Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/32C41236BB2111F1937F0CF76711F970.roa
File:                     32C41236BB2111F1937F0CF76711F970.roa (raw, json)
Hash identifier:          luXmjmSSHxX11GbYyKoo5cdtKquMQqR13UakhBWIsIM=
Subject key identifier:   B5:8F:9A:12:20:86:5C:80:58:63:00:2B:23:85:16:F0:DA:20:EF:FF
Certificate issuer:       /CN=A91E0E7D/serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0
Certificate serial:       18
Authority key identifier: DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/32C41236BB2111F1937F0CF76711F970.roa
Signing time:             Mon 28 Sep 2026 09:44:29 +0000
ROA not before:           Mon 28 Sep 2026 09:44:29 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4755
IP address blocks:        163.52.46.0/23 maxlen: 23
                          163.52.46.0/24 maxlen: 24
                          163.52.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 09:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0E7D, serialNumber=DB1FF9A2842ADF00CA101413C79A6F00216C5AF0
        Validity
            Not Before: Sep 28 09:44:29 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aba36fc-9eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5c:90:59:aa:a6:42:64:ad:bf:ef:8d:93:c7:
                    83:bb:6c:03:ca:90:c2:61:dc:f7:17:2f:82:64:49:
                    b2:eb:b3:b1:82:50:1f:33:0d:b2:dc:40:cd:0d:80:
                    7a:f4:c4:b1:20:95:72:df:b0:b3:18:7e:c1:56:c3:
                    0f:ce:b1:65:8b:fa:39:d1:6e:ac:6c:8e:18:33:9e:
                    49:a2:52:1e:86:f7:06:04:ed:fb:b0:98:6f:8e:93:
                    22:f6:e5:c4:00:6f:97:17:03:b8:b2:64:81:0d:54:
                    61:2d:16:e8:05:a5:70:ae:7e:c3:0a:5a:b3:f2:67:
                    af:4f:44:50:61:fd:04:9b:0c:e2:1a:8f:63:9a:3d:
                    ab:ae:5e:8e:a8:02:e7:6a:fa:c6:fe:2e:bb:01:db:
                    be:08:9e:a7:a3:ce:c0:4a:a8:b4:53:f9:28:21:0c:
                    f5:d1:df:68:e7:e8:16:ea:81:52:af:3e:bf:05:e9:
                    7e:0d:82:ce:b5:53:b4:50:9b:7a:84:5d:c0:ab:38:
                    5c:7e:0d:0c:ba:58:04:bc:bb:05:77:da:91:6b:e0:
                    aa:6c:ce:3e:e1:2c:4f:27:52:0a:fb:78:7d:9f:ca:
                    5e:46:c0:e8:a6:55:06:48:da:ae:a4:0b:ef:50:37:
                    18:8d:7c:4b:1f:9c:e4:af:d8:20:98:d9:8c:61:4d:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:9A:12:20:86:5C:80:58:63:00:2B:23:85:16:F0:DA:20:EF:FF
            X509v3 Authority Key Identifier:
                keyid:DB:1F:F9:A2:84:2A:DF:00:CA:10:14:13:C7:9A:6F:00:21:6C:5A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/2x_5ooQq3wDKEBQTx5pvACFsWvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x_5ooQq3wDKEBQTx5pvACFsWvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E7D/596CD54E9FD311F1B1A6128C5811F970/32C41236BB2111F1937F0CF76711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:44:50:5c:01:89:e5:46:89:54:6e:f5:89:01:72:bf:51:01:
         74:cc:48:ba:b6:82:69:c3:70:08:86:74:a0:83:49:74:d0:e4:
         9d:6b:f3:df:d2:98:e7:1b:b3:81:13:4c:a5:13:26:a0:7e:5e:
         5b:33:c1:36:cf:17:92:46:54:cd:13:f2:9a:c4:68:99:09:ab:
         0a:66:d5:1a:bb:7e:4a:d6:27:c8:e9:be:0c:1a:43:09:7e:4c:
         d8:43:5c:3c:87:5b:f5:14:12:f7:8f:50:c6:fd:19:e2:b9:cf:
         9d:ab:03:76:d8:41:be:ea:d7:31:04:5a:ee:59:f4:b1:7a:79:
         f3:91:6c:77:5d:85:6c:92:56:c7:52:c5:42:56:84:6a:6b:3a:
         ea:5a:e3:d1:a5:8e:ed:74:ac:1a:5a:aa:e9:8d:8b:4a:4e:bd:
         df:76:17:be:fd:f3:f1:75:cf:3d:4a:5c:1e:aa:c6:90:5f:4e:
         bd:f3:0e:7d:24:bd:00:63:d4:9b:7d:cc:3f:e2:70:5e:6b:57:
         d4:90:7f:6c:14:87:90:69:db:dc:cc:98:30:0e:50:40:96:eb:
         d2:32:21:42:65:85:37:8a:3e:41:d2:19:77:48:aa:c5:1f:f0:
         d3:f0:bf:79:92:2a:f0:4e:ca:98:d9:87:36:11:c8:c5:a0:70:
         f3:cb:99:78
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MEU3RDExMC8GA1UEBRMoREIxRkY5QTI4NDJBREYwMENBMTAxNDEzQzc5QTZGMDAy
MTZDNUFGMDAeFw0yNjA5MjgwOTQ0MjlaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYmEzNmZjLTllYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCRXJBZqqZCZK2/742Tx4O7bAPKkMJh3PcXL4JkSbLrs7GCUB8zDbLcQM0NgHr0
xLEglXLfsLMYfsFWww/OsWWL+jnRbqxsjhgznkmiUh6G9wYE7fuwmG+OkyL25cQA
b5cXA7iyZIENVGEtFugFpXCufsMKWrPyZ69PRFBh/QSbDOIaj2OaPauuXo6oAudq
+sb+LrsB274InqejzsBKqLRT+SghDPXR32jn6BbqgVKvPr8F6X4Ngs61U7RQm3qE
XcCrOFx+DQy6WAS8uwV32pFr4Kpszj7hLE8nUgr7eH2fyl5GwOimVQZI2q6kC+9Q
NxiNfEsfnOSv2CCY2YxhTeK1AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUtY+aEiCG
XIBYYwArI4UW8Nog7/8wHwYDVR0jBBgwFoAU2x/5ooQq3wDKEBQTx5pvACFsWvAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwRTdELzU5NkNENTRFOUZE
MzExRjFCMUE2MTI4QzU4MTFGOTcwLzJ4XzVvb1FxM3dES0VCUVR4NXB2QUNGc1d2
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMnhfNW9vUXEzd0RLRUJRVHg1cHZBQ0ZzV3ZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEU3RC81OTZDRDU0RTlGRDMxMUYxQjFBNjEyOEM1ODExRjk3MC8zMkM0MTIzNkJC
MjExMUYxOTM3RjBDRjc2NzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGjNC4wDQYJKoZIhvcNAQELBQADggEBAENEUFwBieVGiVRu9YkBcr9R
AXTMSLq2gmnDcAiGdKCDSXTQ5J1r89/SmOcbs4ETTKUTJqB+XlszwTbPF5JGVM0T
8prEaJkJqwpm1Rq7fkrWJ8jpvgwaQwl+TNhDXDyHW/UUEvePUMb9GeK5z52rA3bY
Qb7q1zEEWu5Z9LF6efORbHddhWySVsdSxUJWhGprOupa49Glju10rBpaqumNi0pO
vd92F7798/F1zz1KXB6qxpBfTr3zDn0kvQBj1Jt9zD/icF5rV9SQf2wUh5Bp29zM
mDAOUECW69IyIUJlhTeKPkHSGXdIqsUf8NPwv3mSKvBOypjZhzYRyMWgcPPLmXg=
-----END CERTIFICATE-----
Generated at Sat Oct 24 07:10:31 2026 by rpki-client