Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2545049ABBD411EC9EF96134C4F9AE02.roa
File:                     2545049ABBD411EC9EF96134C4F9AE02.roa (raw, json)
Hash identifier:          ZENshvtiwyweDBSnxEcZ+XbHdf/07rB2hvez2DorDBI=
Subject key identifier:   0A:C1:CF:D7:95:06:B3:CA:0F:EC:F1:8D:80:62:1B:E2:FC:67:59:22
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F21
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2545049ABBD411EC9EF96134C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:36:30 +0000
ROA not before:           Fri 02 Oct 2026 15:36:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55311
IP address blocks:        36.50.178.0/24 maxlen: 24
                          103.221.86.0/24 maxlen: 24
                          202.9.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28449 (0x6f21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:36:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf7e-d631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:e4:a8:3a:f7:b1:6b:fe:d3:0a:55:8f:5d:
                    bc:3f:19:d6:fd:07:e4:ac:32:02:20:b7:32:32:3a:
                    24:4a:f4:64:6b:b3:fc:a2:06:eb:12:94:e1:87:58:
                    b1:2c:f9:c6:4a:47:15:ba:bd:86:80:a4:da:55:ab:
                    e7:7c:32:47:62:c0:a7:c0:0d:a3:47:50:b2:9d:45:
                    79:83:1a:5f:88:f9:b7:0f:01:0d:02:95:13:16:3f:
                    4d:97:99:d0:9c:09:95:08:f0:a2:b7:85:81:f5:6b:
                    c4:53:49:d3:7a:6d:3b:18:61:21:d0:b2:a9:fe:43:
                    2b:a1:af:5b:38:90:16:0e:28:e2:75:9b:f6:02:25:
                    af:8b:bc:d2:c2:80:90:3f:a9:29:f1:40:3c:04:c1:
                    06:a7:a5:6d:d8:fd:56:5c:0d:c1:e5:91:22:9c:1d:
                    84:ae:a6:87:47:42:92:a7:54:f5:f0:9b:12:68:ab:
                    df:1a:66:ab:84:08:6a:f4:0c:f2:d3:dd:db:65:68:
                    12:32:6f:8e:c0:fc:1c:a2:27:2c:14:64:a2:15:d1:
                    06:1e:22:f5:48:3d:89:27:52:99:fc:fa:97:15:2a:
                    37:1b:27:02:4f:41:55:ea:17:72:43:41:d2:d0:ee:
                    10:81:f5:52:06:e7:c5:d7:fd:07:bd:1a:d7:d0:c8:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:CF:D7:95:06:B3:CA:0F:EC:F1:8D:80:62:1B:E2:FC:67:59:22
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2545049ABBD411EC9EF96134C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.178.0/24
                  103.221.86.0/24
                  202.9.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:8f:bf:27:2d:d4:96:cd:34:45:8b:64:ce:99:3e:21:cf:52:
         ea:ec:ae:25:15:7c:a3:dc:4a:0f:8c:01:73:a3:e6:7d:e0:6d:
         81:24:e0:ec:58:ed:22:03:70:c1:78:f4:d5:6e:b6:b1:fc:24:
         f5:5e:f6:23:f2:27:ff:44:0a:6a:0a:f1:de:73:47:57:cc:03:
         f6:9e:c5:3a:db:13:6c:3d:d4:c2:16:a7:60:47:fd:25:fc:4a:
         9b:74:6b:7e:6d:38:8d:7d:2f:9a:37:01:e2:28:b8:13:43:7d:
         77:1a:39:41:7c:62:27:78:4d:c5:3b:ad:21:cc:a2:80:ca:98:
         46:7d:f7:12:19:d6:20:45:3d:c7:8f:f6:a8:21:00:1b:a5:77:
         2d:37:85:1c:b0:17:a5:9d:36:37:7e:cf:93:eb:ae:c1:25:e7:
         6b:d3:ba:cb:b8:46:39:82:dd:47:f0:18:7d:e4:52:58:0a:96:
         09:1a:37:a5:de:f0:2f:e7:03:f4:5d:ec:50:27:78:d8:fa:82:
         5f:44:1f:bf:28:86:d8:86:36:ae:36:41:9e:d2:6d:06:a7:f2:
         c5:15:20:29:a8:cc:47:00:3d:7f:e3:e5:a2:8e:0f:e2:c4:12:
         60:47:89:4a:c5:62:d0:ae:78:42:42:71:06:e5:79:45:aa:ac:
         cb:6e:3b:d1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICbyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzNjMwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Y3ZS1kNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuzfkqDr3sWv+0wpVj128PxnW/QfkrDICILcyMjokSvRka7P8ogbrEpThh1ix
LPnGSkcVur2GgKTaVavnfDJHYsCnwA2jR1CynUV5gxpfiPm3DwENApUTFj9Nl5nQ
nAmVCPCit4WB9WvEU0nTem07GGEh0LKp/kMroa9bOJAWDijidZv2AiWvi7zSwoCQ
P6kp8UA8BMEGp6Vt2P1WXA3B5ZEinB2ErqaHR0KSp1T18JsSaKvfGmarhAhq9Azy
093bZWgSMm+OwPwcoicsFGSiFdEGHiL1SD2JJ1KZ/PqXFSo3GycCT0FV6hdyQ0HS
0O4QgfVSBufF1/0HvRrX0Mhr5QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFArBz9eV
BrPKD+zxjYBiG+L8Z1kiMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjU0NTA0OUFC
QkQ0MTFFQzlFRjk2MTM0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAJDKyAwQAZ91WAwQAyglQMA0GCSqGSIb3DQEBCwUAA4IBAQAxj78n
LdSWzTRFi2TOmT4hz1Lq7K4lFXyj3EoPjAFzo+Z94G2BJODsWO0iA3DBePTVbrax
/CT1XvYj8if/RApqCvHec0dXzAP2nsU62xNsPdTCFqdgR/0l/EqbdGt+bTiNfS+a
NwHiKLgTQ313GjlBfGIneE3FO60hzKKAyphGffcSGdYgRT3Hj/aoIQAbpXctN4Uc
sBelnTY3fs+T667BJedr07rLuEY5gt1H8Bh95FJYCpYJGjel3vAv5wP0XexQJ3jY
+oJfRB+/KIbYhjauNkGe0m0Gp/LFFSApqMxHAD1/4+Wijg/ixBJgR4lKxWLQrnhC
QnEG5XlFqqzLbjvR
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:44:12 2026 by rpki-client