Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/437E7DA21E0111E9A590C837C4F9AE02.roa
File:                     437E7DA21E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          Y21m1enCyLK+Y6bbnz4yw5UGXhhQ9TQt9RtlIFzwblc=
Subject key identifier:   79:42:E7:A7:B1:6B:30:E7:2E:93:A0:C7:20:E0:C4:73:3F:68:A5:FA
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C07
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/437E7DA21E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:12:06 +0000
ROA not before:           Mon 06 Jul 2026 15:12:06 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24042
IP address blocks:        119.46.74.0/24 maxlen: 24
                          203.144.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15367 (0x3c07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:12:06 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5c6-404e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:c5:d6:4d:16:2a:eb:2a:24:f8:dd:18:c9:
                    ab:67:da:13:ce:fb:6f:9a:c4:d9:60:48:fc:2c:5f:
                    a3:d0:66:af:13:c2:45:5b:82:16:54:9b:74:bb:11:
                    f2:b7:12:e5:51:2d:62:c5:ea:73:b2:90:ed:af:92:
                    e7:6a:d7:82:6b:c9:2b:7b:f6:f9:1e:2b:d7:f2:2b:
                    9a:ef:84:d2:ed:eb:14:92:ab:27:61:da:e9:2f:c6:
                    3c:7d:66:3e:8a:98:16:a4:3a:29:e5:c8:89:69:b1:
                    9e:b5:f3:d0:e1:26:5d:67:01:ae:17:38:dc:6e:84:
                    3e:09:db:a1:3a:64:4c:b9:6b:c8:49:94:e0:05:ec:
                    6a:58:37:df:f6:55:e3:41:41:92:a1:ea:d7:b0:5b:
                    6a:21:c7:da:a1:c2:f8:a7:7b:d8:4e:cb:47:1e:33:
                    f8:1e:c5:02:08:40:1f:5d:47:d4:34:fe:ae:f8:82:
                    4f:74:63:74:55:03:8b:ef:a9:6c:55:08:4a:51:3c:
                    a4:12:36:93:40:8d:d9:64:9c:34:e5:bd:1c:66:03:
                    d6:a3:d7:41:44:6c:f4:d2:3d:70:c3:6a:c7:8f:fd:
                    dc:97:b5:0e:d4:47:f1:69:ff:40:45:ea:42:ad:de:
                    5b:d5:39:a3:00:e0:39:0b:67:46:b1:0e:44:0f:06:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:E7:A7:B1:6B:30:E7:2E:93:A0:C7:20:E0:C4:73:3F:68:A5:FA
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/437E7DA21E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.74.0/24
                  203.144.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:6c:00:7d:79:e4:b8:b6:42:95:cd:3a:86:17:e8:93:97:
         af:de:f5:27:4a:ab:1c:07:00:ac:88:87:88:41:ca:d7:e2:73:
         31:75:2d:9d:a9:e2:78:96:a4:f5:74:69:f7:94:65:12:b7:1c:
         35:d7:2e:19:1f:77:24:fc:12:df:66:28:41:47:c4:9a:63:15:
         72:d7:a4:c3:25:19:a5:81:5e:b7:7f:fb:09:24:e2:21:5a:de:
         4c:d8:1a:29:c1:f2:1d:27:e9:c0:64:05:aa:e6:4b:e7:9f:0d:
         ca:ae:4b:bd:5e:e2:15:50:e5:d0:dd:b2:8f:17:fa:7e:e9:86:
         0b:ef:20:7b:36:c3:e1:4a:ce:ae:48:db:db:f4:95:87:f0:1d:
         bd:b1:03:94:2c:69:00:97:4a:89:9e:39:75:69:7d:15:7c:43:
         f3:e7:80:38:a6:65:51:d3:6d:16:fe:09:e7:cf:52:03:8e:0c:
         7b:fa:2f:50:31:18:62:21:ea:3e:e5:c4:bc:8e:1d:77:d8:0e:
         46:b2:4e:aa:3f:82:e1:81:8c:18:62:a9:d1:3d:8b:c9:e1:64:
         3b:c4:98:18:19:12:7b:7e:14:bf:6d:51:e5:76:f9:68:0d:59:
         12:e0:62:56:4a:ee:3d:6d:a7:85:e3:3b:42:2b:73:0a:58:57:
         ab:9d:25:ff
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICPAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMjA2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzVjNi00MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zLF1k0WKusqJPjdGMmrZ9oTzvtvmsTZYEj8LF+j0GavE8JFW4IWVJt0uxHy
txLlUS1ixepzspDtr5LnateCa8kre/b5HivX8iua74TS7esUkqsnYdrpL8Y8fWY+
ipgWpDop5ciJabGetfPQ4SZdZwGuFzjcboQ+CduhOmRMuWvISZTgBexqWDff9lXj
QUGSoerXsFtqIcfaocL4p3vYTstHHjP4HsUCCEAfXUfUNP6u+IJPdGN0VQOL76ls
VQhKUTykEjaTQI3ZZJw05b0cZgPWo9dBRGz00j1ww2rHj/3cl7UO1Efxaf9ARepC
rd5b1TmjAOA5C2dGsQ5EDwZZOQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHlC56ex
azDnLpOgxyDgxHM/aKX6MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDM3RTdEQTIx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAdy5KAwQAy5CTMA0GCSqGSIb3DQEBCwUAA4IBAQCe4mwAfXnkuLZC
lc06hhfok5ev3vUnSqscBwCsiIeIQcrX4nMxdS2dqeJ4lqT1dGn3lGUStxw11y4Z
H3ck/BLfZihBR8SaYxVy16TDJRmlgV63f/sJJOIhWt5M2BopwfIdJ+nAZAWq5kvn
nw3Krku9XuIVUOXQ3bKPF/p+6YYL7yB7NsPhSs6uSNvb9JWH8B29sQOULGkAl0qJ
njl1aX0VfEPz54A4pmVR020W/gnnz1IDjgx7+i9QMRhiIeo+5cS8jh132A5Gsk6q
P4LhgYwYYqnRPYvJ4WQ7xJgYGRJ7fhS/bVHldvloDVkS4GJWSu49baeF4ztCK3MK
WFernSX/
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:42 2026 by rpki-client