Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/341CC5AA79D211F1A18FCD2461A30FBC.roa
File:                     341CC5AA79D211F1A18FCD2461A30FBC.roa (raw, json)
Hash identifier:          7ieQ4XPRDNOnKNU6R+k2bqjujf/v9lyevg65c9uX5Yo=
Subject key identifier:   07:6A:D7:88:48:5C:DE:49:94:A2:80:DC:91:D0:A8:4A:30:C2:A8:0C
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C41
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/341CC5AA79D211F1A18FCD2461A30FBC.roa
Signing time:             Tue 07 Jul 2026 07:07:01 +0000
ROA not before:           Tue 07 Jul 2026 07:07:01 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136040
IP address blocks:        119.46.3.0/24 maxlen: 24
                          2001:fb0:10b8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15425 (0x3c41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  7 07:07:01 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4ca595-7390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:5a:c2:0a:32:b6:6e:51:37:1c:08:38:fb:
                    94:04:f2:3d:31:c0:93:20:2c:f2:34:30:21:05:47:
                    f3:f3:b8:ff:85:be:38:44:43:be:ab:19:8b:96:13:
                    1b:e2:c5:d4:84:99:c6:56:88:b8:b5:90:b6:ce:f8:
                    51:96:d7:69:db:60:20:fd:ab:ad:19:40:db:d4:de:
                    b3:c6:d1:37:97:c1:a1:20:af:ad:1c:66:f6:48:52:
                    78:ba:76:3e:a5:62:6c:58:3b:5e:a1:90:22:fa:ec:
                    d5:86:c2:3d:df:23:f3:07:17:6d:68:53:b7:c5:40:
                    d7:bd:d4:60:be:ad:1d:31:a7:0e:17:c8:01:98:17:
                    ff:e5:78:88:b6:a3:77:32:82:11:b7:15:64:33:b1:
                    7f:c0:6a:b4:a9:28:9c:3f:ea:66:21:f8:0e:05:63:
                    0e:a0:9e:82:18:e9:b1:a9:76:f0:74:2e:c6:c8:9d:
                    97:4e:a4:66:91:9e:6c:7e:91:a9:76:c4:54:9e:66:
                    bd:80:b0:35:28:25:29:da:1f:ee:33:14:55:d3:54:
                    dd:53:14:c9:9a:37:c1:94:b2:95:8d:dd:07:c9:0f:
                    14:77:fe:bc:dd:5c:03:38:14:5b:1e:f8:90:2d:88:
                    cc:3e:d5:87:a9:35:63:bc:1c:71:ed:52:fc:fe:87:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6A:D7:88:48:5C:DE:49:94:A2:80:DC:91:D0:A8:4A:30:C2:A8:0C
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/341CC5AA79D211F1A18FCD2461A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.3.0/24
                IPv6:
                  2001:fb0:10b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:9b:e7:2c:fa:ec:04:5d:44:9d:f5:be:5b:d8:3a:1a:15:22:
         a8:c0:5d:0b:b1:2b:73:1d:ba:e1:a1:bc:16:87:be:72:2e:83:
         c9:73:69:ee:3a:ef:8c:9e:dc:27:d3:32:9d:a3:7d:67:c4:63:
         7d:a6:09:85:4e:19:ed:2b:03:40:61:a7:c5:f1:f6:47:6a:c5:
         2d:d6:2f:d6:1f:db:94:6f:09:7a:76:12:bd:e3:c7:8d:88:03:
         ef:f1:65:c4:4c:89:2d:d8:60:79:d1:6c:55:64:04:b6:0c:5c:
         0a:e4:78:37:1c:4f:98:6c:32:d6:de:be:a1:0e:da:78:d5:da:
         c2:94:0b:a1:40:f2:b5:fd:2d:06:c5:d5:eb:65:12:db:a2:6b:
         35:15:de:f9:81:00:8f:cf:f8:15:ec:5c:ba:db:6d:6a:9e:26:
         a2:5e:7f:de:19:66:06:15:59:ea:e9:4b:12:66:08:9e:b4:0a:
         cb:7e:91:d9:99:07:fa:6a:00:20:78:64:79:b9:10:7e:52:3a:
         09:fd:08:32:5c:86:e0:af:04:95:03:d0:10:0c:05:9e:3d:8a:
         08:cc:ca:92:98:50:4f:bb:7d:93:f2:c2:13:37:c3:34:20:7c:
         c1:91:c8:63:12:bb:29:f2:70:44:e7:a5:70:f2:71:e7:6c:71:
         b5:af:77:cc
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICPEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA3MDcwNzAxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjYTU5NS03MzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0Rawgoytm5RNxwIOPuUBPI9McCTICzyNDAhBUfz87j/hb44REO+qxmLlhMb
4sXUhJnGVoi4tZC2zvhRltdp22Ag/autGUDb1N6zxtE3l8GhIK+tHGb2SFJ4unY+
pWJsWDteoZAi+uzVhsI93yPzBxdtaFO3xUDXvdRgvq0dMacOF8gBmBf/5XiItqN3
MoIRtxVkM7F/wGq0qSicP+pmIfgOBWMOoJ6CGOmxqXbwdC7GyJ2XTqRmkZ5sfpGp
dsRUnma9gLA1KCUp2h/uMxRV01TdUxTJmjfBlLKVjd0HyQ8Ud/683VwDOBRbHviQ
LYjMPtWHqTVjvBxx7VL8/odeXwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAdq14hI
XN5JlKKA3JHQqEowwqgMMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMzQxQ0M1QUE3
OUQyMTFGMUExOEZDRDI0NjFBMzBGQkMucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAdy4DMA8EAgACMAkDBwAgAQ+wELgwDQYJKoZIhvcNAQELBQADggEB
AFKb5yz67ARdRJ31vlvYOhoVIqjAXQuxK3MduuGhvBaHvnIug8lzae4674ye3CfT
Mp2jfWfEY32mCYVOGe0rA0Bhp8Xx9kdqxS3WL9Yf25RvCXp2Er3jx42IA+/xZcRM
iS3YYHnRbFVkBLYMXArkeDccT5hsMtbevqEO2njV2sKUC6FA8rX9LQbF1etlEtui
azUV3vmBAI/P+BXsXLrbbWqeJqJef94ZZgYVWerpSxJmCJ60Cst+kdmZB/pqACB4
ZHm5EH5SOgn9CDJchuCvBJUD0BAMBZ49igjMypKYUE+7fZPywhM3wzQgfMGRyGMS
uynycETnpXDycedscbWvd8w=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:25 2026 by rpki-client