Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa
File:                     A3FCB4646AF811F084208830C4F9AE02.roa (raw, json)
Hash identifier:          JAiPWOFxcmGrI/Ag2pNPkau1v6DYUSQ0ojsFK11ZmcE=
Subject key identifier:   CF:B3:27:A7:EC:91:AE:99:59:1E:C0:56:4B:1C:E4:17:B2:D5:40:63
Certificate issuer:       /CN=A91F185F/serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
Certificate serial:       06D6
Authority key identifier: 58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:34:44 +0000
ROA not before:           Sun 27 Jul 2025 14:47:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49304
IP address blocks:        202.8.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 21:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F185F, serialNumber=58E33F0D5A326881140715D1316E01DEAF24AD0F
        Validity
            Not Before: Jul 27 14:47:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a43264-a45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:8f:7f:4f:dd:2c:98:87:9c:13:51:72:68:
                    29:ca:a5:96:98:85:6b:a2:7d:a7:9a:8e:99:bb:1f:
                    a2:6c:68:de:bf:f1:15:11:ff:0e:c5:48:57:0d:1f:
                    11:f0:eb:80:ff:18:fc:07:6d:c6:b5:ff:63:c6:33:
                    a4:7f:8a:d1:11:34:a3:53:1a:d5:e4:1a:da:13:49:
                    a2:e4:81:4a:dd:60:cb:ea:a2:cd:75:11:ca:da:36:
                    50:84:ba:2e:73:98:50:b5:49:aa:95:a5:f0:52:c8:
                    00:27:72:84:a4:32:e6:34:8f:a0:b5:bf:2f:4a:10:
                    79:de:fd:c0:21:bc:3a:b7:86:37:61:a5:35:c4:7d:
                    ee:db:10:0d:bb:19:0f:95:87:c2:30:61:98:45:d3:
                    7a:52:90:b0:42:f0:3d:ba:33:f1:bc:9f:db:d0:85:
                    e6:1e:6f:d7:ce:b9:8b:e1:04:a8:b8:11:80:96:11:
                    cc:33:c3:c7:ce:27:36:0b:14:73:e2:34:46:0c:79:
                    14:1f:a8:f7:0e:5b:91:cc:b0:05:10:85:bf:f0:08:
                    5f:7d:09:a1:48:ec:18:da:0b:ad:3d:2e:fd:76:8b:
                    a1:49:d6:c1:02:cb:98:56:1b:08:01:88:81:ff:fe:
                    bb:18:e3:aa:06:4a:38:89:1e:8b:51:62:04:4f:a6:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B3:27:A7:EC:91:AE:99:59:1E:C0:56:4B:1C:E4:17:B2:D5:40:63
            X509v3 Authority Key Identifier:
                keyid:58:E3:3F:0D:5A:32:68:81:14:07:15:D1:31:6E:01:DE:AF:24:AD:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/WOM_DVoyaIEUBxXRMW4B3q8krQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOM_DVoyaIEUBxXRMW4B3q8krQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F185F/700BED9C9EC811EBB7016448C4F9AE02/A3FCB4646AF811F084208830C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.8.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:16:42:1c:a5:94:d5:57:4d:60:6f:e1:7b:b9:9b:cc:4f:b5:
         70:33:93:8b:2f:a4:1a:fe:61:9b:ab:b9:9a:2f:37:22:ec:40:
         13:10:e4:91:71:8d:c0:da:00:f5:32:35:0f:52:81:7c:09:eb:
         0c:45:77:4d:04:a2:dd:15:7b:c1:67:64:aa:a7:bc:2f:9d:d5:
         8b:0f:4c:dc:ce:59:3c:cd:74:8d:80:b8:09:dd:a0:72:6f:81:
         b0:c0:06:b4:3a:40:85:92:21:e5:55:d8:9b:79:86:55:98:85:
         60:00:c9:9d:12:0f:c5:9d:2e:11:c6:a5:aa:29:1c:6e:36:82:
         f0:a6:d5:19:3e:1d:84:10:34:ca:93:f3:0c:07:02:f7:46:96:
         78:9a:ba:5c:80:88:40:1a:2b:54:ec:0c:b7:aa:e9:20:d1:2f:
         a4:60:f6:1c:72:24:25:3e:0c:db:07:45:31:9d:e6:b9:b2:77:
         a5:87:1a:c6:49:63:de:14:90:40:43:48:c2:44:0c:96:59:ae:
         63:a1:0b:13:48:23:f7:54:65:db:66:2f:70:8f:d4:95:1b:a7:
         9d:68:29:74:11:40:31:40:bc:2f:12:9a:c3:0b:9a:79:42:68:
         58:a8:64:6a:27:82:b1:6f:a2:7d:cc:65:21:79:e8:c5:94:9f:
         81:c0:1b:de
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE4NUYxMTAvBgNVBAUTKDU4RTMzRjBENUEzMjY4ODExNDA3MTVEMTMxNkUwMURF
QUYyNEFEMEYwHhcNMjUwNzI3MTQ0NzM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzI2NC1hNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs1aPf0/dLJiHnBNRcmgpyqWWmIVron2nmo6Zux+ibGjev/EVEf8OxUhXDR8R
8OuA/xj8B23Gtf9jxjOkf4rRETSjUxrV5BraE0mi5IFK3WDL6qLNdRHK2jZQhLou
c5hQtUmqlaXwUsgAJ3KEpDLmNI+gtb8vShB53v3AIbw6t4Y3YaU1xH3u2xANuxkP
lYfCMGGYRdN6UpCwQvA9ujPxvJ/b0IXmHm/XzrmL4QSouBGAlhHMM8PHzic2CxRz
4jRGDHkUH6j3DluRzLAFEIW/8AhffQmhSOwY2gutPS79douhSdbBAsuYVhsIAYiB
//67GOOqBko4iR6LUWIET6YbuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM+zJ6fs
ka6ZWR7AVksc5Bey1UBjMB8GA1UdIwQYMBaAFFjjPw1aMmiBFAcV0TFuAd6vJK0P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTg1Ri83MDBCRUQ5QzlF
QzgxMUVCQjcwMTY0NDhDNEY5QUUwMi9XT01fRFZveWFJRVVCeFhSTVc0QjNxOGty
UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dPTV9EVm95YUlFVUJ4WFJNVzRCM3E4a3JROC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE4NUYvNzAwQkVEOUM5RUM4MTFFQkI3MDE2NDQ4QzRGOUFFMDIvQTNGQ0I0NjQ2
QUY4MTFGMDg0MjA4ODMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCyghoMA0GCSqGSIb3DQEBCwUAA4IBAQByFkIcpZTVV01gb+F7uZvM
T7VwM5OLL6Qa/mGbq7maLzci7EATEOSRcY3A2gD1MjUPUoF8CesMRXdNBKLdFXvB
Z2Sqp7wvndWLD0zczlk8zXSNgLgJ3aByb4GwwAa0OkCFkiHlVdibeYZVmIVgAMmd
Eg/FnS4RxqWqKRxuNoLwptUZPh2EEDTKk/MMBwL3RpZ4mrpcgIhAGitU7Ay3qukg
0S+kYPYcciQlPgzbB0Uxnea5snelhxrGSWPeFJBAQ0jCRAyWWa5joQsTSCP3VGXb
Zi9wj9SVG6edaCl0EUAxQLwvEprDC5p5QmhYqGRqJ4Kxb6J9zGUheejFlJ+BwBve
-----END CERTIFICATE-----
Generated at Tue Mar 10 17:41:18 2026 by rpki-client