Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/938098BE5CFE11F18D5CD5949D833773.roa
File:                     938098BE5CFE11F18D5CD5949D833773.roa (raw, json)
Hash identifier:          YvlCWf4B4N82K2Tsi4Q18rzepQF2VZtfQl38u6FADjY=
Subject key identifier:   8E:1A:67:FF:03:90:BF:74:CE:AA:03:95:9C:17:FB:BE:91:69:6E:06
Certificate issuer:       /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Certificate serial:       E7
Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/938098BE5CFE11F18D5CD5949D833773.roa
Signing time:             Tue 02 Jun 2026 07:31:00 +0000
ROA not before:           Tue 02 Jun 2026 07:31:00 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153526
IP address blocks:        157.85.32.0/19 maxlen: 20
                          161.248.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 07:31:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
        Validity
            Not Before: Jun  2 07:31:00 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a1e86b4-37f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b9:d0:0a:3a:79:94:de:49:0d:af:90:2c:b9:
                    b6:02:c7:1a:c2:aa:32:6c:20:aa:a4:b8:da:2e:9b:
                    51:74:80:d2:2f:16:d8:91:8d:c3:36:94:d9:cf:29:
                    21:04:1e:01:c7:dc:48:08:44:ce:ce:bc:dc:96:3a:
                    4f:c7:87:cb:4f:27:e0:7c:50:a5:89:6c:bd:5e:08:
                    f7:b1:1c:63:b1:f3:ef:c5:3e:8c:df:b1:aa:a8:3f:
                    69:49:f2:23:9c:df:0b:3d:c6:a8:61:5c:05:d5:bc:
                    41:be:60:f3:ef:4f:58:32:67:9a:b5:1a:d5:cb:30:
                    3f:19:f8:94:0e:3a:04:e0:5e:7f:f7:bd:d7:b1:cd:
                    d1:1d:08:38:56:cb:ee:b6:6b:1b:ca:04:a9:ad:62:
                    73:e6:98:9b:12:28:46:19:99:22:39:e1:52:cc:fe:
                    08:61:65:5b:ea:92:48:ba:39:ee:3a:82:aa:eb:27:
                    c8:72:5d:74:53:a5:eb:5e:65:30:da:0b:d6:ae:6b:
                    8d:cc:e5:0a:1a:11:02:d2:09:2b:0d:20:62:2e:18:
                    7e:ee:66:60:b3:e5:27:1e:60:39:95:d7:2a:47:4f:
                    0a:29:66:cf:d7:5f:1b:13:d4:79:08:67:46:fe:59:
                    f8:bf:24:6a:6e:a9:b9:f7:c1:fa:14:f8:33:19:cc:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1A:67:FF:03:90:BF:74:CE:AA:03:95:9C:17:FB:BE:91:69:6E:06
            X509v3 Authority Key Identifier:
                keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/938098BE5CFE11F18D5CD5949D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.32.0/19
                  161.248.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:ce:fa:c5:03:b9:b0:8b:2f:cf:49:2a:d1:a1:ad:a7:fc:
         9c:36:1f:67:dd:32:4d:ae:0f:e3:ae:02:01:7d:6e:fe:a0:d8:
         8c:ee:ee:bb:b4:19:c6:dc:44:4a:54:71:5d:36:04:9e:ea:94:
         b6:b9:03:13:b6:fe:dc:5f:b8:2c:1f:ca:ea:a0:c1:12:39:40:
         e8:36:35:ca:2d:52:63:9e:af:3c:bd:03:70:d5:3c:30:e2:72:
         96:9e:4d:38:c4:67:d2:de:a0:f9:a0:b5:4e:16:5c:f6:5a:81:
         6d:97:0d:e2:4a:0b:06:02:84:dd:ef:1c:3d:c8:db:e6:bf:a6:
         50:0e:ac:45:f7:7a:81:a4:ef:7d:e1:5e:f8:e4:22:c5:4c:a2:
         5a:61:6b:65:fe:27:07:eb:f6:77:94:3d:26:2f:aa:5d:c8:b1:
         b9:97:53:87:a6:e9:f9:a0:69:e2:38:77:6a:c3:61:84:d5:1c:
         df:1e:e4:8d:0e:9e:da:e3:b0:5b:b9:f4:66:7b:74:ba:34:27:
         c6:b7:a6:3b:b1:3c:18:20:3f:87:89:02:b6:27:a7:8f:0f:1f:
         b7:85:a0:7f:ee:f1:b7:db:47:2a:62:86:db:f3:c4:f4:23:31:
         e9:d4:73:6a:85:34:f5:2b:33:89:a3:95:6e:8f:87:48:8d:1c:
         00:d1:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:11 2026 by rpki-client