Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa
File:                     5218D5921E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          e95sJVRpNnslxq/ekLjqwL/Q2SqwLbxorfwF6lNO87A=
Subject key identifier:   87:10:FF:B2:4F:B3:4B:DF:54:3E:83:13:E4:37:DC:5B:B3:B6:12:8D
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C23
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:13:04 +0000
ROA not before:           Mon 06 Jul 2026 15:13:04 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55476
IP address blocks:        110.170.246.0/24 maxlen: 24
                          203.144.129.0/24 maxlen: 24
                          2001:fb0:101c::/48 maxlen: 48
                          2001:fb0:109e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15395 (0x3c23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:13:04 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc600-8918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:ff:64:22:c2:89:41:9f:a1:59:72:c1:a8:
                    59:41:d9:8b:f8:c7:c6:bc:1f:46:d8:3d:69:6e:09:
                    58:4c:7e:26:34:1e:02:5d:dd:33:0a:c8:9a:18:cf:
                    3f:50:b9:02:b9:bf:3f:1c:4f:82:7c:df:53:eb:d7:
                    7a:c8:12:ab:a6:83:9b:d4:93:e3:f0:37:2e:88:5f:
                    af:8a:3f:d3:c2:59:05:35:a2:bb:ac:e1:28:43:ab:
                    9e:d6:2a:3b:b6:64:80:e4:8a:9b:d6:dd:ed:dd:14:
                    c6:10:6d:ec:d7:2f:a3:8a:73:f4:f7:4a:7a:52:4b:
                    5e:de:92:eb:c7:d7:ef:35:f5:e2:92:51:e7:e5:af:
                    ca:ff:27:19:01:1c:3f:65:8c:6f:01:2f:02:32:e8:
                    2e:c6:cb:63:46:09:9c:32:4f:5a:39:5d:53:49:42:
                    a7:e5:4a:37:f4:60:aa:1d:21:a1:d0:d5:23:5c:af:
                    94:e7:f2:ba:5d:ee:c5:bc:db:75:cf:d9:77:ac:06:
                    fd:11:83:74:5a:3e:d2:fa:ae:d7:28:a8:ff:7e:b7:
                    b4:f1:44:8c:19:22:2e:7f:0e:ed:98:03:07:09:d4:
                    0e:1a:b8:88:d7:f4:fa:c5:9c:18:54:94:08:ef:aa:
                    e6:04:ad:34:5f:1a:92:a0:40:26:a2:04:d4:1a:b1:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:10:FF:B2:4F:B3:4B:DF:54:3E:83:13:E4:37:DC:5B:B3:B6:12:8D
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5218D5921E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.170.246.0/24
                  203.144.129.0/24
                IPv6:
                  2001:fb0:101c::/48
                  2001:fb0:109e::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:69:b8:ec:1c:05:f8:a3:b4:a2:7f:df:2d:46:25:8f:f7:04:
         c4:cf:12:a3:47:37:2e:e2:a1:a9:7c:fd:20:79:7b:7b:d2:40:
         3b:d0:7c:9b:a5:5b:d7:61:22:b1:c9:36:01:a5:1d:3c:45:bc:
         77:58:11:c1:e2:98:59:ae:07:49:45:36:11:74:b4:d9:b7:17:
         38:04:5d:1c:f1:98:61:bb:15:e6:ee:be:df:4b:13:e5:4c:ac:
         b0:48:68:da:64:d4:ac:f6:fa:b0:94:a7:8a:a7:a5:ff:c5:dd:
         47:e1:13:19:bd:1a:16:06:97:f0:4c:ce:be:85:db:7a:95:c3:
         6a:a0:75:f0:cf:9e:d7:0f:29:d0:24:cd:93:88:49:4a:69:ef:
         c6:6f:23:f9:56:13:43:01:6a:9d:45:8e:74:ba:99:9d:16:5d:
         fb:e8:2f:6a:64:6f:9d:e4:72:14:09:f2:08:0e:d0:4b:46:db:
         7c:a4:98:96:f5:2c:61:98:27:c4:13:ca:2d:52:e3:cc:32:66:
         db:d4:dc:88:cf:c0:ea:39:bc:41:5b:c7:5e:3b:50:44:d9:90:
         1e:9b:af:16:c0:cd:20:31:ce:6e:a8:ed:46:39:04:91:5f:d1:
         ee:ce:ae:ee:9d:0a:8c:05:8a:57:8c:c2:20:b2:76:04:ea:70:
         b5:46:22:ac
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICPCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMzA0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzYwMC04OTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1z/ZCLCiUGfoVlywahZQdmL+MfGvB9G2D1pbglYTH4mNB4CXd0zCsiaGM8/
ULkCub8/HE+CfN9T69d6yBKrpoOb1JPj8DcuiF+vij/TwlkFNaK7rOEoQ6ue1io7
tmSA5Iqb1t3t3RTGEG3s1y+jinP090p6Ukte3pLrx9fvNfXiklHn5a/K/ycZARw/
ZYxvAS8CMuguxstjRgmcMk9aOV1TSUKn5Uo39GCqHSGh0NUjXK+U5/K6Xe7FvNt1
z9l3rAb9EYN0Wj7S+q7XKKj/fre08USMGSIufw7tmAMHCdQOGriI1/T6xZwYVJQI
76rmBK00XxqSoEAmogTUGrEJ+wIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFIcQ/7JP
s0vfVD6DE+Q33FuzthKNMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNTIxOEQ1OTIx
RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS
BAIAATAMAwQAbqr2AwQAy5CBMBgEAgACMBIDBwAgAQ+wEBwDBwAgAQ+wEJ4wDQYJ
KoZIhvcNAQELBQADggEBABNpuOwcBfijtKJ/3y1GJY/3BMTPEqNHNy7ioal8/SB5
e3vSQDvQfJulW9dhIrHJNgGlHTxFvHdYEcHimFmuB0lFNhF0tNm3FzgEXRzxmGG7
Febuvt9LE+VMrLBIaNpk1Kz2+rCUp4qnpf/F3UfhExm9GhYGl/BMzr6F23qVw2qg
dfDPntcPKdAkzZOISUpp78ZvI/lWE0MBap1FjnS6mZ0WXfvoL2pkb53kchQJ8ggO
0EtG23ykmJb1LGGYJ8QTyi1S48wyZtvU3IjPwOo5vEFbx147UETZkB6brxbAzSAx
zm6o7UY5BJFf0e7Oru6dCowFileMwiCydgTqcLVGIqw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:07 2026 by rpki-client