Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
File:                     AEA7C9C0818911EA81577016C4F9AE02.roa (raw, json)
Hash identifier:          zQccTnouDv5A6wclfHfEY6cMmKILAn1V1UJrrTmuOMo=
Subject key identifier:   D7:1B:61:42:04:DD:A0:80:BC:A4:A3:C1:22:79:43:CB:70:98:BB:DD
Certificate issuer:       /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial:       197A
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa
Signing time:             Sat 08 Aug 2026 16:23:28 +0000
ROA not before:           Sat 08 Aug 2026 16:23:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45352
IP address blocks:        212.8.230.0/24 maxlen: 24
                          212.8.231.0/24 maxlen: 24
                          212.8.254.0/24 maxlen: 24
                          212.8.255.0/24 maxlen: 24
                          212.92.102.0/24 maxlen: 24
                          212.92.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6522 (0x197a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
        Validity
            Not Before: Aug  8 16:23:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a775800-b337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:bf:83:84:a0:e8:5a:c2:c0:de:45:98:62:
                    18:22:29:13:86:94:8c:9b:92:85:9c:c2:d3:ff:fa:
                    05:d3:a2:38:ab:ad:37:ba:28:97:c5:b2:d6:20:e1:
                    18:0a:f2:c7:a1:fc:82:12:52:e1:84:c5:90:33:bf:
                    81:6e:44:6c:d9:ba:f1:11:03:fa:7f:aa:6f:b2:97:
                    3c:10:ef:60:67:64:36:3e:f0:a4:81:af:cb:27:40:
                    d3:bc:75:a2:48:fe:04:5f:91:2e:cd:70:d9:da:7f:
                    a2:82:76:f7:14:9f:26:84:f2:ce:cb:71:87:b1:ed:
                    e4:ec:e5:7f:74:ab:82:f5:13:ce:70:0a:44:a5:26:
                    6a:9f:7d:06:d5:f6:98:64:bf:53:a0:3f:fd:1b:7b:
                    62:88:66:e8:e8:21:43:a5:d0:2a:c2:b5:c6:2d:a7:
                    33:7a:24:6e:88:bf:b6:5d:c0:35:1c:ff:93:91:71:
                    39:f0:e5:fc:54:58:d2:6d:d6:61:7f:88:6b:2c:ff:
                    36:b7:c4:d1:79:d1:99:38:4c:0a:14:b4:f3:96:bf:
                    59:45:0e:5f:ef:fd:42:35:15:e3:05:5a:66:91:6f:
                    56:e8:ef:6f:58:78:1c:74:11:e1:c2:8c:8a:12:07:
                    03:9e:38:97:56:32:31:c1:8f:db:b9:c6:50:d5:87:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1B:61:42:04:DD:A0:80:BC:A4:A3:C1:22:79:43:CB:70:98:BB:DD
            X509v3 Authority Key Identifier:
                keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.8.230.0/23
                  212.8.254.0/23
                  212.92.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:ef:9e:c3:ee:ff:c2:31:35:af:f4:ce:0f:f6:86:d0:d3:
         74:e4:4c:b3:7f:0b:ea:6d:1e:c3:a1:a8:a0:ea:eb:74:d1:9e:
         0a:1f:96:f7:af:16:67:16:b4:1f:2a:2e:d8:a9:1c:e6:d1:92:
         66:e8:e4:54:c4:cc:4e:26:f1:49:39:01:86:65:0e:2a:82:0b:
         d9:cd:b0:8b:9b:91:27:0b:8d:1f:05:be:25:c9:16:e9:19:3d:
         e4:0c:3e:e6:ac:aa:b2:d0:24:0f:0d:5a:e1:c0:13:81:42:0b:
         50:52:6d:f4:ae:bf:99:8b:af:b2:ce:7f:d7:7f:c5:5b:be:72:
         91:5e:3c:ac:31:ba:4e:0b:af:e0:c2:6b:4b:1f:de:a9:e8:51:
         ba:67:52:70:64:ac:f4:11:5d:79:92:50:a9:ce:09:c0:2e:08:
         27:9a:ef:e5:67:b3:4a:74:1d:0f:fa:70:39:e0:f7:4a:51:c6:
         ff:92:db:0b:81:7e:f5:dc:7b:02:43:8a:44:da:b2:68:93:a7:
         92:5a:a5:f5:fa:da:9b:73:51:70:41:18:4f:55:09:bc:9f:11:
         53:2e:ea:83:62:3e:fe:79:87:c8:25:f5:32:8c:d1:02:29:08:
         90:49:ea:5b:60:e3:6a:7e:47:35:8f:a9:6b:05:ed:72:e1:fb:
         50:06:93:e5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICGXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2
MTFDQURBNTEwHhcNMjYwODA4MTYyMzI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc3NTgwMC1iMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlU2/g4Sg6FrCwN5FmGIYIikThpSMm5KFnMLT//oF06I4q603uiiXxbLWIOEY
CvLHofyCElLhhMWQM7+BbkRs2brxEQP6f6pvspc8EO9gZ2Q2PvCkga/LJ0DTvHWi
SP4EX5EuzXDZ2n+ignb3FJ8mhPLOy3GHse3k7OV/dKuC9RPOcApEpSZqn30G1faY
ZL9ToD/9G3tiiGbo6CFDpdAqwrXGLaczeiRuiL+2XcA1HP+TkXE58OX8VFjSbdZh
f4hrLP82t8TRedGZOEwKFLTzlr9ZRQ5f7/1CNRXjBVpmkW9W6O9vWHgcdBHhwoyK
EgcDnjiXVjIxwY/bucZQ1YfMfQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNcbYUIE
3aCAvKSjwSJ5Q8twmLvdMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE
MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE2OTEvNTBDNjkyOTI5RDI0MTFFNzg2MUEyMjZCQzRGOUFFMDIvQUVBN0M5QzA4
MTg5MTFFQTgxNTc3MDE2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQB1AjmAwQB1Aj+AwQB1FxmMA0GCSqGSIb3DQEBCwUAA4IBAQAsxO+e
w+7/wjE1r/TOD/aG0NN05EyzfwvqbR7Doaig6ut00Z4KH5b3rxZnFrQfKi7YqRzm
0ZJm6ORUxMxOJvFJOQGGZQ4qggvZzbCLm5EnC40fBb4lyRbpGT3kDD7mrKqy0CQP
DVrhwBOBQgtQUm30rr+Zi6+yzn/Xf8VbvnKRXjysMbpOC6/gwmtLH96p6FG6Z1Jw
ZKz0EV15klCpzgnALggnmu/lZ7NKdB0P+nA54PdKUcb/ktsLgX713HsCQ4pE2rJo
k6eSWqX1+tqbc1FwQRhPVQm8nxFTLuqDYj7+eYfIJfUyjNECKQiQSepbYONqfkc1
j6lrBe1y4ftQBpPl
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:54:39 2026 by rpki-client