Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/BAEB4B28FBDF11EA8B73595BC4F9AE02.roa
File:                     BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (raw, json)
Hash identifier:          ZE36mQ3Jkq2pC4a3mSg2kLjdWKlB/RyGoS5aojx3bv4=
Subject key identifier:   87:FA:51:0F:A6:4F:F8:C7:5D:79:B2:50:C5:D2:84:84:8C:E1:77:3A
Certificate issuer:       /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial:       0992
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/BAEB4B28FBDF11EA8B73595BC4F9AE02.roa
Signing time:             Fri 16 Oct 2026 20:40:47 +0000
ROA not before:           Fri 16 Oct 2026 20:40:47 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     9387
IP address blocks:        116.0.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
                          rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2450 (0x992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
        Validity
            Not Before: Oct 16 20:40:47 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad28bcf-83af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9d:6b:6a:2a:1c:e7:98:29:83:41:af:6d:ff:
                    be:9f:9e:fb:b8:a9:03:48:96:00:98:05:92:b2:84:
                    31:1c:90:3a:83:e7:96:db:4a:62:ff:b4:d2:53:91:
                    c7:4a:c2:a0:4b:d3:20:a9:00:b1:63:5c:ed:51:2e:
                    89:bc:6d:29:30:7c:d6:4f:a4:ef:05:24:27:51:b3:
                    f5:d3:83:22:7e:b9:93:6c:2b:a4:40:e3:59:79:38:
                    fe:fc:0b:a8:0d:42:fe:d9:e9:30:8a:3e:82:64:0f:
                    2c:5a:c9:f5:d8:b3:2f:40:ac:00:c4:36:79:73:80:
                    1f:8b:34:de:68:0a:0c:2b:5d:88:8a:bd:94:71:5e:
                    3a:f1:26:c8:d5:22:2a:fb:c3:8e:3a:dc:74:84:a7:
                    fe:b7:90:7d:8d:35:f7:9d:b6:1f:8b:62:5d:59:ac:
                    97:9e:ee:83:ae:cd:1e:47:5e:0d:88:90:d1:58:24:
                    41:c5:dc:d0:b1:2e:a6:4a:bd:14:6f:77:49:bb:c1:
                    27:46:f2:53:fe:46:03:1a:6c:2a:f7:23:5d:35:85:
                    ec:77:72:9b:11:c5:27:8f:97:24:b9:04:45:14:c2:
                    ea:2b:9c:59:0f:fc:12:01:71:cd:84:6e:bd:70:1b:
                    e2:eb:9c:81:45:9c:9f:58:4e:05:14:a7:8b:de:6d:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:51:0F:A6:4F:F8:C7:5D:79:B2:50:C5:D2:84:84:8C:E1:77:3A
            X509v3 Authority Key Identifier:
                keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/BAEB4B28FBDF11EA8B73595BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:01:a2:19:5a:84:fb:5f:65:20:e9:66:6b:4b:c5:dd:2f:
         db:fe:74:24:14:d0:e4:d3:7c:77:5c:29:1c:2d:41:b3:8c:b1:
         5c:33:19:cd:ad:90:13:99:85:6d:6e:ae:f9:b7:a0:4c:7b:35:
         1d:f7:72:d7:51:d1:c9:93:26:9a:3a:82:bc:4d:fc:e2:ae:cc:
         19:9f:76:b7:7a:a7:d2:b4:b0:06:b0:aa:73:0c:f1:b9:cb:21:
         7a:2c:e0:77:d7:ed:b8:e3:58:fb:f0:55:ad:25:31:3c:6b:0b:
         6e:50:22:13:f9:6f:30:75:0c:74:70:2b:33:f2:ca:07:0f:3e:
         75:5d:26:19:3d:7b:4f:53:1a:40:5a:58:14:34:ab:18:8b:cf:
         29:ad:f7:b5:ad:d2:2d:bc:46:60:5b:70:45:05:a9:72:3d:d2:
         60:82:5f:99:93:48:a3:36:5f:00:60:8a:a1:52:00:77:f4:c9:
         d7:2c:32:37:54:e9:a0:86:48:da:dd:f4:c0:6c:be:92:58:00:
         74:91:ee:41:1e:9c:8b:38:ac:d7:2a:b8:dc:ef:7f:84:91:a2:
         2d:07:97:e7:79:77:95:d1:14:c6:f7:d5:84:41:95:91:19:ad:
         65:31:13:f4:cf:5c:4c:d2:69:98:ab:ce:9d:05:59:7a:f5:95:
         d9:74:c3:4b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB
MTRERjUxMkIwHhcNMjYxMDE2MjA0MDQ3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQyOGJjZi04M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjZ1raioc55gpg0Gvbf++n577uKkDSJYAmAWSsoQxHJA6g+eW20pi/7TSU5HH
SsKgS9MgqQCxY1ztUS6JvG0pMHzWT6TvBSQnUbP104MifrmTbCukQONZeTj+/Auo
DUL+2ekwij6CZA8sWsn12LMvQKwAxDZ5c4AfizTeaAoMK12Iir2UcV468SbI1SIq
+8OOOtx0hKf+t5B9jTX3nbYfi2JdWayXnu6Drs0eR14NiJDRWCRBxdzQsS6mSr0U
b3dJu8EnRvJT/kYDGmwq9yNdNYXsd3KbEcUnj5ckuQRFFMLqK5xZD/wSAXHNhG69
cBvi65yBRZyfWE4FFKeL3m3hKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIf6UQ+m
T/jHXXmyUMXShISM4Xc6MB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1
REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTk2RDkvODBERkRFQzBFNUREMTFFQUIyNDY4RDY1QzRGOUFFMDIvQkFFQjRCMjhG
QkRGMTFFQThCNzM1OTVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdAA8MA0GCSqGSIb3DQEBCwUAA4IBAQB7kAGiGVqE+19lIOlma0vF
3S/b/nQkFNDk03x3XCkcLUGzjLFcMxnNrZATmYVtbq75t6BMezUd93LXUdHJkyaa
OoK8TfzirswZn3a3eqfStLAGsKpzDPG5yyF6LOB31+2441j78FWtJTE8awtuUCIT
+W8wdQx0cCsz8soHDz51XSYZPXtPUxpAWlgUNKsYi88prfe1rdItvEZgW3BFBaly
PdJggl+Zk0ijNl8AYIqhUgB39MnXLDI3VOmghkja3fTAbL6SWAB0ke5BHpyLOKzX
Krjc73+EkaItB5fneXeV0RTG99WEQZWRGa1lMRP0z1xM0mmYq86dBVl69ZXZdMNL
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:51:09 2026 by rpki-client