Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/FD36E81421D811F1A613849C243D8C67.roa
File:                     FD36E81421D811F1A613849C243D8C67.roa (raw, json)
Hash identifier:          AyanIH2owi9XoktXnpN++SsbX7s2ltEtD5dPgBcoQVo=
Subject key identifier:   98:D4:41:67:72:B4:58:25:11:63:58:E2:FB:F5:8F:DD:45:D3:EF:D5
Certificate issuer:       /CN=A91DF26F/serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
Certificate serial:       23B2
Authority key identifier: 69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/FD36E81421D811F1A613849C243D8C67.roa
Signing time:             Wed 28 Oct 2026 15:16:15 +0000
ROA not before:           Wed 28 Oct 2026 15:16:15 +0000
ROA not after:            Sun 28 Feb 2027 00:00:00 +0000
asID:                     55330
IP address blocks:        149.54.1.0/24 maxlen: 24
                          149.54.2.0/24 maxlen: 24
                          149.54.3.0/24 maxlen: 24
                          149.54.4.0/24 maxlen: 24
                          149.54.6.0/24 maxlen: 24
                          149.54.7.0/24 maxlen: 24
                          149.54.8.0/24 maxlen: 24
                          149.54.9.0/24 maxlen: 24
                          149.54.10.0/24 maxlen: 24
                          149.54.11.0/24 maxlen: 24
                          149.54.12.0/24 maxlen: 24
                          149.54.13.0/24 maxlen: 24
                          149.54.14.0/24 maxlen: 24
                          149.54.15.0/24 maxlen: 24
                          149.54.16.0/24 maxlen: 24
                          149.54.17.0/24 maxlen: 24
                          149.54.18.0/24 maxlen: 24
                          149.54.19.0/24 maxlen: 24
                          149.54.20.0/24 maxlen: 24
                          149.54.21.0/24 maxlen: 24
                          149.54.22.0/24 maxlen: 24
                          149.54.23.0/24 maxlen: 24
                          149.54.24.0/24 maxlen: 24
                          149.54.25.0/24 maxlen: 24
                          149.54.26.0/24 maxlen: 24
                          149.54.27.0/24 maxlen: 24
                          149.54.28.0/24 maxlen: 24
                          149.54.29.0/24 maxlen: 24
                          149.54.30.0/24 maxlen: 24
                          149.54.31.0/24 maxlen: 24
                          149.54.32.0/24 maxlen: 24
                          149.54.33.0/24 maxlen: 24
                          149.54.34.0/24 maxlen: 24
                          149.54.35.0/24 maxlen: 24
                          149.54.36.0/24 maxlen: 24
                          149.54.37.0/24 maxlen: 24
                          149.54.38.0/24 maxlen: 24
                          149.54.39.0/24 maxlen: 24
                          149.54.40.0/24 maxlen: 24
                          149.54.41.0/24 maxlen: 24
                          149.54.42.0/24 maxlen: 24
                          149.54.43.0/24 maxlen: 24
                          149.54.44.0/24 maxlen: 24
                          149.54.45.0/24 maxlen: 24
                          149.54.46.0/24 maxlen: 24
                          149.54.47.0/24 maxlen: 24
                          149.54.48.0/24 maxlen: 24
                          149.54.49.0/24 maxlen: 24
                          149.54.50.0/24 maxlen: 24
                          149.54.51.0/24 maxlen: 24
                          149.54.52.0/24 maxlen: 24
                          149.54.53.0/24 maxlen: 24
                          149.54.54.0/24 maxlen: 24
                          149.54.55.0/24 maxlen: 24
                          149.54.56.0/24 maxlen: 24
                          149.54.57.0/24 maxlen: 24
                          149.54.58.0/24 maxlen: 24
                          149.54.59.0/24 maxlen: 24
                          149.54.61.0/24 maxlen: 24
                          149.54.62.0/24 maxlen: 24
                          149.54.63.0/24 maxlen: 24
                          149.54.64.0/24 maxlen: 24
                          149.54.65.0/24 maxlen: 24
                          149.54.66.0/24 maxlen: 24
                          149.54.67.0/24 maxlen: 24
                          149.54.68.0/24 maxlen: 24
                          149.54.69.0/24 maxlen: 24
                          149.54.70.0/24 maxlen: 24
                          149.54.71.0/24 maxlen: 24
                          149.54.72.0/24 maxlen: 24
                          149.54.73.0/24 maxlen: 24
                          149.54.74.0/24 maxlen: 24
                          149.54.75.0/24 maxlen: 24
                          149.54.76.0/24 maxlen: 24
                          149.54.77.0/24 maxlen: 24
                          149.54.78.0/24 maxlen: 24
                          149.54.79.0/24 maxlen: 24
                          149.54.80.0/24 maxlen: 24
                          149.54.81.0/24 maxlen: 24
                          149.54.82.0/24 maxlen: 24
                          149.54.83.0/24 maxlen: 24
                          149.54.84.0/24 maxlen: 24
                          149.54.85.0/24 maxlen: 24
                          149.54.86.0/24 maxlen: 24
                          149.54.87.0/24 maxlen: 24
                          149.54.88.0/24 maxlen: 24
                          149.54.89.0/24 maxlen: 24
                          149.54.90.0/24 maxlen: 24
                          149.54.91.0/24 maxlen: 24
                          149.54.92.0/24 maxlen: 24
                          149.54.93.0/24 maxlen: 24
                          149.54.94.0/24 maxlen: 24
                          149.54.95.0/24 maxlen: 24
                          149.54.96.0/24 maxlen: 24
                          149.54.97.0/24 maxlen: 24
                          149.54.98.0/24 maxlen: 24
                          149.54.99.0/24 maxlen: 24
                          149.54.100.0/24 maxlen: 24
                          149.54.101.0/24 maxlen: 24
                          149.54.102.0/24 maxlen: 24
                          149.54.103.0/24 maxlen: 24
                          149.54.104.0/24 maxlen: 24
                          149.54.105.0/24 maxlen: 24
                          149.54.106.0/24 maxlen: 24
                          149.54.107.0/24 maxlen: 24
                          149.54.108.0/24 maxlen: 24
                          149.54.109.0/24 maxlen: 24
                          149.54.110.0/24 maxlen: 24
                          149.54.111.0/24 maxlen: 24
                          149.54.112.0/24 maxlen: 24
                          149.54.113.0/24 maxlen: 24
                          149.54.114.0/24 maxlen: 24
                          149.54.115.0/24 maxlen: 24
                          149.54.116.0/24 maxlen: 24
                          149.54.117.0/24 maxlen: 24
                          149.54.118.0/24 maxlen: 24
                          149.54.119.0/24 maxlen: 24
                          149.54.120.0/24 maxlen: 24
                          149.54.121.0/24 maxlen: 24
                          149.54.122.0/24 maxlen: 24
                          149.54.123.0/24 maxlen: 24
                          149.54.124.0/24 maxlen: 24
                          149.54.125.0/24 maxlen: 24
                          149.54.126.0/24 maxlen: 24
                          149.54.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 14:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9138 (0x23b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=695C45DA42453B4E0B062BF17DBF44725C788387
        Validity
            Not Before: Oct 28 15:16:15 2026 GMT
            Not After : Feb 28 00:00:00 2027 GMT
        Subject: CN=6ae211be-4515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:f5:49:8d:b7:59:24:db:b8:62:bb:88:cd:
                    38:af:e8:7a:80:aa:b1:6d:80:0d:67:fb:40:43:4d:
                    1f:f6:98:b1:ba:e0:09:b8:b9:6e:fc:14:66:a7:59:
                    db:ce:5d:76:3f:8c:b0:88:ba:e7:87:51:6c:ef:56:
                    70:54:bd:7f:5b:f2:f8:a1:85:37:61:f1:9d:7f:be:
                    7a:21:f2:fd:e9:45:3d:f9:2f:db:da:71:a1:9d:44:
                    53:bd:1f:b2:24:a0:0a:eb:83:84:30:f2:8d:5c:6b:
                    18:c8:24:99:0e:95:29:91:8f:a2:0d:31:bc:91:27:
                    94:4e:b9:51:94:53:1b:c6:30:e4:bb:f4:a2:01:c1:
                    db:a8:f8:6d:46:05:8c:e6:15:bd:97:15:1a:c5:a8:
                    b4:6d:be:c8:87:03:09:8d:a3:a7:bd:3b:79:23:46:
                    e5:91:ac:c2:d7:0b:ba:a2:36:e6:f7:19:b0:f7:8e:
                    c0:2f:21:09:96:98:5b:16:f8:21:69:30:49:aa:63:
                    5c:1e:42:8d:dd:cf:98:ab:5b:5f:14:99:66:33:4e:
                    b7:ba:cb:d5:95:fd:ff:89:a4:81:08:e4:45:37:5a:
                    1e:55:72:dc:86:fb:1d:2f:22:d0:71:d9:04:ed:f4:
                    3f:e5:23:a5:b8:b1:7c:0c:4e:92:c1:18:9d:c7:ec:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D4:41:67:72:B4:58:25:11:63:58:E2:FB:F5:8F:DD:45:D3:EF:D5
            X509v3 Authority Key Identifier:
                keyid:69:5C:45:DA:42:45:3B:4E:0B:06:2B:F1:7D:BF:44:72:5C:78:83:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/aVxF2kJFO04LBivxfb9Eclx4g4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aVxF2kJFO04LBivxfb9Eclx4g4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/846EC62EA78E11E580241B62C4F9AE02/FD36E81421D811F1A613849C243D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.54.1.0-149.54.4.255
                  149.54.6.0-149.54.59.255
                  149.54.61.0-149.54.127.255

    Signature Algorithm: sha256WithRSAEncryption
         85:df:2e:00:e1:fb:4d:c0:49:5a:31:44:84:d8:2f:83:b8:13:
         17:e2:f7:96:5f:32:51:09:f8:1c:9d:60:55:90:e7:86:2f:e2:
         44:68:e1:53:0e:36:8c:e7:d1:1a:fb:c9:d3:b8:75:3f:b4:f2:
         81:af:74:c8:db:5f:77:36:14:43:62:a4:e8:c1:50:b6:f2:3b:
         45:a7:d7:93:6d:40:fa:61:d5:84:43:eb:38:ce:80:d0:a9:72:
         fb:c2:71:10:70:b2:0a:14:c4:d9:ea:09:4d:e6:e5:df:26:84:
         5b:21:96:e4:3b:df:26:0c:7d:c5:93:a2:93:6b:23:05:3d:dc:
         e8:6d:e2:3a:ef:1d:49:c0:b4:f7:83:41:1f:8a:47:c2:87:bf:
         43:ee:e8:34:58:2e:70:1b:0e:6c:5a:44:a7:7b:e8:20:07:f2:
         69:61:24:74:26:1d:84:91:ce:91:a5:b2:49:06:fb:0e:73:8f:
         11:8d:fd:58:65:e2:d6:1d:c8:0a:41:08:d4:3e:34:9a:d7:6a:
         68:ca:b5:d1:0c:56:c2:2b:10:bc:76:1c:68:96:03:86:31:40:
         f4:42:fe:d5:ea:31:40:67:d7:34:e4:36:ac:25:28:6f:01:fe:
         ab:02:9e:29:cf:02:86:06:02:91:1c:ff:66:dd:17:7b:92:49:
         a9:5b:9c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:37 2026 by rpki-client