Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B4A61D2A501511F19B7490E3C0833773.roa
File:                     B4A61D2A501511F19B7490E3C0833773.roa (raw, json)
Hash identifier:          ULhHp7+sYXuEA4oAMAlvVXNC4B0eNrv0HmhmrXot1Bo=
Subject key identifier:   B0:99:44:BB:C3:DB:E3:9F:C2:48:88:B8:EE:15:57:7C:4C:5D:19:3B
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       2318
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B4A61D2A501511F19B7490E3C0833773.roa
Signing time:             Fri 15 May 2026 04:22:38 +0000
ROA not before:           Fri 15 May 2026 04:22:38 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     13537
IP address blocks:        220.158.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 04:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8984 (0x2318)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: May 15 04:22:38 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a069f8e-3275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:93:07:f8:fb:97:7c:8a:07:d0:13:18:d3:
                    ce:07:22:b8:a6:80:d0:f9:39:60:1c:e5:d4:36:25:
                    01:a5:2c:b6:65:fe:4d:bd:3c:7e:b3:2e:f3:6e:0f:
                    44:29:4d:1f:e3:16:d6:fb:eb:a7:63:bc:7b:de:e8:
                    4f:8f:e5:d3:c6:14:d2:f7:ae:14:bf:29:64:f1:47:
                    6b:d7:c9:01:46:ac:40:6e:a1:e9:96:58:5f:1a:1c:
                    a8:fa:f2:ca:c0:c7:67:28:f0:27:63:5f:06:30:b3:
                    69:e8:85:b3:b8:92:6d:8e:86:9d:c5:3c:39:3f:27:
                    cb:df:1c:ed:1c:72:2b:02:fe:4a:74:9c:a8:3a:3f:
                    c2:a1:72:79:55:c3:5d:54:8f:db:cc:56:86:72:af:
                    b7:aa:34:ca:74:bd:4f:8a:a2:f4:63:07:fc:7b:c9:
                    08:86:7a:a3:cf:bd:df:8b:4c:fe:27:9a:46:68:0e:
                    84:2b:c9:2d:77:01:54:2a:2c:96:7c:6f:31:bf:07:
                    8f:d0:40:c3:b1:bf:1f:22:82:62:38:c3:eb:dc:46:
                    94:8b:49:04:02:0d:e0:0d:4d:de:c6:fc:82:39:fb:
                    b2:0b:97:81:ef:f6:89:0a:cf:25:09:c6:b9:44:48:
                    d1:0e:6d:40:1f:2c:aa:73:09:96:39:12:e2:b7:f5:
                    c1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:99:44:BB:C3:DB:E3:9F:C2:48:88:B8:EE:15:57:7C:4C:5D:19:3B
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B4A61D2A501511F19B7490E3C0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:b9:ec:1c:bd:5f:82:9d:d2:4e:70:df:3a:a1:2d:2a:ea:
         0a:05:33:e2:51:70:7b:62:ae:21:94:8f:55:81:6d:e6:b3:9e:
         df:06:a4:ad:0b:6a:c6:27:41:56:73:d7:0c:45:ce:76:67:93:
         13:d5:51:07:29:63:e5:13:67:7b:64:7e:f1:02:1f:c4:ae:ac:
         fd:35:45:5b:ae:33:6b:7e:0c:0f:25:af:07:da:60:5d:15:5e:
         06:81:95:4e:5c:c9:7c:6a:53:3b:2c:2e:03:d8:d8:4d:73:7c:
         69:86:e2:f0:8c:d7:0d:da:bc:61:77:8c:19:8c:71:e2:ca:83:
         48:ae:77:fa:99:ca:99:7a:c2:7e:67:2c:51:09:ff:29:46:d3:
         6d:86:7a:76:f1:20:55:e1:b1:38:67:31:80:87:69:1c:ea:11:
         a3:86:3e:c5:0e:3b:6a:bb:39:5b:0d:76:2f:c0:f0:cd:ef:36:
         71:33:f4:c9:1a:df:4c:81:0b:ef:68:9c:a2:3f:9a:d7:93:d3:
         a7:1b:dd:91:83:1e:be:6d:de:41:0b:59:e2:e0:d6:72:9d:07:
         c6:a7:d3:a3:21:cd:f7:c9:dd:95:2d:a1:1d:5e:75:90:91:b1:
         5e:3f:2a:6e:ac:dd:18:49:c8:f6:f4:22:85:55:38:39:0d:bd:
         a8:41:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:50:20 2026 by rpki-client