Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/45BF99708C5811F1A357FB3A5A11F970.roa
File:                     45BF99708C5811F1A357FB3A5A11F970.roa (raw, json)
Hash identifier:          RPzJA2BPqoay2JqVAuv3o77KmWTYC1VndN9GobK8Jt0=
Subject key identifier:   F7:68:67:64:1E:B7:C7:43:D2:59:D8:A4:70:82:73:66:AB:C5:E3:5C
Certificate issuer:       /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial:       3E
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/45BF99708C5811F1A357FB3A5A11F970.roa
Signing time:             Thu 30 Jul 2026 20:50:19 +0000
ROA not before:           Thu 30 Jul 2026 20:50:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134543
IP address blocks:        206.109.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
        Validity
            Not Before: Jul 30 20:50:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a6bb90a-3539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:36:3b:f0:56:26:49:2f:ec:64:d8:c3:ac:
                    9d:59:a9:89:f4:4f:3b:7b:f5:47:d0:ec:1b:1a:a7:
                    cb:46:5d:b3:c8:f8:5b:56:41:16:04:06:80:e7:80:
                    71:14:df:7a:5b:3a:8e:e0:c9:39:f3:ea:a9:8b:59:
                    27:22:f7:d7:6b:21:86:9f:73:ae:23:9e:cc:6b:96:
                    f0:68:18:bc:9c:86:dc:44:aa:bd:75:fd:e7:8d:71:
                    50:55:13:01:09:0b:09:57:81:54:b8:c3:da:32:9d:
                    7c:25:1d:87:e8:44:34:ed:fe:d7:31:20:69:94:c3:
                    04:20:96:56:b6:16:1e:6f:6b:81:a1:29:51:76:b7:
                    2d:a8:94:e0:be:f7:71:50:73:db:4a:fd:ac:e8:5c:
                    e8:26:b7:f6:db:32:f9:78:7d:d2:e8:6f:b3:52:56:
                    e3:50:9d:88:e8:5f:b4:60:65:e6:eb:bd:87:22:b6:
                    52:95:21:20:b2:09:e1:ed:d3:d5:5d:d7:79:8e:b7:
                    6e:a8:d8:ed:4c:32:e1:2a:a5:4f:6f:4c:be:d9:30:
                    03:13:06:a5:43:24:0c:56:8e:a6:bd:6c:93:1a:32:
                    c8:89:88:ec:a1:9f:5d:83:aa:87:a0:4e:54:a1:6c:
                    9e:14:c8:d0:dd:80:73:8d:08:7f:5f:b4:99:ce:54:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:68:67:64:1E:B7:C7:43:D2:59:D8:A4:70:82:73:66:AB:C5:E3:5C
            X509v3 Authority Key Identifier:
                keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/45BF99708C5811F1A357FB3A5A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:51:e5:a8:ae:1c:e1:b6:e1:f2:f0:f7:fc:59:e4:e2:f1:e4:
         ce:9e:41:f4:8c:05:61:88:07:ba:fe:7b:02:d1:a2:4c:34:34:
         29:1b:4b:32:03:5a:c3:b5:6a:92:0d:79:d8:93:bf:ca:3d:d3:
         98:05:bc:e4:49:0b:35:f4:de:d2:0b:0d:aa:e7:de:f8:ad:10:
         35:be:da:4f:d4:11:49:f8:01:5b:8e:de:15:0e:f5:1a:47:fe:
         58:d3:a1:f7:e9:7b:42:47:6f:87:0f:b4:77:0b:60:3b:fc:2f:
         e4:71:64:c6:01:e7:c8:f6:5a:b0:c8:39:44:e4:9b:cb:51:cf:
         20:cb:56:20:e0:63:65:b5:50:ae:f3:f9:9f:b5:33:12:0d:f7:
         18:f7:bb:25:cb:18:24:a9:40:9e:b1:e6:ca:85:d5:75:8b:7c:
         74:5b:d2:11:ce:30:76:46:af:0d:c7:38:3a:ec:d7:83:30:b8:
         36:14:84:4c:39:a7:05:eb:63:a6:7d:43:ac:a5:19:53:37:cc:
         11:c3:e5:8a:0b:3f:de:52:8c:f6:87:a9:56:9b:c0:df:b9:f9:
         0c:20:1b:2c:8f:72:db:31:63:37:a7:5b:a0:5e:dc:1b:d7:64:
         6e:e7:44:99:e0:23:75:18:80:8a:b5:4b:9e:d0:d7:d0:6b:83:
         98:01:4f:4d
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzVCQzExMC8GA1UEBRMoRjBDQ0Y0OTIwNjVFOTMzMDZEM0JGM0JFQTM0MTFBRTRC
Njg3Q0Y2NDAeFw0yNjA3MzAyMDUwMTlaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNmJiOTBhLTM1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1mDY78FYmSS/sZNjDrJ1ZqYn0Tzt79UfQ7Bsap8tGXbPI+FtWQRYEBoDngHEU
33pbOo7gyTnz6qmLWSci99drIYafc64jnsxrlvBoGLychtxEqr11/eeNcVBVEwEJ
CwlXgVS4w9oynXwlHYfoRDTt/tcxIGmUwwQglla2Fh5va4GhKVF2ty2olOC+93FQ
c9tK/azoXOgmt/bbMvl4fdLob7NSVuNQnYjoX7RgZebrvYcitlKVISCyCeHt09Vd
13mOt26o2O1MMuEqpU9vTL7ZMAMTBqVDJAxWjqa9bJMaMsiJiOyhn12DqoegTlSh
bJ4UyNDdgHONCH9ftJnOVGrJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU92hnZB63
x0PSWdikcIJzZqvF41wwHwYDVR0jBBgwFoAU8Mz0kgZekzBtO/O+o0Ea5LaHz2Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNUJDL0YzQjhDRjAwM0VF
MzExRjFBNTNGRDIwQkIyRUU1MjhFLzhNejBrZ1pla3pCdE9fTy1vMEVhNUxhSHoy
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOE16MGtnWmVrekJ0T19PLW8wRWE1TGFIejJRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzVCQy9GM0I4Q0YwMDNFRTMxMUYxQTUzRkQyMEJCMkVFNTI4RS80NUJGOTk3MDhD
NTgxMUYxQTM1N0ZCM0E1QTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADObUYwDQYJKoZIhvcNAQELBQADggEBABpR5aiuHOG24fLw9/xZ5OLx
5M6eQfSMBWGIB7r+ewLRokw0NCkbSzIDWsO1apINediTv8o905gFvORJCzX03tIL
Darn3vitEDW+2k/UEUn4AVuO3hUO9RpH/ljToffpe0JHb4cPtHcLYDv8L+RxZMYB
58j2WrDIOUTkm8tRzyDLViDgY2W1UK7z+Z+1MxIN9xj3uyXLGCSpQJ6x5sqF1XWL
fHRb0hHOMHZGrw3HODrs14MwuDYUhEw5pwXrY6Z9Q6ylGVM3zBHD5YoLP95SjPaH
qVabwN+5+QwgGyyPctsxYzenW6Be3BvXZG7nRJngI3UYgIq1S57Q19Brg5gBT00=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:42:31 2026 by rpki-client