Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
File:                     94EC9E22BEF311F0A6F14E84C4F9AE02.roa (raw, json)
Hash identifier:          jLSqDdcG0AQq/rzP9wArGf39t8AjysMfIb5LgZiEQeg=
Subject key identifier:   A6:9F:05:53:71:01:C6:52:EA:54:04:61:83:CA:A9:25:32:CB:B0:C6
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       0912
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:09:05 +0000
ROA not before:           Tue 11 Nov 2025 11:43:03 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     198504
IP address blocks:        116.0.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 20:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322 (0x912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: Nov 11 11:43:03 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a480c1-7f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:eb:26:5d:ca:05:6a:c7:6a:98:c7:19:56:
                    a0:26:a0:cd:c2:a6:42:84:e9:45:ee:78:06:3f:fe:
                    b4:5a:e7:ef:b9:cb:58:8a:ac:9d:16:21:83:7b:7e:
                    b9:f7:95:d5:b5:89:7d:e2:43:d3:3c:f6:74:79:85:
                    1e:66:2e:49:a4:f8:ba:1a:75:ea:ba:82:2d:ec:0b:
                    47:78:62:79:b3:b3:4c:91:37:29:65:96:fc:4b:c7:
                    05:bf:be:6e:96:9c:eb:dc:d5:46:d6:bf:f2:3a:b3:
                    6c:42:47:01:57:3e:73:87:da:ce:36:12:c1:12:6b:
                    2b:b9:36:88:ba:2b:25:f2:f9:16:ab:d8:51:22:f2:
                    35:c0:76:b5:f7:72:bd:01:49:bf:d4:cb:0d:bb:58:
                    ae:90:54:ca:b5:13:5f:d9:05:d4:8b:41:75:04:20:
                    70:d6:e7:cc:b2:a1:f3:bc:d5:a1:61:19:7e:ca:17:
                    43:a5:a8:b5:20:1f:8a:14:6d:04:70:8f:6f:e6:02:
                    5d:d7:e5:8c:39:a3:2f:2c:f7:90:19:f1:cf:20:a9:
                    20:88:e7:23:0c:8c:3f:ec:7b:30:9e:a0:51:8c:c7:
                    78:00:17:e8:94:c6:a3:2e:f3:cf:8d:a6:70:5e:01:
                    59:e1:f3:da:5a:64:7c:ec:86:4e:42:78:0e:ab:5c:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:05:53:71:01:C6:52:EA:54:04:61:83:CA:A9:25:32:CB:B0:C6
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/94EC9E22BEF311F0A6F14E84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:80:97:92:ba:f5:6c:27:fe:84:3f:51:63:94:d0:28:cb:52:
         ba:cc:11:e5:31:61:5f:bd:6a:eb:b7:5a:22:85:22:3f:ab:c1:
         2b:97:d5:7f:61:4a:05:9e:3c:0d:d3:65:62:a7:b1:59:5e:38:
         9f:13:7e:25:e3:b4:a8:a2:ae:1f:bf:18:1d:17:c4:93:6f:19:
         31:07:10:71:b5:64:5e:a5:d7:8b:77:dc:6e:ba:20:ab:e0:8e:
         5d:4c:6d:b4:08:d3:22:a1:52:20:47:eb:10:c8:00:ad:57:5d:
         73:ba:85:02:3a:3e:4a:e1:77:7d:d3:7c:03:e9:1c:e8:d2:64:
         94:00:08:af:3f:5a:02:e7:a6:d5:b1:c9:ff:de:1f:3a:d0:ec:
         fa:28:e7:44:fe:6e:0c:28:c1:4a:08:18:da:53:56:ba:6f:37:
         70:51:17:5d:e5:f6:97:62:ea:93:b8:f0:07:47:a6:3f:fc:62:
         a9:f6:7b:1f:21:a6:37:25:5d:8c:2c:80:9d:fa:a3:5f:f1:60:
         a1:5c:a3:07:86:a0:45:2e:c9:ca:ed:db:8f:aa:bf:99:bc:f8:
         bd:78:47:dc:71:2b:f3:de:9f:26:65:09:6d:8c:2c:6a:92:17:
         f7:b2:40:07:6e:5f:b0:b5:61:28:9d:65:71:0a:28:00:09:da:
         ac:3e:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:23:39 2026 by rpki-client