Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/4BADF2C62BFC11F18FD847BBCA833773.roa
File:                     4BADF2C62BFC11F18FD847BBCA833773.roa (raw, json)
Hash identifier:          CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=
Subject key identifier:   0E:58:B9:41:34:54:2A:C0:D4:5C:3D:C8:8B:64:4E:4E:39:F9:8D:2B
Certificate issuer:       /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial:       02FB
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/4BADF2C62BFC11F18FD847BBCA833773.roa
Signing time:             Mon 30 Mar 2026 05:50:03 +0000
ROA not before:           Mon 30 Mar 2026 05:50:03 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     216411
IP address blocks:        115.42.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
                          rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763 (0x2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
        Validity
            Not Before: Mar 30 05:50:03 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ca0f0a-0242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:f9:cf:79:9c:76:c9:55:2a:45:4c:a8:ae:
                    31:23:8b:3b:e8:2a:11:bf:4b:e6:e4:f8:45:7c:14:
                    1c:41:25:ce:5d:69:3a:98:d2:2c:d3:e9:e7:55:f6:
                    08:01:b2:39:98:1e:55:69:c4:51:28:ee:63:89:c9:
                    38:38:29:f1:0b:81:4b:90:23:a6:4b:54:43:da:0f:
                    31:69:c0:f7:ac:b1:d0:7e:9e:1f:2c:0e:02:0e:d4:
                    24:68:39:66:b8:e1:f2:49:c1:08:2b:30:f5:13:ae:
                    93:eb:3a:af:95:9d:5c:37:62:06:45:5c:e7:e1:13:
                    ad:4b:2a:88:04:73:2c:6b:f5:34:08:5e:f9:92:0e:
                    35:36:63:52:7b:a1:35:c3:c5:0d:10:b4:49:de:24:
                    2e:3f:dc:eb:7d:0c:5e:49:66:ba:4a:25:4a:fc:7e:
                    84:7d:f9:4e:9a:2c:58:07:8a:1c:7a:34:05:47:df:
                    42:e8:5c:ba:b8:60:0f:7d:5e:ed:d5:d4:57:0b:39:
                    e4:cb:bb:23:58:94:f7:37:65:50:aa:3f:39:39:d1:
                    54:b6:fe:76:93:73:e8:a3:e5:a0:f7:b7:b2:20:29:
                    24:ff:98:12:5b:bb:98:6b:8c:8c:2e:a6:53:78:66:
                    60:c8:f5:82:81:5f:62:a7:34:c2:0a:5e:33:cb:d7:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:58:B9:41:34:54:2A:C0:D4:5C:3D:C8:8B:64:4E:4E:39:F9:8D:2B
            X509v3 Authority Key Identifier:
                keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/4BADF2C62BFC11F18FD847BBCA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:4a:7c:0c:5d:24:57:47:1b:c8:37:bc:2d:ef:3c:99:8e:34:
         5f:be:63:cb:73:01:f9:53:6b:9d:b0:a5:a7:4c:ce:84:f8:ff:
         91:7b:9c:af:1a:d7:ae:8b:2e:0d:2e:73:f3:15:01:3b:88:95:
         e8:dc:e1:20:87:98:10:f1:23:7f:8b:4a:52:9c:97:4a:24:ba:
         17:ad:62:4a:bc:51:c7:8f:fc:be:6a:9e:a2:b9:52:c5:09:cd:
         53:2d:f5:d7:98:07:48:38:f6:50:c4:c6:4c:a6:a4:eb:b8:33:
         7f:0d:ab:d3:01:f2:30:06:62:57:c2:54:68:87:4e:84:fe:be:
         69:33:cb:81:d4:d5:c8:a2:ef:29:08:06:27:7d:9c:85:c4:df:
         8c:bf:bd:1d:0b:82:c0:73:28:34:8e:cf:91:42:9a:b0:a4:9b:
         b2:71:ee:d1:ee:f9:cd:96:fb:29:51:83:b4:be:7a:9b:96:90:
         68:b7:c2:1f:5f:25:67:ad:b8:70:43:46:d4:6a:93:03:d6:e9:
         be:db:0e:96:3f:6d:59:df:ca:a6:79:ce:25:f8:8c:c8:2b:be:
         f0:a3:2e:01:ac:b0:f0:88:d6:2b:3b:05:ba:96:6f:8d:42:84:
         72:d8:fb:ff:7d:0e:1f:2d:6c:90:88:e4:97:1f:7b:d5:6b:24:
         d7:22:58:b2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5
QTNFRDVERkUwHhcNMjYwMzMwMDU1MDAzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNhMGYwYS0wMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg4v5z3mcdslVKkVMqK4xI4s76CoRv0vm5PhFfBQcQSXOXWk6mNIs0+nnVfYI
AbI5mB5VacRRKO5jick4OCnxC4FLkCOmS1RD2g8xacD3rLHQfp4fLA4CDtQkaDlm
uOHyScEIKzD1E66T6zqvlZ1cN2IGRVzn4ROtSyqIBHMsa/U0CF75kg41NmNSe6E1
w8UNELRJ3iQuP9zrfQxeSWa6SiVK/H6EfflOmixYB4ocejQFR99C6Fy6uGAPfV7t
1dRXCznky7sjWJT3N2VQqj85OdFUtv52k3Poo+Wg97eyICkk/5gSW7uYa4yMLqZT
eGZgyPWCgV9ipzTCCl4zy9fL5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA5YuUE0
VCrA1Fw9yItkTk45+Y0rMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3
N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkU3REYvNkQ1NTJENzAyNzdBMTFFREE2QjFBODI2QzRGOUFFMDIvNEJBREYyQzYy
QkZDMTFGMThGRDg0N0JCQ0E4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcyo8MA0GCSqGSIb3DQEBCwUAA4IBAQADSnwMXSRXRxvIN7wt7zyZ
jjRfvmPLcwH5U2udsKWnTM6E+P+Re5yvGteuiy4NLnPzFQE7iJXo3OEgh5gQ8SN/
i0pSnJdKJLoXrWJKvFHHj/y+ap6iuVLFCc1TLfXXmAdIOPZQxMZMpqTruDN/DavT
AfIwBmJXwlRoh06E/r5pM8uB1NXIou8pCAYnfZyFxN+Mv70dC4LAcyg0js+RQpqw
pJuyce7R7vnNlvspUYO0vnqblpBot8IfXyVnrbhwQ0bUapMD1um+2w6WP21Z38qm
ec4l+IzIK77woy4BrLDwiNYrOwW6lm+NQoRy2Pv/fQ4fLWyQiOSXH3vVayTXIliy
-----END CERTIFICATE-----
Generated at Mon Mar 30 14:53:34 2026 by rpki-client