Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E0218421E0111E9A590C837C4F9AE02.roa
File:                     4E0218421E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          d7kpeLCcld7cogl+SWpboHrl9bs5MwmDGUrJbKp6bKs=
Subject key identifier:   34:28:94:70:73:DE:1B:6C:43:09:49:CB:06:18:4F:92:32:5C:21:6A
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C1C
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E0218421E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:12:50 +0000
ROA not before:           Mon 06 Jul 2026 15:12:50 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45254
IP address blocks:        119.46.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15388 (0x3c1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:12:50 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5f2-188a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:a6:6d:a3:31:78:6e:8f:f1:6a:7f:66:1e:
                    55:e3:ed:33:5b:72:e2:dc:03:38:dc:cd:cb:b7:97:
                    5b:9b:32:4e:88:e0:30:27:fe:c3:b6:54:fd:9e:bc:
                    09:8b:1d:db:eb:b3:ce:9f:4d:45:dd:ab:4d:f3:09:
                    96:2c:e7:1c:6a:fd:81:d0:c9:d1:73:0b:83:a4:48:
                    9c:48:3f:87:e1:53:32:f2:6e:0f:3d:77:05:d6:54:
                    6c:75:fd:60:52:5f:60:f2:94:49:ba:f6:e7:fa:a6:
                    c1:a6:0d:c3:23:00:1e:b8:c6:72:0a:72:0e:b3:08:
                    d4:1c:e9:d9:98:93:fb:c8:59:bc:9c:71:95:20:a0:
                    f6:f6:71:14:31:21:45:3e:6d:6a:d3:2e:75:87:e1:
                    85:d3:b3:0f:0b:35:ff:04:dd:9f:19:84:f0:e0:86:
                    f9:a9:39:54:13:6e:a4:3d:79:52:88:67:36:3a:a7:
                    b3:0e:62:41:08:97:45:4c:8f:fb:bc:05:17:fe:8f:
                    9b:e6:c8:28:31:49:25:37:06:2a:38:bc:22:48:9a:
                    98:6d:e1:c7:11:9a:87:b5:ff:ce:fe:92:d3:d5:b7:
                    b7:79:b3:c1:28:4e:c6:1a:a1:76:08:fa:42:c1:cb:
                    86:89:1d:99:a2:c1:7b:98:b4:bc:96:65:14:de:ff:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:28:94:70:73:DE:1B:6C:43:09:49:CB:06:18:4F:92:32:5C:21:6A
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4E0218421E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:cc:98:26:b2:00:bc:14:d1:fb:28:82:e8:f0:c6:b4:9d:ea:
         f6:0b:3c:aa:61:2d:c1:ca:d3:d6:4b:ed:5f:1d:75:25:e0:62:
         4f:e4:74:d5:24:60:0a:c8:b5:b3:0b:ad:0e:c7:4b:d4:89:f9:
         62:3f:0e:c8:79:49:bc:9c:31:3e:3f:e9:63:3a:0e:00:12:4c:
         f2:78:dd:a9:36:f5:59:74:75:f5:0f:85:7e:7c:fa:91:d6:09:
         61:eb:ee:5e:19:46:3f:9c:f4:f5:0e:be:5b:b2:da:25:18:0a:
         36:2f:0b:67:6f:c2:3e:01:c6:20:75:4e:94:80:eb:a2:4e:6b:
         d2:0d:b1:32:0c:1f:bc:cc:2c:a8:02:96:0e:74:6c:bf:11:d3:
         c0:60:20:54:39:b2:47:01:7a:0e:a0:d8:0d:61:e7:48:43:81:
         46:25:11:31:dc:01:97:6c:cf:e6:bf:40:9f:fa:dd:4f:9a:c0:
         13:53:14:d4:b2:63:23:bc:29:c3:57:2c:81:10:0a:ae:4a:73:
         bc:f7:35:55:8e:f5:c8:87:f6:bb:d1:6e:e6:d0:a9:5d:c8:fc:
         37:c4:92:a2:f1:a7:bc:5c:60:6e:66:19:62:5a:72:db:88:64:
         c7:83:3f:ff:ae:b6:c6:bd:cc:b6:bb:22:42:74:4c:cd:91:67:
         a3:02:b1:da
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMjUwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzVmMi0xODhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlTWmbaMxeG6P8Wp/Zh5V4+0zW3Li3AM43M3Lt5dbmzJOiOAwJ/7DtlT9nrwJ
ix3b67POn01F3atN8wmWLOccav2B0MnRcwuDpEicSD+H4VMy8m4PPXcF1lRsdf1g
Ul9g8pRJuvbn+qbBpg3DIwAeuMZyCnIOswjUHOnZmJP7yFm8nHGVIKD29nEUMSFF
Pm1q0y51h+GF07MPCzX/BN2fGYTw4Ib5qTlUE26kPXlSiGc2OqezDmJBCJdFTI/7
vAUX/o+b5sgoMUklNwYqOLwiSJqYbeHHEZqHtf/O/pLT1be3ebPBKE7GGqF2CPpC
wcuGiR2ZosF7mLS8lmUU3v8YuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDQolHBz
3htsQwlJywYYT5IyXCFqMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNEUwMjE4NDIx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdy5MMA0GCSqGSIb3DQEBCwUAA4IBAQBjzJgmsgC8FNH7KILo8Ma0
ner2CzyqYS3BytPWS+1fHXUl4GJP5HTVJGAKyLWzC60Ox0vUifliPw7IeUm8nDE+
P+ljOg4AEkzyeN2pNvVZdHX1D4V+fPqR1glh6+5eGUY/nPT1Dr5bstolGAo2Lwtn
b8I+AcYgdU6UgOuiTmvSDbEyDB+8zCyoApYOdGy/EdPAYCBUObJHAXoOoNgNYedI
Q4FGJREx3AGXbM/mv0Cf+t1PmsATUxTUsmMjvCnDVyyBEAquSnO89zVVjvXIh/a7
0W7m0KldyPw3xJKi8ae8XGBuZhliWnLbiGTHgz//rrbGvcy2uyJCdEzNkWejArHa
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:51 2026 by rpki-client