Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa
File:                     8C7D223C2DAB11EF88127264C4F9AE02.roa (raw, json)
Hash identifier:          X6aIaG1zQqgDiSqMFiuqRqeQ5WZkrDJTEHFLzyOj2LU=
Subject key identifier:   85:A6:CD:40:46:4E:F1:6C:93:28:A3:D2:D3:8A:6E:2F:A2:E4:FA:9C
Certificate issuer:       /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial:       01A1
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 11:29:06 +0000
ROA not before:           Wed 25 Feb 2026 03:23:55 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     10111
IP address blocks:        157.10.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
                          rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
        Validity
            Not Before: Feb 25 03:23:55 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a57482-f583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:35:ae:0a:b6:dc:06:69:dd:33:c0:3d:96:8a:
                    24:03:6b:2d:ba:06:b6:62:e7:83:69:82:f9:60:aa:
                    5d:16:38:90:c9:ca:5b:ef:72:a9:32:41:ee:29:42:
                    05:a7:29:8a:bd:08:d6:26:30:02:b3:2f:63:dc:93:
                    d0:e3:fa:10:bb:a2:c8:18:61:cf:db:08:e5:e4:f7:
                    24:ee:5b:f2:00:12:92:2e:14:f2:a0:54:c4:74:5a:
                    e9:ec:cc:25:dd:c1:08:0f:f0:37:a9:c1:b0:e6:93:
                    30:7b:df:fd:ac:64:5d:c1:76:2d:56:8a:1a:cf:79:
                    b1:6e:7d:1b:7e:65:72:b6:d4:19:c8:56:7b:2f:d3:
                    58:ad:59:79:c3:64:b0:22:25:dc:d0:03:c1:91:e5:
                    38:e9:e5:b0:4a:f6:da:f2:14:e8:c9:70:c6:47:08:
                    26:97:fc:c9:61:8f:aa:26:05:46:41:97:4a:c9:54:
                    e6:c6:9a:be:33:1a:74:64:5b:6a:a7:2b:c8:c9:e4:
                    82:3f:5d:2b:8e:57:9b:81:2d:7a:fd:37:18:55:68:
                    eb:fa:aa:bc:87:25:80:a3:d9:14:60:2e:cd:d8:04:
                    76:fa:10:6f:75:7e:e2:ba:ba:95:2d:4b:1b:3d:c7:
                    0e:9f:ef:9e:e8:9f:60:81:44:fb:41:17:e0:8f:22:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A6:CD:40:46:4E:F1:6C:93:28:A3:D2:D3:8A:6E:2F:A2:E4:FA:9C
            X509v3 Authority Key Identifier:
                keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:36:6a:b3:18:d3:d9:9d:1d:3f:eb:9f:3b:43:96:09:77:8e:
         aa:3f:17:10:25:88:cd:e1:58:c8:37:3d:be:1e:b7:58:cc:62:
         78:52:c2:1b:d7:37:9e:78:8d:cb:06:dc:b9:2c:45:58:1c:be:
         43:70:2e:53:fb:12:59:83:37:ee:bb:2e:66:9d:23:62:30:5b:
         a8:fc:d9:52:b2:26:03:9f:99:d7:5a:5d:f4:aa:0e:77:b0:7e:
         54:d2:fe:26:d0:70:00:b8:87:a0:60:e7:a9:fa:de:9c:bb:3e:
         2b:7b:76:f0:8e:ee:02:08:b6:b0:03:55:ae:97:9e:42:f5:67:
         45:9a:98:3b:34:68:68:53:98:f7:7c:aa:cc:3d:5d:6d:5b:7e:
         81:ad:ca:7d:ae:32:92:a1:81:cb:6f:65:01:8e:61:74:a7:c3:
         0f:f6:8f:17:18:cb:8a:9f:8d:aa:8b:d0:27:6e:26:09:80:f1:
         41:65:34:03:f8:d0:1b:9a:d4:39:19:61:a8:b6:d5:64:5a:04:
         80:7f:13:81:f7:f2:63:7f:ce:44:54:37:14:f0:dc:d6:01:d7:
         25:95:5e:e4:7a:0f:a5:c4:d8:41:de:fb:b5:c4:e8:8a:ec:20:
         3b:f3:66:81:7a:91:5a:1a:84:07:02:a2:06:52:ac:e5:60:7d:
         e3:56:b4:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF
OENFNzg4QTcwHhcNMjYwMjI1MDMyMzU1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1NzQ4Mi1mNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5jWuCrbcBmndM8A9lookA2stuga2YueDaYL5YKpdFjiQycpb73KpMkHuKUIF
pymKvQjWJjACsy9j3JPQ4/oQu6LIGGHP2wjl5Pck7lvyABKSLhTyoFTEdFrp7Mwl
3cEID/A3qcGw5pMwe9/9rGRdwXYtVooaz3mxbn0bfmVyttQZyFZ7L9NYrVl5w2Sw
IiXc0APBkeU46eWwSvba8hToyXDGRwgml/zJYY+qJgVGQZdKyVTmxpq+Mxp0ZFtq
pyvIyeSCP10rjlebgS16/TcYVWjr+qq8hyWAo9kUYC7N2AR2+hBvdX7iurqVLUsb
PccOn++e6J9ggUT7QRfgjyIEawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIWmzUBG
TvFskyij0tOKbi+i5PqcMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw
OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTEzQTYvODA3OTRDOUFDMDhDMTFFRUJEODA1QjI0QzRGOUFFMDIvOEM3RDIyM0My
REFCMTFFRjg4MTI3MjY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQppMA0GCSqGSIb3DQEBCwUAA4IBAQBXNmqzGNPZnR0/6587Q5YJ
d46qPxcQJYjN4VjINz2+HrdYzGJ4UsIb1zeeeI3LBty5LEVYHL5DcC5T+xJZgzfu
uy5mnSNiMFuo/NlSsiYDn5nXWl30qg53sH5U0v4m0HAAuIegYOep+t6cuz4re3bw
ju4CCLawA1Wul55C9WdFmpg7NGhoU5j3fKrMPV1tW36Brcp9rjKSoYHLb2UBjmF0
p8MP9o8XGMuKn42qi9AnbiYJgPFBZTQD+NAbmtQ5GWGottVkWgSAfxOB9/Jjf85E
VDcU8NzWAdcllV7keg+lxNhB3vu1xOiK7CA782aBepFaGoQHAqIGUqzlYH3jVrTD
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:03 2026 by rpki-client