdwkgEFXB9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0JBQy9CRTMxOEZCMEQw
MkMxMUVGQjU1ODQ5MTVDNEY5QUUwMi9lMkppQ182empPdGswaERKZ0YzQ1NBUVZj
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2UySmlDXzZ6ak90azBoREpnRjNDU0FRVmNIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODdCQUMvQkUzMThGQjBEMDJDMTFFRkI1NTg0OTE1QzRGOUFFMDIvNkRCOTkxRjIy
MkEzMTFGMTk1RTVDOTVFQjM4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofiIMA0GCSqGSIb3DQEBCwUAA4IBAQAAhgGQ1nAmGVyD244PrAvS
35TiBVbwVKHdL6j891r1FuGyb2AWEKsmDEBfyf58ow9XmRqzQhtW5UC/4XPg1z0Z
fQTHqNhBLVUIf8H5fcqpHu2AbvRgLlo0jHxj7PB0ITDBIPaPq8PbvbIjpYxONWGb
WXKpLGjEd2G9UrSaEmItkrZhELjwR4XyxKlmgtw5Xe3PiP3/8/YjmaKOd4ZqG9n0
THWyOoFZSdZmhLSv5u87ds+NnCve+ZSALPkAr8NveGOUWLLi4GH189Yp1ncrx4Qp
gcpng9ms5m9AZbBYq0rC7VtSKVBCDbQdgMzYbHyVNpMJFDKmn2k9RkV9aQrmlrgi
-----END CERTIFICATE-----
Generated at Thu Mar 19 18:49:27 2026 by rpki-client