Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/8FB3AD6AE58611F0A2F174BA446F56BC.roa
File:                     8FB3AD6AE58611F0A2F174BA446F56BC.roa (raw, json)
Hash identifier:          mrpPeuLD0vFw0dksE5gmAM6iQ88YCMuwoz85Ci3dh3M=
Subject key identifier:   40:0C:1F:F5:71:20:96:68:DA:53:74:CE:93:FB:59:F3:8A:3F:EC:C3
Certificate issuer:       /CN=A91988EB/serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Certificate serial:       A2
Authority key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/8FB3AD6AE58611F0A2F174BA446F56BC.roa
Signing time:             Tue 13 Oct 2026 09:16:45 +0000
ROA not before:           Tue 13 Oct 2026 09:16:45 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137430
IP address blocks:        144.79.152.0/24 maxlen: 24
                          144.79.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl
                          rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 08:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
        Validity
            Not Before: Oct 13 09:16:45 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6acdf6fc-9dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:76:b6:b8:33:94:bb:e3:1a:6d:69:2d:5e:
                    5f:fe:78:e3:c0:e3:cc:a9:37:24:5f:c1:d4:e1:c4:
                    1b:bf:a1:8a:76:9a:48:b2:55:e9:b0:80:d5:1f:ec:
                    e9:43:46:6c:42:55:5c:ac:21:c1:d3:a8:b3:2c:14:
                    63:db:3f:4d:ed:22:f8:da:72:ec:3b:74:ab:2f:ca:
                    be:c3:a1:01:7a:b9:e6:07:6c:f4:8e:e7:c6:e0:37:
                    1f:81:0c:f8:e7:ec:c8:69:5a:0f:9b:b7:30:80:bd:
                    b5:76:31:95:9c:56:0a:5f:25:f7:e4:5d:43:27:96:
                    6d:80:ca:6b:48:10:0e:ef:52:32:2e:c8:23:a9:f2:
                    7f:7c:dd:27:7f:d2:41:33:34:b7:cf:5b:5c:9e:49:
                    7f:e6:ab:82:b1:e7:04:64:7d:ee:00:c6:c5:73:73:
                    bf:be:71:32:3c:0e:2c:92:a9:63:b5:9c:7c:4b:1d:
                    cd:cf:8b:84:9d:20:3e:e7:7c:d6:0c:88:16:f7:08:
                    7f:e4:b6:72:a6:94:ef:90:c7:07:48:74:9b:80:37:
                    e0:f3:50:d9:1d:b5:a7:e5:cb:6f:be:8a:1d:51:b1:
                    84:14:c0:b3:9f:f9:00:05:d4:ed:73:4e:dd:c8:17:
                    90:ae:ce:e6:cb:9a:5f:54:5f:ab:bc:28:92:a3:fc:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0C:1F:F5:71:20:96:68:DA:53:74:CE:93:FB:59:F3:8A:3F:EC:C3
            X509v3 Authority Key Identifier:
                keyid:EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/8FB3AD6AE58611F0A2F174BA446F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:61:b4:57:99:7b:eb:1a:ca:70:f2:3b:20:73:7f:8f:ee:2f:
         83:c1:fb:21:0a:4f:f7:7e:3b:f8:1b:57:5b:d5:b7:ed:67:c1:
         dc:7c:18:ce:02:2f:dd:a0:c1:36:ee:6b:52:4c:c6:18:20:8e:
         8f:e3:b3:c1:69:1f:ec:78:68:d6:72:c1:f2:51:5f:85:67:8e:
         82:d8:de:c1:14:4c:5e:d1:c7:50:86:74:e0:25:ae:69:40:bb:
         4e:fa:51:d5:6e:86:db:e5:61:6d:d3:b1:8f:b1:9b:16:d3:94:
         6d:bf:37:2b:f0:33:0a:40:7a:43:35:5f:70:4e:17:75:81:89:
         05:17:81:60:b3:4e:33:2e:0b:98:e2:de:2a:d2:36:05:a7:df:
         83:27:5c:58:19:8a:e8:96:2c:65:b4:6d:17:cc:d0:62:de:eb:
         b0:58:c5:c5:13:31:06:58:e6:ea:81:cf:d1:a2:cb:0f:e5:bd:
         76:06:45:b3:9e:f6:e5:73:64:36:da:ea:ee:79:0a:6e:90:d0:
         80:af:89:c4:94:cf:75:0d:ef:b8:d9:68:49:07:6a:bd:0f:99:
         33:e8:99:7f:93:d2:76:5b:30:3c:aa:52:50:80:39:49:07:4c:
         b4:87:3d:e9:be:41:d8:f4:5d:4e:fb:c3:f6:2f:55:32:33:b2:
         25:54:2c:87
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg4RUIxMTAvBgNVBAUTKEVDM0MwQTZBQjkxQ0UxMzMxNkQyODQzMzBDMzgyOEJF
RkUyQTM0MTMwHhcNMjYxMDEzMDkxNjQ1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNkZjZmYy05ZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3l2trgzlLvjGm1pLV5f/njjwOPMqTckX8HU4cQbv6GKdppIslXpsIDVH+zp
Q0ZsQlVcrCHB06izLBRj2z9N7SL42nLsO3SrL8q+w6EBernmB2z0jufG4DcfgQz4
5+zIaVoPm7cwgL21djGVnFYKXyX35F1DJ5ZtgMprSBAO71IyLsgjqfJ/fN0nf9JB
MzS3z1tcnkl/5quCsecEZH3uAMbFc3O/vnEyPA4skqljtZx8Sx3Nz4uEnSA+53zW
DIgW9wh/5LZyppTvkMcHSHSbgDfg81DZHbWn5ctvvoodUbGEFMCzn/kABdTtc07d
yBeQrs7my5pfVF+rvCiSo/wFYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEAMH/Vx
IJZo2lN0zpP7WfOKP+zDMB8GA1UdIwQYMBaAFOw8Cmq5HOEzFtKEMww4KL7+KjQT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODhFQi9GODRFQjlGQ0U0
OEExMUYwODNEMTFFNkI0NDZGNTZCQy83RHdLYXJrYzRUTVcwb1F6RERnb3Z2NHFO
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdEd0thcmtjNFRNVzBvUXpERGdvdnY0cU5CTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg4RUIvRjg0RUI5RkNFNDhBMTFGMDgzRDExRTZCNDQ2RjU2QkMvOEZCM0FENkFF
NTg2MTFGMEEyRjE3NEJBNDQ2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBkE+YMA0GCSqGSIb3DQEBCwUAA4IBAQBGYbRXmXvrGspw8jsgc3+P
7i+DwfshCk/3fjv4G1db1bftZ8HcfBjOAi/doME27mtSTMYYII6P47PBaR/seGjW
csHyUV+FZ46C2N7BFExe0cdQhnTgJa5pQLtO+lHVbobb5WFt07GPsZsW05Rtvzcr
8DMKQHpDNV9wThd1gYkFF4Fgs04zLguY4t4q0jYFp9+DJ1xYGYrolixltG0XzNBi
3uuwWMXFEzEGWObqgc/RossP5b12BkWznvblc2Q22urueQpukNCAr4nElM91De+4
2WhJB2q9D5kz6Jl/k9J2WzA8qlJQgDlJB0y0hz3pvkHY9F1O+8P2L1UyM7IlVCyH
-----END CERTIFICATE-----
Generated at Mon Oct 19 08:00:44 2026 by rpki-client