Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/52A92F12F52111F08E37083D5B6F56BC.roa
File:                     52A92F12F52111F08E37083D5B6F56BC.roa (raw, json)
Hash identifier:          4FJ1aVyWfXWhPdRAkAeh8dXPJsbFA3eWPGFG28TZyfI=
Subject key identifier:   31:35:F8:20:E2:BA:61:A1:E5:B0:2E:A5:CC:17:8B:AB:97:6B:9F:C2
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       238B
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/52A92F12F52111F08E37083D5B6F56BC.roa
Signing time:             Fri 02 Oct 2026 15:17:31 +0000
ROA not before:           Fri 02 Oct 2026 15:17:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149098
IP address blocks:        144.79.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9099 (0x238b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb0a-10fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:14:23:cb:dc:4e:8f:0a:3a:f6:31:da:25:
                    c1:c4:5e:70:2c:9a:91:b5:3c:a3:d4:62:1f:3b:ca:
                    3c:d5:c3:80:d6:39:a6:a8:f1:dc:8e:bd:8b:8d:c0:
                    fc:2a:b1:8e:b5:ed:d4:9b:a8:43:60:75:c0:ee:a4:
                    18:da:1b:b4:ac:98:6b:22:6e:f8:46:f8:82:a7:40:
                    32:9c:52:91:90:56:97:b0:dd:67:7f:c4:7b:e5:ee:
                    d6:4f:9f:dc:7b:43:6b:f1:c8:8c:c8:44:d1:f1:a3:
                    c2:76:d5:d2:78:03:57:67:b8:93:9d:79:97:d4:4b:
                    22:72:46:49:01:83:20:07:63:55:6c:97:2a:fa:26:
                    2a:89:a8:6d:2f:8d:58:16:38:99:83:a8:7f:b3:f2:
                    16:68:d3:83:24:d2:53:28:b4:af:9a:29:90:a9:a6:
                    27:b0:c1:e6:55:7b:d0:b5:53:d9:f8:41:7a:0a:76:
                    06:6e:3c:1a:7a:34:fb:71:b8:ae:e7:11:8d:f1:e1:
                    dd:05:78:1e:7c:74:1a:39:6f:b5:73:d4:a5:3b:3c:
                    9b:c4:92:37:a7:d8:22:3d:de:65:4e:57:65:30:4b:
                    30:cf:aa:ac:b2:18:42:c3:e3:20:7c:c9:74:4a:19:
                    0f:5d:77:3b:dc:84:9d:57:e4:30:c3:69:9f:77:4c:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:35:F8:20:E2:BA:61:A1:E5:B0:2E:A5:CC:17:8B:AB:97:6B:9F:C2
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/52A92F12F52111F08E37083D5B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:a5:6d:3a:64:0a:c5:26:9d:36:dd:0d:29:9e:50:64:a4:69:
         fd:f3:f5:43:48:b1:8b:d1:fd:ce:04:d1:d3:d7:b4:f1:e0:5a:
         dc:98:60:54:2a:a8:80:56:05:c1:02:5b:dc:22:67:3c:11:37:
         7e:29:31:5f:c1:9c:bc:6e:45:fe:3f:2a:0c:f5:f1:8b:6b:87:
         61:63:a4:61:3c:6f:f0:50:92:b8:06:33:6b:ef:33:84:b1:2d:
         1d:ff:6f:71:1c:59:48:32:1e:32:58:d4:fd:5c:a1:ad:06:b7:
         f5:fc:2b:d5:c6:9f:8d:8a:b5:b2:93:f8:19:bd:f4:f3:1d:ce:
         75:fa:6f:63:75:c8:aa:c6:08:bf:ce:47:8e:20:d0:de:28:e2:
         a7:c0:9b:f7:08:93:6e:cb:28:8b:1f:a6:40:92:dc:60:a6:97:
         29:9f:d5:6b:7e:82:d0:7b:21:11:ab:83:64:f4:0d:db:e7:4e:
         a0:32:89:cb:21:dd:2e:9e:27:43:5f:7b:04:5d:71:f3:1d:8d:
         f3:48:5c:ee:c7:f0:05:0f:83:d4:5e:f6:c9:05:87:13:fc:de:
         62:89:b1:df:71:fc:73:5e:ff:f4:06:dc:61:be:e7:d6:23:0e:
         e2:8b:7f:c5:4a:84:9a:f1:30:f9:ba:7a:7f:37:f6:7c:10:72:
         87:c7:52:f1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUxNzMwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2IwYS0xMGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsM4UI8vcTo8KOvYx2iXBxF5wLJqRtTyj1GIfO8o81cOA1jmmqPHcjr2LjcD8
KrGOte3Um6hDYHXA7qQY2hu0rJhrIm74RviCp0AynFKRkFaXsN1nf8R75e7WT5/c
e0Nr8ciMyETR8aPCdtXSeANXZ7iTnXmX1EsickZJAYMgB2NVbJcq+iYqiahtL41Y
FjiZg6h/s/IWaNODJNJTKLSvmimQqaYnsMHmVXvQtVPZ+EF6CnYGbjwaejT7cbiu
5xGN8eHdBXgefHQaOW+1c9SlOzybxJI3p9giPd5lTldlMEswz6qsshhCw+MgfMl0
ShkPXXc73ISdV+Qww2mfd0wn6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDE1+CDi
umGh5bAupcwXi6uXa5/CMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNTJBOTJGMTJG
NTIxMTFGMDhFMzcwODNENUI2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBkE+sMA0GCSqGSIb3DQEBCwUAA4IBAQBOpW06ZArFJp023Q0pnlBk
pGn98/VDSLGL0f3OBNHT17Tx4FrcmGBUKqiAVgXBAlvcImc8ETd+KTFfwZy8bkX+
PyoM9fGLa4dhY6RhPG/wUJK4BjNr7zOEsS0d/29xHFlIMh4yWNT9XKGtBrf1/CvV
xp+NirWyk/gZvfTzHc51+m9jdciqxgi/zkeOINDeKOKnwJv3CJNuyyiLH6ZAktxg
ppcpn9VrfoLQeyERq4Nk9A3b506gMonLId0unidDX3sEXXHzHY3zSFzux/AFD4PU
XvbJBYcT/N5iibHfcfxzXv/0BtxhvufWIw7ii3/FSoSa8TD5unp/N/Z8EHKHx1Lx
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:47 2026 by rpki-client