Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3B91F0E650E511F1B3C6CC42C3833773.roa
File:                     3B91F0E650E511F1B3C6CC42C3833773.roa (raw, json)
Hash identifier:          7jYYobsyHdNXXFnvJ1KLqoM7GEoKGSkj05i8VMgrHM8=
Subject key identifier:   D2:E0:B9:25:42:6A:9E:04:2E:FE:51:52:CC:A8:6F:75:6E:20:CE:54
Certificate issuer:       /CN=A91A3660/serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
Certificate serial:       40
Authority key identifier: 37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3B91F0E650E511F1B3C6CC42C3833773.roa
Signing time:             Sat 16 May 2026 05:08:10 +0000
ROA not before:           Sat 16 May 2026 05:08:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     18019
IP address blocks:        43.228.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl
                          rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3660, serialNumber=3762DE3616AA4BA04B7AEACB548B86A62E6F170E
        Validity
            Not Before: May 16 05:08:10 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a07fbba-604b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:df:00:75:ca:45:4a:a3:c1:27:31:70:95:
                    db:1f:a4:76:a3:11:62:0b:3a:52:c9:a3:1c:fa:6e:
                    0b:bd:72:2f:1f:19:83:75:a0:75:58:99:1d:65:ce:
                    5c:b8:3c:54:f9:c4:83:13:e6:a5:66:d6:d8:88:7f:
                    b8:22:86:dd:bc:ba:49:8a:75:59:fe:d8:78:d9:0d:
                    20:40:3f:80:e2:62:2a:81:7d:04:30:0a:9e:2b:b3:
                    8e:b7:db:80:90:56:d5:83:77:cf:ac:b5:e5:93:59:
                    b3:3b:ea:72:8a:93:6f:6d:bd:0a:07:c1:4d:dd:cd:
                    9c:46:bc:0d:bb:8f:0a:e9:d5:28:47:9b:c0:b9:11:
                    5f:93:9d:39:49:50:97:ed:55:96:16:cc:6c:aa:f8:
                    bd:a6:33:22:a2:6c:f2:ff:da:bd:b6:3f:6b:b9:ef:
                    82:25:25:49:70:c1:9a:9d:b8:bd:60:0f:ae:2a:e7:
                    76:0c:1a:41:b1:e1:91:d7:0f:4c:79:81:50:ad:50:
                    75:ef:06:c1:0a:dc:43:c8:07:74:76:51:68:d1:40:
                    b2:db:0b:6d:b4:61:b9:32:eb:db:88:21:01:99:23:
                    ba:df:4e:02:c3:c1:aa:fc:40:49:89:49:16:4b:c2:
                    2b:81:a8:a9:92:59:95:5e:39:43:d1:9d:10:8d:ab:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:B9:25:42:6A:9E:04:2E:FE:51:52:CC:A8:6F:75:6E:20:CE:54
            X509v3 Authority Key Identifier:
                keyid:37:62:DE:36:16:AA:4B:A0:4B:7A:EA:CB:54:8B:86:A6:2E:6F:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/N2LeNhaqS6BLeurLVIuGpi5vFw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2LeNhaqS6BLeurLVIuGpi5vFw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3660/DEE9C680001611F18A4CD99A416F56BC/3B91F0E650E511F1B3C6CC42C3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:3b:61:23:e3:19:4c:70:23:9b:25:4a:34:bb:63:26:85:c6:
         41:8a:ab:92:5a:73:c4:fe:39:dc:67:a7:27:9c:93:f4:5b:ec:
         b9:6d:cc:9a:4c:0e:ed:9a:f4:bd:d3:4a:70:a8:aa:86:16:9d:
         f5:70:0b:4b:86:61:e0:2a:11:24:9c:bf:e6:b4:a3:ec:60:bf:
         f7:19:90:11:e7:92:ee:1b:e0:47:6d:9a:98:62:4e:71:3d:29:
         55:0b:ef:82:d3:1a:89:8f:1d:ae:97:09:23:4d:1e:4a:5d:13:
         50:17:f4:1b:6a:73:66:43:3c:5c:ad:ab:a1:b9:33:49:12:c2:
         63:a9:3c:88:33:b4:07:cb:63:16:1d:55:c7:de:35:7c:f7:90:
         3f:4c:13:29:5c:6e:28:3f:43:43:4b:19:16:e6:70:10:ac:f7:
         cd:3c:53:91:b7:14:3f:04:ae:a1:65:c7:10:88:e1:cd:d5:ea:
         42:26:6a:f2:a8:92:d4:3e:6a:ee:19:60:f3:5b:94:48:b1:97:
         ed:59:a4:ba:97:26:fe:92:c8:52:14:33:bb:9e:cf:7c:63:7b:
         52:78:d7:47:fa:46:c9:b8:7d:b8:4c:1b:8a:af:a2:59:1a:e5:
         23:53:a3:5a:ab:3b:b7:99:ff:08:87:26:d0:65:ca:71:cf:47:
         5b:8d:94:0a
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MzY2MDExMC8GA1UEBRMoMzc2MkRFMzYxNkFBNEJBMDRCN0FFQUNCNTQ4Qjg2QTYy
RTZGMTcwRTAeFw0yNjA1MTYwNTA4MTBaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDdmYmJhLTYwNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtRt8AdcpFSqPBJzFwldsfpHajEWILOlLJoxz6bgu9ci8fGYN1oHVYmR1lzly4
PFT5xIMT5qVm1tiIf7giht28ukmKdVn+2HjZDSBAP4DiYiqBfQQwCp4rs46324CQ
VtWDd8+steWTWbM76nKKk29tvQoHwU3dzZxGvA27jwrp1ShHm8C5EV+TnTlJUJft
VZYWzGyq+L2mMyKibPL/2r22P2u574IlJUlwwZqduL1gD64q53YMGkGx4ZHXD0x5
gVCtUHXvBsEK3EPIB3R2UWjRQLLbC220Ybky69uIIQGZI7rfTgLDwar8QEmJSRZL
wiuBqKmSWZVeOUPRnRCNq24rAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU0uC5JUJq
ngQu/lFSzKhvdW4gzlQwHwYDVR0jBBgwFoAUN2LeNhaqS6BLeurLVIuGpi5vFw4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzNjYwL0RFRTlDNjgwMDAx
NjExRjE4QTRDRDk5QTQxNkY1NkJDL04yTGVOaGFxUzZCTGV1ckxWSXVHcGk1dkZ3
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTjJMZU5oYXFTNkJMZXVyTFZJdUdwaTV2Rnc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzY2MC9ERUU5QzY4MDAwMTYxMUYxOEE0Q0Q5OUE0MTZGNTZCQy8zQjkxRjBFNjUw
RTUxMUYxQjNDNkNDNDJDMzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAIr5JAwDQYJKoZIhvcNAQELBQADggEBAFg7YSPjGUxwI5slSjS7YyaF
xkGKq5Jac8T+Odxnpyeck/Rb7LltzJpMDu2a9L3TSnCoqoYWnfVwC0uGYeAqESSc
v+a0o+xgv/cZkBHnku4b4EdtmphiTnE9KVUL74LTGomPHa6XCSNNHkpdE1AX9Btq
c2ZDPFytq6G5M0kSwmOpPIgztAfLYxYdVcfeNXz3kD9MEylcbig/Q0NLGRbmcBCs
9808U5G3FD8ErqFlxxCI4c3V6kImavKoktQ+au4ZYPNblEixl+1ZpLqXJv6SyFIU
M7uez3xje1J410f6Rsm4fbhMG4qvolka5SNTo1qrO7eZ/wiHJtBlynHPR1uNlAo=
-----END CERTIFICATE-----
Generated at Thu May 21 11:12:06 2026 by rpki-client