Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa
File:                     4EAF8364839211EE9CAD6C0DC4F9AE02.roa (raw, json)
Hash identifier:          2OH7wDd+jvxiR6Y+Dpw8eYLqvCGhs1jM2aI+/2T7hWk=
Subject key identifier:   DE:ED:19:DE:A3:7A:F7:6E:00:40:65:96:4F:B0:28:06:2E:0D:1E:06
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6F25
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:36:40 +0000
ROA not before:           Fri 02 Oct 2026 15:36:40 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55317
IP address blocks:        202.74.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28453 (0x6f25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:36:40 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf88-77ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:32:cb:39:c7:20:bd:d8:12:f3:a1:b2:11:
                    b9:cf:1a:78:64:e2:c3:81:0e:52:84:2d:99:d8:50:
                    f2:44:2d:6c:18:e9:df:e8:61:35:63:4c:c1:3b:6f:
                    35:a7:fa:7f:e9:a6:20:2b:f0:f1:96:5f:d9:eb:31:
                    be:6d:4b:4e:67:0f:58:3c:60:be:52:39:4a:f9:c2:
                    c3:1d:61:a2:12:71:b1:c6:b2:03:72:05:a5:0f:23:
                    ba:fc:2c:64:e2:ea:38:84:ee:23:41:3f:11:2d:45:
                    70:40:19:13:dd:a2:e8:17:70:e9:23:95:d6:84:bc:
                    06:84:40:ad:33:dd:4e:ba:ee:c3:45:70:bb:d1:26:
                    e9:f2:2e:53:7e:c0:94:f1:ad:ae:2d:fa:bd:81:fd:
                    14:a7:b9:ac:c0:f6:d9:bb:b1:cc:4b:16:a7:41:0c:
                    70:c6:a3:5a:d0:6c:0f:60:8b:c2:45:ba:3d:b0:d2:
                    a4:f9:86:4c:64:e7:9c:0f:b4:49:15:19:fe:94:ae:
                    72:40:01:1f:6d:0b:a2:a6:6f:13:12:36:16:9b:90:
                    ed:7b:76:ab:bd:f9:d0:a5:55:8d:98:ef:fe:e7:5f:
                    b3:54:b2:f0:ad:f5:e5:33:a1:0f:c9:2d:32:86:e7:
                    fe:8b:b2:3c:f4:af:d9:6e:df:b2:86:b8:2d:3c:02:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:19:DE:A3:7A:F7:6E:00:40:65:96:4F:B0:28:06:2E:0D:1E:06
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EAF8364839211EE9CAD6C0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:cf:d6:34:a8:9b:30:df:33:4b:ed:bf:59:f5:30:60:81:
         bd:cd:fe:99:11:db:e8:38:59:84:f2:91:df:65:28:c8:25:65:
         c2:dd:0c:c1:3b:e4:6c:41:db:9d:0d:aa:f5:28:52:f6:9b:d1:
         40:d5:66:c6:4f:a5:cc:f8:db:b4:53:34:8e:e7:d1:fb:33:1f:
         df:d9:8e:f9:01:9f:04:a1:f3:83:b2:4f:c9:68:53:a3:b7:5f:
         d4:6c:4c:44:e9:5e:d1:c1:35:99:6e:53:e8:b6:25:d4:43:cd:
         df:b3:5a:0f:90:dd:92:01:01:9e:90:39:4e:f2:b1:91:df:f4:
         c1:3f:56:d3:65:a6:a7:b7:82:ff:fc:d7:5d:5a:4d:3c:ff:0a:
         88:6a:48:59:3d:06:3f:7c:c9:f6:7a:18:81:33:3d:6d:b6:57:
         92:c2:93:01:79:cb:98:5a:76:d3:54:77:1f:e0:b9:cc:d6:4e:
         3c:c4:3a:c2:ee:a8:c3:8e:58:44:d4:00:f0:dc:5d:d2:de:99:
         e2:d6:f0:52:17:a0:1b:f8:fc:bb:cb:90:e7:e4:76:3a:8e:f3:
         72:e5:16:03:46:04:d0:b7:98:e5:c2:62:de:01:37:38:e6:e3:
         89:09:1c:bc:e2:18:19:5d:2f:0a:20:5e:c0:60:d0:67:96:2a:
         67:fd:42:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICbyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzNjQwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Y4OC03N2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsUkyyznHIL3YEvOhshG5zxp4ZOLDgQ5ShC2Z2FDyRC1sGOnf6GE1Y0zBO281
p/p/6aYgK/Dxll/Z6zG+bUtOZw9YPGC+UjlK+cLDHWGiEnGxxrIDcgWlDyO6/Cxk
4uo4hO4jQT8RLUVwQBkT3aLoF3DpI5XWhLwGhECtM91Ouu7DRXC70Sbp8i5TfsCU
8a2uLfq9gf0Up7mswPbZu7HMSxanQQxwxqNa0GwPYIvCRbo9sNKk+YZMZOecD7RJ
FRn+lK5yQAEfbQuipm8TEjYWm5Dte3arvfnQpVWNmO/+51+zVLLwrfXlM6EPyS0y
huf+i7I89K/Zbt+yhrgtPALVPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN7tGd6j
evduAEBllk+wKAYuDR4GMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEVBRjgzNjQ4
MzkyMTFFRTlDQUQ2QzBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQByko6MA0GCSqGSIb3DQEBCwUAA4IBAQA2b8/WNKibMN8zS+2/WfUw
YIG9zf6ZEdvoOFmE8pHfZSjIJWXC3QzBO+RsQdudDar1KFL2m9FA1WbGT6XM+Nu0
UzSO59H7Mx/f2Y75AZ8EofODsk/JaFOjt1/UbExE6V7RwTWZblPotiXUQ83fs1oP
kN2SAQGekDlO8rGR3/TBP1bTZaant4L//NddWk08/wqIakhZPQY/fMn2ehiBMz1t
tleSwpMBecuYWnbTVHcf4LnM1k48xDrC7qjDjlhE1ADw3F3S3pni1vBSF6Ab+Py7
y5Dn5HY6jvNy5RYDRgTQt5jlwmLeATc45uOJCRy84hgZXS8KIF7AYNBnlipn/UI8
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:23:09 2026 by rpki-client