Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa
File:                     7C76080E08D611EE82522448C4F9AE02.roa (raw, json)
Hash identifier:          RXzPjqfGnjMFGEe5IJDvXNa9x/aOyMwECSrglqs4E24=
Subject key identifier:   97:B0:B6:CC:3A:6E:DB:D1:F9:09:BE:5A:66:FF:61:03:55:75:26:EE
Certificate issuer:       /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
Certificate serial:       084D
Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa
Signing time:             Sat 16 May 2026 21:26:04 +0000
ROA not before:           Sat 16 May 2026 21:26:04 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        51.162.4.0/22 maxlen: 22
                          51.162.8.0/21 maxlen: 21
                          51.162.16.0/20 maxlen: 20
                          51.162.32.0/21 maxlen: 21
                          51.162.48.0/22 maxlen: 22
                          51.162.64.0/21 maxlen: 21
                          51.162.80.0/21 maxlen: 21
                          51.162.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 21:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2
        Validity
            Not Before: May 16 21:26:04 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a08e0ec-ea1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:98:c6:d7:f6:88:81:51:2d:d9:3b:16:ad:
                    11:ea:ca:ad:d5:ad:8f:d2:fb:90:a3:67:3f:df:05:
                    4b:9e:3b:67:6e:56:e4:a4:7a:c7:e8:27:e2:c6:e0:
                    74:76:7a:cf:33:1a:c3:21:f4:a6:fe:ca:f3:44:43:
                    78:1d:fb:32:9b:a4:83:ea:d2:12:99:44:48:a9:ca:
                    54:90:56:e9:52:19:77:f7:89:90:83:bb:43:ef:ed:
                    bf:31:7c:24:2a:3f:74:b7:af:a4:33:c0:77:93:f2:
                    c2:fa:52:27:dd:5d:b7:8d:b6:a9:30:29:8c:15:bf:
                    88:01:0b:72:f0:40:a6:0e:56:1f:45:61:3b:0e:0f:
                    a3:da:87:10:66:8d:c7:da:17:5a:80:17:70:24:e8:
                    4e:3d:22:2d:70:d2:01:3a:9a:ba:32:ae:fb:a4:bb:
                    30:12:13:32:88:88:1e:df:2c:54:ba:f1:42:e4:49:
                    64:8a:56:05:17:e9:ce:39:70:da:7a:24:58:f3:9a:
                    4a:7f:17:04:6a:c7:5a:39:5f:d1:0d:3e:ce:b7:a3:
                    5a:6b:50:3f:6d:c3:74:d4:15:2b:a8:d6:ca:29:28:
                    91:26:f1:9d:57:db:fa:09:68:a1:c2:5a:39:a9:8b:
                    b6:2d:e8:a7:63:57:4a:fb:29:03:19:c7:8c:9b:02:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B0:B6:CC:3A:6E:DB:D1:F9:09:BE:5A:66:FF:61:03:55:75:26:EE
            X509v3 Authority Key Identifier:
                keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.162.4.0-51.162.39.255
                  51.162.48.0/22
                  51.162.64.0/21
                  51.162.80.0/21
                  51.162.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:ad:bd:a2:d3:b5:1d:f7:e1:cc:71:12:09:59:3c:dd:d9:1a:
         f9:cb:17:ee:e1:6d:a8:8a:f8:37:17:76:53:ac:67:72:3a:e9:
         33:4c:43:45:54:98:01:45:f8:c0:48:c6:08:3f:b6:14:e4:a9:
         10:be:ab:da:b0:0d:be:ff:53:db:10:3f:3d:1b:e1:a7:a0:30:
         14:1e:12:25:ca:4e:2d:af:8d:6e:5b:e1:c7:a5:fa:1a:86:32:
         52:be:9b:b2:c4:6e:e4:62:0d:6c:23:4d:35:99:d5:ca:af:40:
         40:c2:4c:8e:c3:b5:bb:f3:0c:d2:87:0a:e7:f4:1d:fa:35:29:
         37:9e:fc:bb:3b:a8:a3:1d:14:fa:35:67:d2:3d:f5:ff:ce:d5:
         d6:b4:42:30:75:a5:c6:de:cb:02:40:e1:3b:cf:2a:18:7d:9d:
         c6:47:05:75:a7:b8:b3:06:09:e9:77:56:ca:c8:de:21:86:ad:
         c1:13:d0:78:ed:df:f4:2d:c6:72:65:c5:e8:ca:e1:f6:37:6e:
         2f:c2:15:5b:20:9e:e5:2f:38:85:41:11:ff:3b:6d:09:76:61:
         3f:45:55:fb:01:23:4f:75:4a:32:0d:05:6d:14:25:fa:3e:d1:
         37:d9:03:69:d5:9f:73:26:ec:77:d0:ca:fe:1a:b9:08:b0:24:
         ee:82:6b:c7
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICCE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5
MzU0MkE3RjIwHhcNMjYwNTE2MjEyNjA0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA4ZTBlYy1lYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApoKYxtf2iIFRLdk7Fq0R6sqt1a2P0vuQo2c/3wVLnjtnblbkpHrH6CfixuB0
dnrPMxrDIfSm/srzREN4Hfsym6SD6tISmURIqcpUkFbpUhl394mQg7tD7+2/MXwk
Kj90t6+kM8B3k/LC+lIn3V23jbapMCmMFb+IAQty8ECmDlYfRWE7Dg+j2ocQZo3H
2hdagBdwJOhOPSItcNIBOpq6Mq77pLswEhMyiIge3yxUuvFC5ElkilYFF+nOOXDa
eiRY85pKfxcEasdaOV/RDT7Ot6Naa1A/bcN01BUrqNbKKSiRJvGdV9v6CWihwlo5
qYu2LeinY1dK+ykDGceMmwKN9QIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFJewtsw6
btvR+Qm+Wmb/YQNVdSbuMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0
OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REJBRjEvODZEQjJDQ0MyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvN0M3NjA4MEUw
OEQ2MTFFRTgyNTIyNDQ4QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs
BAIAATAmMAwDBAIzogQDBAMzoiADBAIzojADBAMzokADBAMzolADBAIzonwwDQYJ
KoZIhvcNAQELBQADggEBABGtvaLTtR334cxxEglZPN3ZGvnLF+7hbaiK+DcXdlOs
Z3I66TNMQ0VUmAFF+MBIxgg/thTkqRC+q9qwDb7/U9sQPz0b4aegMBQeEiXKTi2v
jW5b4cel+hqGMlK+m7LEbuRiDWwjTTWZ1cqvQEDCTI7DtbvzDNKHCuf0Hfo1KTee
/Ls7qKMdFPo1Z9I99f/O1da0QjB1pcbeywJA4TvPKhh9ncZHBXWnuLMGCel3VsrI
3iGGrcET0Hjt3/QtxnJlxejK4fY3bi/CFVsgnuUvOIVBEf87bQl2YT9FVfsBI091
SjINBW0UJfo+0TfZA2nVn3Mm7HfQyv4auQiwJO6Ca8c=
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:18:59 2026 by rpki-client