Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E1214D2DB2F11EF8C68334DC4F9AE02.roa
File:                     7E1214D2DB2F11EF8C68334DC4F9AE02.roa (raw, json)
Hash identifier:          FCIvV6CK0v7/SBo5cS+i/6n3ffyAGIfExvfNedeSud4=
Subject key identifier:   3A:0E:A5:7C:FD:84:C6:20:49:CC:F2:E3:65:4B:DC:B3:DB:60:9B:C7
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2132
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E1214D2DB2F11EF8C68334DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:21:55 +0000
ROA not before:           Thu 28 Aug 2025 14:51:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153536
IP address blocks:        161.248.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8498 (0x2132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:56 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61b93-5e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:1d:22:5c:47:31:9f:a1:63:af:20:53:81:
                    36:6e:a8:8f:bb:33:02:55:55:bc:da:08:0d:e9:ac:
                    f0:29:3f:db:a8:c1:c4:b8:40:94:af:00:9c:2c:49:
                    3f:c8:23:89:17:bf:2b:b0:a9:87:04:11:7f:ea:50:
                    c8:ee:de:35:36:57:83:8a:bb:b3:25:90:38:aa:ed:
                    df:34:d3:86:11:c9:9d:7f:65:95:53:4e:75:43:6d:
                    cb:0e:4c:a0:71:76:19:d7:02:47:3b:0b:dc:29:eb:
                    05:43:38:37:86:e7:e1:b5:3b:ec:31:30:95:1a:b9:
                    79:6e:81:1d:52:ef:6e:50:1d:7a:41:b7:44:98:3e:
                    9e:75:f4:9c:ba:6e:3a:78:8d:7e:4d:a4:cf:13:8f:
                    4e:c8:4a:f3:1e:9f:a0:53:21:b5:04:55:5a:20:3e:
                    07:e3:ca:52:6d:aa:4c:32:21:57:f3:79:22:c6:a7:
                    2a:4f:08:ee:88:69:ef:20:a1:83:17:3d:7d:37:b5:
                    cc:ca:a4:54:de:0f:76:3e:d2:ad:b0:85:53:38:7e:
                    32:10:bc:fc:3f:0b:11:f8:a3:5e:39:52:0d:30:45:
                    25:7e:25:74:7c:12:fd:f8:cd:1c:8a:98:bc:2d:56:
                    e1:7b:19:0f:7b:3f:8e:c5:d4:24:62:2d:96:61:ee:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0E:A5:7C:FD:84:C6:20:49:CC:F2:E3:65:4B:DC:B3:DB:60:9B:C7
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E1214D2DB2F11EF8C68334DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:8b:52:73:7e:5f:d3:6b:fc:f9:04:11:07:17:58:61:f0:ef:
         38:8c:23:5c:ac:f4:a9:a0:d7:21:91:45:5f:e5:77:4d:90:7b:
         d4:9f:21:58:9a:52:8d:54:b7:42:c7:e2:22:af:21:99:0f:14:
         fb:1e:1c:30:0e:8e:40:1e:35:bd:d0:28:5c:0e:86:52:8b:cf:
         8f:78:a5:0e:eb:97:92:3a:c1:31:d0:03:0c:96:73:56:cc:7d:
         30:1b:5c:4d:f7:9c:1c:1a:1c:50:13:c5:77:c9:4c:83:d4:22:
         cf:30:b2:74:12:82:7f:14:80:9e:17:de:93:09:cd:f3:4e:d1:
         b4:4a:de:21:62:b5:7d:cf:e9:ea:f1:5a:6d:0d:96:09:34:5d:
         bd:7b:45:79:19:6f:09:16:76:70:75:24:63:79:ef:26:1f:25:
         59:1d:2b:99:53:8e:dc:7a:a9:71:4e:61:a5:d7:46:c4:93:5f:
         db:f2:9f:b8:7e:5f:b2:94:a4:49:19:d1:06:24:a1:a8:60:d8:
         62:5c:2f:8c:2b:97:60:21:1b:01:2f:d2:41:e4:4d:3c:50:f0:
         2b:c5:64:4b:a5:fa:33:ab:4c:a8:c7:b9:bc:c7:36:11:02:bc:
         ad:86:8d:46:af:fe:b0:fd:3f:b3:82:a6:58:71:c9:4c:96:3f:
         d8:01:18:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICITIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWI5My01ZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw9IdIlxHMZ+hY68gU4E2bqiPuzMCVVW82ggN6azwKT/bqMHEuECUrwCcLEk/
yCOJF78rsKmHBBF/6lDI7t41NleDiruzJZA4qu3fNNOGEcmdf2WVU051Q23LDkyg
cXYZ1wJHOwvcKesFQzg3hufhtTvsMTCVGrl5boEdUu9uUB16QbdEmD6edfScum46
eI1+TaTPE49OyErzHp+gUyG1BFVaID4H48pSbapMMiFX83kixqcqTwjuiGnvIKGD
Fz19N7XMyqRU3g92PtKtsIVTOH4yELz8PwsR+KNeOVINMEUlfiV0fBL9+M0cipi8
LVbhexkPez+OxdQkYi2WYe69wwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDoOpXz9
hMYgSczy42VL3LPbYJvHMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvN0UxMjE0RDJE
QjJGMTFFRjhDNjgzMzREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofi4MA0GCSqGSIb3DQEBCwUAA4IBAQBri1Jzfl/Ta/z5BBEHF1hh
8O84jCNcrPSpoNchkUVf5XdNkHvUnyFYmlKNVLdCx+IiryGZDxT7HhwwDo5AHjW9
0ChcDoZSi8+PeKUO65eSOsEx0AMMlnNWzH0wG1xN95wcGhxQE8V3yUyD1CLPMLJ0
EoJ/FICeF96TCc3zTtG0St4hYrV9z+nq8VptDZYJNF29e0V5GW8JFnZwdSRjee8m
HyVZHSuZU47ceqlxTmGl10bEk1/b8p+4fl+ylKRJGdEGJKGoYNhiXC+MK5dgIRsB
L9JB5E08UPArxWRLpfozq0yox7m8xzYRArytho1Gr/6w/T+zgqZYcclMlj/YARjD
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:51:32 2026 by rpki-client