Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/73C6444A12FF11F195EAA2BD143D8C67.roa
File:                     73C6444A12FF11F195EAA2BD143D8C67.roa (raw, json)
Hash identifier:          w3scKDbQYjpLx94ZRaab40eW/UhRdD7Q5ZODJkqNtIg=
Subject key identifier:   95:41:B0:C4:A3:A5:C9:8F:F1:5B:9C:CB:73:8A:4F:C9:D4:3F:8B:B8
Certificate issuer:       /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial:       081E
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/73C6444A12FF11F195EAA2BD143D8C67.roa
Signing time:             Sun 01 Mar 2026 14:09:11 +0000
ROA not before:           Thu 26 Feb 2026 10:39:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135137
IP address blocks:        51.162.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
        Validity
            Not Before: Feb 26 10:39:39 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44887-837b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:2e:97:03:06:a5:f3:f0:8e:13:07:4c:1e:
                    43:74:a0:7b:27:eb:2c:4c:9d:21:3b:9d:47:c7:6c:
                    b2:f0:c6:a6:59:c9:5f:51:12:93:38:37:71:75:a8:
                    4a:9f:16:55:02:e7:9a:d0:64:cb:7e:82:1d:f2:72:
                    64:84:b6:4b:59:b5:42:04:a0:eb:93:80:45:d9:fe:
                    ef:0a:78:e7:d8:ca:a4:81:06:44:a6:c2:26:02:49:
                    a0:21:e7:25:16:bf:7a:71:a7:82:c5:1e:98:b6:4d:
                    d4:a0:0a:cf:20:4b:9c:e1:df:3b:c9:86:2a:41:f3:
                    39:9c:50:6b:23:80:f2:81:c7:79:91:1b:47:b1:2c:
                    2b:38:90:91:c2:45:f7:06:c1:0b:57:43:59:69:7b:
                    d3:b9:c6:af:bf:b2:aa:c3:d3:cd:c0:db:1e:7d:cb:
                    cc:a6:d2:82:f0:06:a0:aa:e2:69:d5:70:11:17:13:
                    9f:75:a5:97:62:fb:7c:e5:ed:ea:de:ce:29:e2:1c:
                    37:0d:b3:88:c7:8b:78:cd:bd:14:83:8a:cb:65:27:
                    1b:b5:7c:52:f9:a1:ca:c0:4c:e1:ac:a8:82:e2:ed:
                    af:8a:93:e1:e0:c5:aa:bb:9c:2d:a2:82:d8:e1:60:
                    e2:3d:a4:96:42:3a:de:f5:c7:72:4d:1e:aa:7a:a1:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:41:B0:C4:A3:A5:C9:8F:F1:5B:9C:CB:73:8A:4F:C9:D4:3F:8B:B8
            X509v3 Authority Key Identifier:
                keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/73C6444A12FF11F195EAA2BD143D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.162.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:57:74:cc:4a:2f:50:5f:7e:e1:e0:51:c3:49:fe:bf:45:0d:
         9f:e4:b6:92:29:90:bc:a2:9f:30:c9:3b:c8:9d:30:49:99:b8:
         a4:53:34:56:95:1c:8b:47:e9:0d:3d:4d:27:5a:f9:9b:c5:45:
         22:bb:0e:a8:23:ed:49:e9:63:90:02:16:59:a8:92:44:ee:02:
         44:f4:2c:83:2e:b3:84:29:11:ee:dc:9e:d5:c9:33:09:3c:83:
         b8:c6:11:72:11:25:04:44:75:b8:1b:c3:b8:20:f1:b9:48:93:
         95:b4:25:32:1d:fd:61:7e:10:6e:08:2a:61:c6:7e:09:b5:0d:
         22:b9:e6:c8:64:86:f7:3d:43:f3:1b:0b:68:f0:51:4a:71:3d:
         e8:24:05:78:cb:fd:be:13:e6:cd:1b:a1:fe:58:cc:38:a1:ca:
         ff:da:6d:8a:f6:fc:ae:37:2c:8f:29:0e:59:7e:77:8a:93:20:
         d5:2d:db:59:3e:e3:66:e4:a8:1a:5c:06:c2:06:cf:b5:ef:38:
         55:a6:09:34:1c:25:cb:a5:ca:ee:7d:78:06:2d:c3:49:3c:62:
         a1:d1:01:1b:ad:7b:e0:a1:a5:6e:3f:b1:fe:4d:50:9e:d0:32:
         21:e1:6d:bc:9e:c5:d5:8c:1b:5f:03:d9:e6:63:f9:ed:09:77:
         fa:cf:a8:80
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5
MzU0MkE3RjIwHhcNMjYwMjI2MTAzOTM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDg4Ny04MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHMulwMGpfPwjhMHTB5DdKB7J+ssTJ0hO51Hx2yy8MamWclfURKTODdxdahK
nxZVAuea0GTLfoId8nJkhLZLWbVCBKDrk4BF2f7vCnjn2MqkgQZEpsImAkmgIecl
Fr96caeCxR6Ytk3UoArPIEuc4d87yYYqQfM5nFBrI4Dygcd5kRtHsSwrOJCRwkX3
BsELV0NZaXvTucavv7Kqw9PNwNsefcvMptKC8AagquJp1XARFxOfdaWXYvt85e3q
3s4p4hw3DbOIx4t4zb0Ug4rLZScbtXxS+aHKwEzhrKiC4u2vipPh4MWqu5wtooLY
4WDiPaSWQjre9cdyTR6qeqG9rwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJVBsMSj
pcmP8Vucy3OKT8nUP4u4MB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REJBRjEvODZEQjJDQ0MyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvNzNDNjQ0NEEx
MkZGMTFGMTk1RUFBMkJEMTQzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAM6JQMA0GCSqGSIb3DQEBCwUAA4IBAQBjV3TMSi9QX37h4FHDSf6/
RQ2f5LaSKZC8op8wyTvInTBJmbikUzRWlRyLR+kNPU0nWvmbxUUiuw6oI+1J6WOQ
AhZZqJJE7gJE9CyDLrOEKRHu3J7VyTMJPIO4xhFyESUERHW4G8O4IPG5SJOVtCUy
Hf1hfhBuCCphxn4JtQ0iuebIZIb3PUPzGwto8FFKcT3oJAV4y/2+E+bNG6H+WMw4
ocr/2m2K9vyuNyyPKQ5ZfneKkyDVLdtZPuNm5KgaXAbCBs+17zhVpgk0HCXLpcru
fXgGLcNJPGKh0QEbrXvgoaVuP7H+TVCe0DIh4W28nsXVjBtfA9nmY/ntCXf6z6iA
-----END CERTIFICATE-----
Generated at Tue Mar 3 18:35:33 2026 by rpki-client