Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/7E782718940B11F1AE7863F93E11F970.roa
File:                     7E782718940B11F1AE7863F93E11F970.roa (raw, json)
Hash identifier:          XTTBwDL+3ZX31Mb6Vk3dZi/vUMZFs0rfR5N64dJPp9c=
Subject key identifier:   88:80:F3:C8:B1:B6:5C:49:13:44:9E:99:52:83:E6:90:47:3E:EC:1A
Certificate issuer:       /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Certificate serial:       DA
Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/7E782718940B11F1AE7863F93E11F970.roa
Signing time:             Sun 09 Aug 2026 16:00:52 +0000
ROA not before:           Sun 09 Aug 2026 16:00:52 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        49.213.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
                          rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 06:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
        Validity
            Not Before: Aug  9 16:00:52 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a78a433-0357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:ba:73:24:45:49:f5:fa:cc:69:99:1c:22:
                    e8:87:dc:0f:bc:f3:8e:15:30:09:32:9f:a8:5b:65:
                    ad:bb:84:89:64:e8:9d:ac:75:d5:05:35:96:f5:2f:
                    fb:c5:58:5b:c5:b9:5f:f3:3f:03:ed:9e:3c:e8:3a:
                    77:31:0f:53:e2:11:ca:09:57:de:8f:fe:5d:cb:f1:
                    36:c9:58:54:ed:8a:c6:01:28:fb:32:d0:fb:18:7c:
                    c4:ec:5e:a0:eb:08:c9:61:aa:dd:1c:b0:1b:7a:4d:
                    0e:d2:f7:37:2e:04:d3:64:f3:4d:3f:fa:bd:c5:97:
                    9f:bc:f1:10:2f:24:af:34:53:7d:06:cc:d7:cd:4f:
                    aa:52:55:ae:ec:0e:82:4f:6c:2f:3f:88:b3:ce:29:
                    af:b4:e2:c4:b0:e1:83:a4:84:12:fb:10:6f:cd:63:
                    c1:64:61:85:c8:c2:24:17:b3:7a:77:96:93:9c:ca:
                    71:02:f6:96:f3:d2:b1:50:66:a2:0d:6d:b0:a7:6f:
                    ed:15:71:4e:7d:8a:4e:7e:36:24:b7:8f:10:14:74:
                    61:65:d2:73:8a:79:d5:3b:ea:fb:60:fa:89:0e:37:
                    ab:c8:fd:e8:b5:72:5e:ce:80:6e:5c:ac:49:02:eb:
                    e6:7c:0d:90:b0:fa:c9:45:00:4c:77:c1:0b:4f:56:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:F3:C8:B1:B6:5C:49:13:44:9E:99:52:83:E6:90:47:3E:EC:1A
            X509v3 Authority Key Identifier:
                keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/7E782718940B11F1AE7863F93E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:33:d8:a4:01:ec:76:b8:6b:d0:b8:e3:32:1f:d0:e0:6c:5f:
         47:55:a9:35:dd:3a:e2:8b:e4:25:59:a0:a6:60:3f:aa:4b:9a:
         a0:85:e5:c2:89:c5:27:65:66:6f:69:42:9f:a7:3c:d5:60:f4:
         97:bf:0c:70:84:67:1d:4d:79:2f:59:82:75:cc:de:6a:46:3a:
         d5:a5:4c:65:74:e5:e1:39:ec:ae:fb:70:22:9a:a2:25:07:4a:
         66:bd:f6:2c:d5:86:f5:b9:10:82:34:b6:65:b1:7c:0b:90:ea:
         76:26:8d:2b:2c:f5:a1:a8:26:06:3b:5d:21:d4:36:05:21:9a:
         06:d7:a3:d0:d7:6a:29:97:94:fb:de:51:46:69:26:ab:8c:05:
         72:06:39:3f:9b:09:be:ec:c8:83:e2:62:e4:c8:89:88:5a:f4:
         d0:09:2f:a2:e3:7d:7b:8b:37:c9:d7:9c:44:0d:be:6d:83:54:
         b8:54:77:c9:c7:b5:aa:82:99:10:7c:71:c1:d0:14:aa:10:c5:
         4e:1c:01:0d:ac:f4:37:16:c7:a2:15:c3:0c:a2:9f:c1:43:8c:
         af:5e:d8:8a:dc:44:69:2a:21:74:2e:46:86:86:e3:7e:3b:4c:
         2c:58:62:87:89:97:36:c6:4d:0e:1d:b8:9a:ea:ee:7d:c1:34:
         f8:b8:49:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQwRTAxMTAvBgNVBAUTKDg5NzA3N0I3MUYyQzVBRURERTZDMURENDk1NDdEQ0M5
OTUyQ0RBQkUwHhcNMjYwODA5MTYwMDUyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc4YTQzMy0wMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyK+6cyRFSfX6zGmZHCLoh9wPvPOOFTAJMp+oW2Wtu4SJZOidrHXVBTWW9S/7
xVhbxblf8z8D7Z486Dp3MQ9T4hHKCVfej/5dy/E2yVhU7YrGASj7MtD7GHzE7F6g
6wjJYardHLAbek0O0vc3LgTTZPNNP/q9xZefvPEQLySvNFN9BszXzU+qUlWu7A6C
T2wvP4izzimvtOLEsOGDpIQS+xBvzWPBZGGFyMIkF7N6d5aTnMpxAvaW89KxUGai
DW2wp2/tFXFOfYpOfjYkt48QFHRhZdJzinnVO+r7YPqJDjeryP3otXJezoBuXKxJ
AuvmfA2QsPrJRQBMd8ELT1bbPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIiA88ix
tlxJE0SemVKD5pBHPuwaMB8GA1UdIwQYMBaAFIlwd7cfLFrt3mwd1JVH3MmVLNq+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDBFMC8zRkJCNUUwNDdC
NTMxMUYwOUI1NDg0NUZDNEY5QUUwMi9pWEIzdHg4c1d1M2ViQjNVbFVmY3laVXMy
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQwRTAvM0ZCQjVFMDQ3QjUzMTFGMDlCNTQ4NDVGQzRGOUFFMDIvN0U3ODI3MTg5
NDBCMTFGMUFFNzg2M0Y5M0UxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMdUhMA0GCSqGSIb3DQEBCwUAA4IBAQCWM9ikAex2uGvQuOMyH9Dg
bF9HVak13Trii+QlWaCmYD+qS5qgheXCicUnZWZvaUKfpzzVYPSXvwxwhGcdTXkv
WYJ1zN5qRjrVpUxldOXhOeyu+3AimqIlB0pmvfYs1Yb1uRCCNLZlsXwLkOp2Jo0r
LPWhqCYGO10h1DYFIZoG16PQ12opl5T73lFGaSarjAVyBjk/mwm+7MiD4mLkyImI
WvTQCS+i4317izfJ15xEDb5tg1S4VHfJx7WqgpkQfHHB0BSqEMVOHAENrPQ3Fsei
FcMMop/BQ4yvXtiK3ERpKiF0LkaGhuN+O0wsWGKHiZc2xk0OHbia6u59wTT4uEn7
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:39:25 2026 by rpki-client