Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/286AB0F22CB011F084E4A915C4F9AE02.roa
File:                     286AB0F22CB011F084E4A915C4F9AE02.roa (raw, json)
Hash identifier:          XW/veL+aykLoqzCS1Skl+u7OuNFXArsA4MwYWRJWYT4=
Subject key identifier:   40:F7:94:51:6D:44:78:80:DD:BB:72:64:9C:65:24:97:FE:8D:70:2A
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       013F
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/286AB0F22CB011F084E4A915C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:11:47 +0000
ROA not before:           Sat 11 Oct 2025 09:03:12 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153494
IP address blocks:        116.206.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 04:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Oct 11 09:03:12 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45732-88be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:50:38:c4:69:9b:cf:c9:5f:ef:c0:5a:f4:
                    88:40:ec:ee:fd:b8:98:f8:01:0a:48:e4:8d:4e:41:
                    fb:01:01:c0:9d:91:84:1a:b6:71:bd:66:a1:53:ae:
                    bb:22:7e:c6:8e:71:f3:1e:14:25:ed:74:10:67:1f:
                    05:c9:4a:28:2e:c8:3d:9b:03:53:01:e0:55:01:c5:
                    3b:0a:74:41:d8:68:89:d5:f8:5d:03:9a:0d:47:b6:
                    30:4d:df:ee:f1:74:50:3b:7a:07:0a:63:93:83:d4:
                    a4:88:98:7a:35:b6:bc:71:17:b4:5b:9b:c5:9a:fd:
                    a0:ff:d3:e6:ef:3b:8b:16:7a:64:e4:7f:a7:fe:f9:
                    a6:36:88:4c:74:ef:13:6b:d7:b7:59:91:41:30:e6:
                    66:11:67:a2:2c:a6:91:a4:d8:3a:89:7c:c2:b3:d9:
                    c5:75:9c:ba:44:ae:28:1c:d3:5b:51:98:53:2c:63:
                    53:c0:3b:75:9e:57:c3:ac:3b:cc:66:a1:a1:84:d1:
                    3d:58:5c:62:3e:71:be:ee:fe:bb:61:c9:39:74:a3:
                    c2:d5:8f:59:5f:4a:91:fc:a7:b2:5b:90:4c:2f:0e:
                    46:6f:16:6c:e4:e5:c9:45:16:8d:42:fb:84:78:28:
                    c4:cb:21:47:db:94:b8:77:b2:74:1c:f5:9f:c6:00:
                    77:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F7:94:51:6D:44:78:80:DD:BB:72:64:9C:65:24:97:FE:8D:70:2A
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/286AB0F22CB011F084E4A915C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:3d:ab:c4:fe:5e:6d:fc:21:b3:38:0c:d8:61:ba:0e:a5:2a:
         a3:b3:af:88:87:57:34:da:62:31:08:3e:aa:22:00:47:9d:d9:
         26:95:a8:30:14:13:19:47:3d:bc:66:b7:21:35:ca:58:58:ec:
         bf:cd:ab:f7:20:97:ab:67:84:ae:fa:6e:95:ef:d3:ca:31:6e:
         11:8b:f0:29:33:5c:e1:d0:66:a1:5b:66:51:c4:ae:b0:16:4f:
         12:2d:89:96:6a:2e:3a:d2:d1:0a:9c:40:d7:a3:fa:45:25:bb:
         5e:ef:d0:93:61:cb:13:a1:8d:32:ea:d3:33:2f:f6:cf:b2:2d:
         0f:4d:3f:95:96:e3:b0:cd:b8:f7:72:71:41:82:0a:c5:1b:fd:
         54:ef:91:24:cf:98:1f:30:40:97:80:5d:26:0c:a6:39:3a:74:
         8d:31:75:8f:78:d0:4e:c3:4b:9b:ba:22:40:16:b8:40:85:3a:
         1d:93:23:30:c7:99:cd:53:ac:60:65:4b:04:4e:1e:91:c3:86:
         cf:b1:c5:36:45:b0:57:1e:b1:93:0d:27:a0:61:b5:9b:fa:c0:
         08:99:99:3f:2c:7a:45:dc:0f:f2:c2:df:d0:c5:38:ab:14:f0:
         df:ea:03:34:87:40:c1:ea:83:93:87:d8:56:2b:0e:a6:97:d8:
         5e:90:06:9b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYxQTcxMTAvBgNVBAUTKEJBRUY3OEY3OERDN0NCRjlCNzMxMjcwQUFCMTA2OUY1
RTM0MzNDQkIwHhcNMjUxMDExMDkwMzEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTczMi04OGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxg9QOMRpm8/JX+/AWvSIQOzu/biY+AEKSOSNTkH7AQHAnZGEGrZxvWahU667
In7GjnHzHhQl7XQQZx8FyUooLsg9mwNTAeBVAcU7CnRB2GiJ1fhdA5oNR7YwTd/u
8XRQO3oHCmOTg9SkiJh6Nba8cRe0W5vFmv2g/9Pm7zuLFnpk5H+n/vmmNohMdO8T
a9e3WZFBMOZmEWeiLKaRpNg6iXzCs9nFdZy6RK4oHNNbUZhTLGNTwDt1nlfDrDvM
ZqGhhNE9WFxiPnG+7v67Yck5dKPC1Y9ZX0qR/KeyW5BMLw5GbxZs5OXJRRaNQvuE
eCjEyyFH25S4d7J0HPWfxgB3xwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFED3lFFt
RHiA3btyZJxlJJf+jXAqMB8GA1UdIwQYMBaAFLrvePeNx8v5tzEnCqsQafXjQzy7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjFBNy8wRjQ5OTIwNDVC
QTExMUVGOUE3OUU5NjFDNEY5QUUwMi91dTk0OTQzSHlfbTNNU2NLcXhCcDllTkRQ
THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V1OTQ5NDNIeV9tM01TY0txeEJwOWVORFBMcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjYxQTcvMEY0OTkyMDQ1QkExMTFFRjlBNzlFOTYxQzRGOUFFMDIvMjg2QUIwRjIy
Q0IwMTFGMDg0RTRBOTE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCdM40MA0GCSqGSIb3DQEBCwUAA4IBAQCSPavE/l5t/CGzOAzYYboO
pSqjs6+Ih1c02mIxCD6qIgBHndkmlagwFBMZRz28ZrchNcpYWOy/zav3IJerZ4Su
+m6V79PKMW4Ri/ApM1zh0GahW2ZRxK6wFk8SLYmWai460tEKnEDXo/pFJbte79CT
YcsToY0y6tMzL/bPsi0PTT+VluOwzbj3cnFBggrFG/1U75Ekz5gfMECXgF0mDKY5
OnSNMXWPeNBOw0ubuiJAFrhAhTodkyMwx5nNU6xgZUsETh6Rw4bPscU2RbBXHrGT
DSegYbWb+sAImZk/LHpF3A/ywt/QxTirFPDf6gM0h0DB6oOTh9hWKw6ml9hekAab
-----END CERTIFICATE-----
Generated at Sat Mar 21 22:38:55 2026 by rpki-client