Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa
File:                     E248BDA63C5211EF94184A20C4F9AE02.roa (raw, json)
Hash identifier:          aoDfXs/+Zo3bM4TZQqdH42AnP+MxbUZEFcCO4REaPpo=
Subject key identifier:   38:23:90:96:CB:28:2E:F2:DE:42:D5:87:2E:63:3E:92:60:2C:E7:8C
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       053B
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa
Signing time:             Mon 31 Aug 2026 23:47:43 +0000
ROA not before:           Mon 31 Aug 2026 23:47:43 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     136454
IP address blocks:        116.204.241.0/24 maxlen: 24
                          2400:e640:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Aug 31 23:47:43 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a96129e-f15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:da:fe:c1:71:5e:52:45:ba:19:a9:36:b5:
                    df:d0:3a:ae:63:81:ff:c8:88:a1:7e:14:0b:38:41:
                    2b:e9:69:af:0f:18:44:4b:0f:db:01:e9:7c:ac:f5:
                    0b:34:49:2f:79:6d:90:aa:d8:93:3f:c6:3b:03:a7:
                    b0:a2:93:0f:0f:68:47:bf:ce:63:9e:07:ef:fe:3a:
                    58:d0:77:92:d3:c2:be:73:4f:2b:b5:81:6a:15:12:
                    fa:5b:59:18:87:91:77:14:65:e9:1b:00:0e:4b:39:
                    73:54:e5:62:bd:cc:fa:69:65:a0:7f:f7:bd:e5:d8:
                    7b:57:95:34:f3:31:ab:c3:b5:7d:ce:c8:38:a7:d6:
                    c7:d5:0b:e8:4c:a4:12:87:34:fc:20:75:de:59:a2:
                    a0:7e:60:bd:de:38:01:d1:e1:87:de:57:36:ca:12:
                    5c:3a:5d:7d:f1:e6:65:c2:09:c3:06:ee:b9:ac:7d:
                    20:5a:5a:c2:09:47:f0:e2:9d:d9:44:7c:dc:a4:7d:
                    bd:6f:4f:d6:26:54:3f:9a:37:e4:c8:05:90:32:98:
                    9f:dd:77:c9:6c:8c:45:06:01:5c:cf:8d:0f:13:0a:
                    ad:59:27:7a:69:39:11:3a:9a:35:05:d6:31:e7:e6:
                    e4:2c:18:bf:52:29:b0:39:c7:38:5a:1a:ed:e9:0e:
                    60:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:23:90:96:CB:28:2E:F2:DE:42:D5:87:2E:63:3E:92:60:2C:E7:8C
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/E248BDA63C5211EF94184A20C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.241.0/24
                IPv6:
                  2400:e640:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:2a:dc:c5:88:aa:45:b5:8c:e0:9b:13:a1:b0:01:76:ba:
         84:3f:da:88:a7:35:d5:10:38:43:50:54:50:83:b4:25:b2:9c:
         8b:21:49:a7:60:b2:fd:28:be:00:e7:c4:2b:88:64:68:a6:21:
         f4:d5:03:18:b0:5d:47:78:50:7c:75:56:c3:eb:aa:cd:b1:b6:
         44:0e:07:ff:2f:82:6d:3a:87:11:56:b4:7c:ad:03:24:a1:6c:
         dc:4f:3b:a9:e8:e0:89:c1:2d:89:e1:99:20:e3:7a:15:c0:17:
         93:f1:b1:85:80:e1:b8:a7:3b:a4:c1:1b:c5:d7:3c:06:7c:49:
         5b:9a:f6:b9:b8:58:c7:52:3d:fe:68:3c:f6:15:76:c9:c7:69:
         bd:08:5d:ee:fa:59:54:49:b1:5a:fa:a5:51:f5:8c:01:bd:91:
         e2:0b:58:b6:0d:f9:41:ca:c2:96:03:cb:3b:13:34:b6:5c:09:
         89:bd:c7:c6:2e:34:d9:a9:94:27:52:ec:3b:11:56:34:b7:c6:
         52:c5:87:79:7c:e4:64:17:d7:5a:81:27:96:55:19:6b:5e:49:
         9d:dd:b6:50:36:37:ee:76:71:3c:71:27:de:b4:6b:15:fc:78:
         d3:37:82:8c:10:19:85:24:e0:8d:bb:48:22:28:a1:e4:77:1d:
         6d:cb:91:61
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG
NjExOUYzMEMwHhcNMjYwODMxMjM0NzQzWhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2MTI5ZS1mMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyqza/sFxXlJFuhmpNrXf0DquY4H/yIihfhQLOEEr6WmvDxhESw/bAel8rPUL
NEkveW2QqtiTP8Y7A6ewopMPD2hHv85jngfv/jpY0HeS08K+c08rtYFqFRL6W1kY
h5F3FGXpGwAOSzlzVOVivcz6aWWgf/e95dh7V5U08zGrw7V9zsg4p9bH1QvoTKQS
hzT8IHXeWaKgfmC93jgB0eGH3lc2yhJcOl198eZlwgnDBu65rH0gWlrCCUfw4p3Z
RHzcpH29b0/WJlQ/mjfkyAWQMpif3XfJbIxFBgFcz40PEwqtWSd6aTkROpo1BdYx
5+bkLBi/UimwOcc4Whrt6Q5gkQIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFDgjkJbL
KC7y3kLVhy5jPpJgLOeMMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0
MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvRTI0OEJEQTYz
QzUyMTFFRjk0MTg0QTIwQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM
BAIAATAGAwQAdMzxMA4EAgACMAgDBgQkAOZAEDANBgkqhkiG9w0BAQsFAAOCAQEA
dtEq3MWIqkW1jOCbE6GwAXa6hD/aiKc11RA4Q1BUUIO0JbKciyFJp2Cy/Si+AOfE
K4hkaKYh9NUDGLBdR3hQfHVWw+uqzbG2RA4H/y+CbTqHEVa0fK0DJKFs3E87qejg
icEtieGZION6FcAXk/GxhYDhuKc7pMEbxdc8BnxJW5r2ubhYx1I9/mg89hV2ycdp
vQhd7vpZVEmxWvqlUfWMAb2R4gtYtg35QcrClgPLOxM0tlwJib3Hxi402amUJ1Ls
OxFWNLfGUsWHeXzkZBfXWoEnllUZa15Jnd22UDY37nZxPHEn3rRrFfx40zeCjBAZ
hSTgjbtIIiih5HcdbcuRYQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:05 2026 by rpki-client