Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/A2055C2E57D911F0BD42DB6DC4F9AE02.roa
File:                     A2055C2E57D911F0BD42DB6DC4F9AE02.roa (raw, json)
Hash identifier:          1HP1754dk+5RSjaQvu6ezyGMKjRnbLeUT9+IOmEICYw=
Subject key identifier:   65:BB:CC:16:C4:61:B1:80:27:64:AB:DE:46:0B:AD:67:68:EB:1F:6C
Certificate issuer:       /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
Certificate serial:       0C07
Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/A2055C2E57D911F0BD42DB6DC4F9AE02.roa
Signing time:             Tue 02 Jun 2026 19:22:51 +0000
ROA not before:           Tue 02 Jun 2026 19:22:51 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     32043
IP address blocks:        45.126.86.0/24 maxlen: 24
                          45.126.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 18:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4
        Validity
            Not Before: Jun  2 19:22:51 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1f2d8b-d46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:0d:33:82:11:c0:ee:64:71:23:cc:d4:06:
                    3b:e6:91:38:88:5d:cf:c3:90:82:ce:27:94:d4:1f:
                    cc:e9:45:94:00:2d:87:50:89:a9:07:bd:15:20:b1:
                    a6:e1:bb:11:d7:77:a1:78:6b:5f:b7:53:68:a3:01:
                    dd:18:68:86:22:ea:77:9e:ae:13:f0:98:fc:ce:b9:
                    0e:83:eb:50:92:e3:4c:90:b5:3d:c4:b9:a2:c0:aa:
                    6d:0c:f9:2a:4d:b0:50:ad:f1:a9:f3:3a:78:8a:e3:
                    e6:4e:68:35:49:cc:85:a9:72:f5:ae:04:0d:be:e7:
                    f5:d2:76:03:ad:6f:59:8c:1d:cf:da:1c:f9:a3:eb:
                    b7:08:2e:16:b6:d4:bb:84:c8:32:fd:a6:2b:5a:2e:
                    83:b8:12:a1:40:bd:9d:62:9c:af:5d:de:fb:be:09:
                    43:9d:1d:4d:d5:db:8d:1e:2b:70:d8:3e:8a:dc:5d:
                    17:5c:0b:ef:81:3d:d0:1c:fb:db:9f:07:eb:5b:d1:
                    e9:d9:40:5e:cb:6b:7a:be:d8:bf:0e:72:a4:02:8c:
                    dc:ca:73:15:14:e3:da:b1:2e:2e:b7:23:a1:0f:33:
                    06:0b:e6:31:09:42:24:be:85:75:31:9a:df:16:cd:
                    96:3d:30:c5:62:94:4b:6a:ca:92:36:f2:20:ac:89:
                    8d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:CC:16:C4:61:B1:80:27:64:AB:DE:46:0B:AD:67:68:EB:1F:6C
            X509v3 Authority Key Identifier:
                keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/A2055C2E57D911F0BD42DB6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:07:59:ce:27:c0:2d:fa:18:20:b9:8e:e2:43:23:b7:5e:
         74:18:18:87:a2:60:6d:9a:ff:78:6f:15:4f:d8:7d:92:17:ad:
         8b:03:60:b0:97:47:f5:2d:b9:79:ed:16:91:e6:5f:f0:a0:dc:
         4f:9b:5e:e9:e4:46:bf:08:0a:fe:b6:9f:40:fd:34:0f:47:77:
         24:e2:08:77:b4:90:dc:6e:6e:36:53:94:dc:a0:a3:16:27:d1:
         dc:1e:0d:f9:3f:cf:d5:26:47:06:49:36:cd:9d:9b:ef:7c:8c:
         05:04:89:5b:31:08:a2:63:47:d8:f9:1f:8d:93:c5:54:95:df:
         95:16:7f:b1:3e:15:d2:4d:bf:fc:db:2f:c4:13:91:7f:46:8f:
         42:b9:ed:86:3e:df:23:4b:05:d0:ea:b0:29:ea:2e:82:5e:8f:
         d0:ed:28:b7:90:56:4d:df:3a:33:42:fc:91:77:69:1a:53:f4:
         f4:26:ac:ed:1d:36:a3:ed:0a:02:69:67:1b:aa:bc:18:0a:5c:
         6e:e1:e2:00:66:5e:3d:46:ad:13:52:9a:e0:cf:bb:af:97:eb:
         45:66:4f:78:2a:f8:28:89:9e:1d:8a:43:18:6c:8f:29:79:41:
         b7:96:89:71:cb:03:56:85:af:c3:f8:9e:f5:34:8c:a4:a6:15:
         02:8b:8a:66
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw
REZERjYyRTQwHhcNMjYwNjAyMTkyMjUxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFmMmQ4Yi1kNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArc8NM4IRwO5kcSPM1AY75pE4iF3Pw5CCzieU1B/M6UWUAC2HUImpB70VILGm
4bsR13eheGtft1NoowHdGGiGIup3nq4T8Jj8zrkOg+tQkuNMkLU9xLmiwKptDPkq
TbBQrfGp8zp4iuPmTmg1ScyFqXL1rgQNvuf10nYDrW9ZjB3P2hz5o+u3CC4WttS7
hMgy/aYrWi6DuBKhQL2dYpyvXd77vglDnR1N1duNHitw2D6K3F0XXAvvgT3QHPvb
nwfrW9Hp2UBey2t6vti/DnKkAozcynMVFOPasS4utyOhDzMGC+YxCUIkvoV1MZrf
Fs2WPTDFYpRLasqSNvIgrImN+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGW7zBbE
YbGAJ2Sr3kYLrWdo6x9sMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx
OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvQTIwNTVDMkU1
N0Q5MTFGMEJENDJEQjZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBLX5WMA0GCSqGSIb3DQEBCwUAA4IBAQANyQdZzifALfoYILmO4kMj
t150GBiHomBtmv94bxVP2H2SF62LA2Cwl0f1Lbl57RaR5l/woNxPm17p5Ea/CAr+
tp9A/TQPR3ck4gh3tJDcbm42U5TcoKMWJ9HcHg35P8/VJkcGSTbNnZvvfIwFBIlb
MQiiY0fY+R+Nk8VUld+VFn+xPhXSTb/82y/EE5F/Ro9Cue2GPt8jSwXQ6rAp6i6C
Xo/Q7Si3kFZN3zozQvyRd2kaU/T0JqztHTaj7QoCaWcbqrwYClxu4eIAZl49Rq0T
Uprgz7uvl+tFZk94KvgoiZ4dikMYbI8peUG3lolxywNWha/D+J71NIykphUCi4pm
-----END CERTIFICATE-----
Generated at Tue Jun 9 08:12:10 2026 by rpki-client