Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6E1C49FA031811F1BA97C916183D8C67.roa
File:                     6E1C49FA031811F1BA97C916183D8C67.roa (raw, json)
Hash identifier:          Ih1eHSX5Tc/5vdlyW9LDswTRplGY8S174GyJpWgveNI=
Subject key identifier:   D1:E7:06:59:F6:A4:BA:19:9B:23:F7:B1:E5:CD:8D:D3:B3:2B:F0:ED
Certificate issuer:       /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial:       0294
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6E1C49FA031811F1BA97C916183D8C67.roa
Signing time:             Mon 10 Aug 2026 14:28:44 +0000
ROA not before:           Mon 10 Aug 2026 14:28:44 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        185.254.241.0/24 maxlen: 24
                          185.254.242.0/24 maxlen: 24
                          185.254.243.0/24 maxlen: 24
                          213.139.232.0/24 maxlen: 24
                          213.139.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Aug 2026 01:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
        Validity
            Not Before: Aug 10 14:28:44 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a79e01c-70cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:56:ab:45:ee:87:37:3a:86:c3:e5:46:e2:
                    aa:87:00:fc:f7:e9:dd:b5:59:48:d6:f0:4d:65:69:
                    bb:18:52:15:44:0f:9d:ba:e6:03:77:d7:12:cd:5e:
                    a5:25:85:00:dc:da:69:97:f7:46:0e:85:db:c1:e6:
                    c6:3a:63:14:94:4b:53:34:0f:87:35:e4:6a:cf:20:
                    a0:79:5f:e3:76:ad:6c:e5:3c:e6:bd:cc:92:5d:fc:
                    4d:83:0f:bc:0e:9d:0f:8c:49:18:40:bf:59:5b:95:
                    76:18:d0:07:6a:ec:8a:ba:ad:4a:38:66:6a:af:1c:
                    57:ca:bb:2c:72:84:06:b0:ab:1c:b1:fc:f0:f4:3a:
                    a1:d6:9a:7f:da:39:9b:ec:c5:38:f6:be:aa:8a:fe:
                    49:5b:36:36:d5:0a:7e:ae:29:09:c6:e0:95:eb:c4:
                    f3:cc:88:d7:48:29:af:25:2a:ee:18:5b:23:a4:46:
                    aa:78:21:03:c3:d1:a1:62:05:63:f8:fc:93:de:34:
                    c2:d9:55:c9:ca:c2:73:af:3a:fa:a2:41:3f:03:9e:
                    c2:57:02:d6:7d:03:fe:ba:6c:db:d2:3c:ef:24:c3:
                    96:70:35:37:90:48:fe:ce:5a:11:d4:db:07:b4:1b:
                    b7:aa:9e:c3:97:ad:c1:46:f7:03:ac:44:be:ae:aa:
                    2f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E7:06:59:F6:A4:BA:19:9B:23:F7:B1:E5:CD:8D:D3:B3:2B:F0:ED
            X509v3 Authority Key Identifier:
                keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/6E1C49FA031811F1BA97C916183D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.241.0-185.254.243.255
                  213.139.232.0/24
                  213.139.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:89:39:cb:81:18:7d:68:3b:be:3d:93:b2:cc:0b:58:88:6b:
         31:03:75:6a:9e:de:39:28:bc:10:b9:7e:62:43:95:82:ee:f9:
         fa:05:aa:72:f1:6f:2d:a5:05:f5:1a:2a:f1:f4:3b:8b:30:1c:
         f6:32:b5:73:8c:9e:da:93:73:9e:58:4c:9a:87:37:0d:aa:5b:
         89:bb:71:8c:ff:d7:8c:24:df:42:ea:d1:2b:31:08:a8:a2:ed:
         4d:8b:8a:7f:ba:82:ef:26:a6:36:5f:ca:8c:63:f3:50:b4:5f:
         de:aa:56:b6:61:e8:a4:b4:ac:76:fb:b8:00:3e:cd:43:7e:0d:
         5e:48:4f:00:ac:3b:d9:2d:ce:00:e7:ff:79:f2:d4:6d:01:aa:
         bc:8d:98:c1:a3:7c:76:c7:2b:91:e7:6d:4f:fb:63:71:e1:63:
         63:39:9f:41:60:1e:0f:2a:62:0f:7e:9b:3f:34:91:f9:98:4a:
         55:0d:f9:b5:79:77:f2:72:65:55:f1:a4:e9:78:09:f0:e1:7f:
         c2:de:d9:20:05:8a:9b:a4:f5:7d:30:d7:ee:8a:9c:fd:ef:5e:
         cb:80:bf:85:0a:ac:d6:64:bf:51:86:c3:76:34:94:03:8f:a4:
         4a:b8:92:a6:dd:93:ac:67:26:25:f2:37:05:82:a4:ab:50:b1:
         1f:50:4c:39
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2
MEVCMEZCMTcwHhcNMjYwODEwMTQyODQ0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc5ZTAxYy03MGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4BWq0Xuhzc6hsPlRuKqhwD89+ndtVlI1vBNZWm7GFIVRA+duuYDd9cSzV6l
JYUA3Nppl/dGDoXbwebGOmMUlEtTNA+HNeRqzyCgeV/jdq1s5TzmvcySXfxNgw+8
Dp0PjEkYQL9ZW5V2GNAHauyKuq1KOGZqrxxXyrsscoQGsKscsfzw9Dqh1pp/2jmb
7MU49r6qiv5JWzY21Qp+rikJxuCV68TzzIjXSCmvJSruGFsjpEaqeCEDw9GhYgVj
+PyT3jTC2VXJysJzrzr6okE/A57CVwLWfQP+umzb0jzvJMOWcDU3kEj+zloR1NsH
tBu3qp7Dl63BRvcDrES+rqovYwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFNHnBln2
pLoZmyP3seXNjdOzK/DtMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC
MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTkxRDMvNjI5RThCMjAzQjIzMTFFRUE0M0IwMjE5QzRGOUFFMDIvNkUxQzQ5RkEw
MzE4MTFGMUJBOTdDOTE2MTgzRDhDNjcucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaMAwDBAC5/vEDBAK5/vADBADVi+gDBADVi+owDQYJKoZIhvcNAQELBQAD
ggEBAG6JOcuBGH1oO749k7LMC1iIazEDdWqe3jkovBC5fmJDlYLu+foFqnLxby2l
BfUaKvH0O4swHPYytXOMntqTc55YTJqHNw2qW4m7cYz/14wk30Lq0SsxCKii7U2L
in+6gu8mpjZfyoxj81C0X96qVrZh6KS0rHb7uAA+zUN+DV5ITwCsO9ktzgDn/3ny
1G0BqryNmMGjfHbHK5HnbU/7Y3HhY2M5n0FgHg8qYg9+mz80kfmYSlUN+bV5d/Jy
ZVXxpOl4CfDhf8Le2SAFipuk9X0w1+6KnP3vXsuAv4UKrNZkv1GGw3Y0lAOPpEq4
kqbdk6xnJiXyNwWCpKtQsR9QTDk=
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:26:03 2026 by rpki-client