Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6D541B1863D611ED863A4C1EC4F9AE02.roa
File:                     6D541B1863D611ED863A4C1EC4F9AE02.roa (raw, json)
Hash identifier:          3GHPli74eaNyGEuQezvPtJt639987T26//DXqPBD2so=
Subject key identifier:   CF:6A:43:95:38:38:0D:C1:18:4F:60:73:8C:D2:3D:CF:89:EE:18:80
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C16
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6D541B1863D611ED863A4C1EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:12:38 +0000
ROA not before:           Mon 06 Jul 2026 15:12:38 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38543
IP address blocks:        58.97.62.0/24 maxlen: 24
                          61.90.164.0/24 maxlen: 24
                          203.144.208.0/24 maxlen: 24
                          2001:fb0:10d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15382 (0x3c16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:12:38 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5e6-9fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:0d:a4:d9:50:47:0b:d6:ff:45:70:9b:88:
                    28:20:ca:db:fb:c2:83:ed:6a:80:0f:1c:6e:19:1e:
                    71:6d:1c:2f:6c:75:28:0f:07:cf:7c:7b:dd:59:5a:
                    aa:2e:23:bf:82:ae:3b:f6:45:f2:3e:2f:18:d2:5d:
                    39:b8:28:1f:91:52:c5:89:82:e6:3f:9f:8a:43:3c:
                    2d:c9:c9:8e:fa:ac:05:aa:ec:24:50:0a:0a:00:47:
                    3b:10:bb:a2:53:30:26:e9:28:61:c2:1f:f5:15:7a:
                    f4:be:8e:06:ef:6f:97:3b:f7:06:66:a4:ba:72:4a:
                    11:6b:9f:59:bb:74:2d:66:96:c7:5e:22:13:10:18:
                    b6:e3:c5:50:4d:45:9c:81:45:06:d7:3c:02:90:bb:
                    e0:78:46:db:1d:e6:87:8c:88:c3:bf:93:76:f2:47:
                    3a:c1:1e:47:7c:85:6d:c9:6e:80:dc:3a:dd:14:f3:
                    8f:95:3c:e8:fb:bb:5c:8f:f4:ff:ba:3a:df:0f:1d:
                    81:2e:71:14:a0:54:4b:a3:a5:7f:fe:1d:cc:60:e6:
                    36:14:6b:aa:67:1f:fb:d8:df:24:23:e7:75:dc:0e:
                    9f:bc:f2:2c:98:53:a6:8b:ce:d4:9e:1a:28:bb:09:
                    a3:d7:d8:58:8d:c5:aa:79:93:2a:71:a4:0f:04:37:
                    9d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6A:43:95:38:38:0D:C1:18:4F:60:73:8C:D2:3D:CF:89:EE:18:80
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6D541B1863D611ED863A4C1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.62.0/24
                  61.90.164.0/24
                  203.144.208.0/24
                IPv6:
                  2001:fb0:10d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:24:87:17:13:31:32:1b:4a:34:e1:d5:26:8a:41:1f:d6:
         17:b0:3b:8f:fe:19:1b:38:4c:43:db:db:c8:eb:08:c9:6b:62:
         9f:87:e1:aa:bf:ab:84:37:53:c1:0f:62:79:a0:14:96:d3:47:
         56:ec:6c:80:49:34:77:0a:4d:6e:6f:9b:21:01:a8:e1:41:dd:
         8b:5d:b4:c9:80:83:45:6c:95:58:b3:23:13:7a:0c:76:fa:70:
         0c:39:ba:33:c2:77:75:6a:69:06:73:2f:d5:05:47:bb:3f:3d:
         9c:fa:35:20:da:3a:27:d0:30:e7:4d:f6:0f:50:b3:d0:c2:db:
         b8:8f:ef:94:78:d3:59:1f:92:d3:b1:36:2b:f5:c1:fa:e2:d5:
         36:10:eb:de:8b:ca:f1:be:c4:8c:c0:86:dd:19:a2:17:3f:94:
         29:f1:08:cb:86:2b:a6:e5:77:0a:9a:88:47:79:94:0d:06:2b:
         df:77:e7:a1:52:97:90:4c:23:4d:fb:2f:60:29:d5:57:b8:08:
         dc:1d:7a:26:22:74:f1:a8:38:e5:df:d9:b3:ad:56:5c:bd:23:
         74:38:db:b3:96:19:e7:df:69:87:87:b8:2c:58:ae:4b:ef:49:
         46:c0:91:7e:80:ba:e3:b9:cf:da:88:1a:a6:77:4a:05:f9:42:
         ed:02:72:fa
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgICPBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMjM4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzVlNi05ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu3oNpNlQRwvW/0Vwm4goIMrb+8KD7WqADxxuGR5xbRwvbHUoDwfPfHvdWVqq
LiO/gq479kXyPi8Y0l05uCgfkVLFiYLmP5+KQzwtycmO+qwFquwkUAoKAEc7ELui
UzAm6Shhwh/1FXr0vo4G72+XO/cGZqS6ckoRa59Zu3QtZpbHXiITEBi248VQTUWc
gUUG1zwCkLvgeEbbHeaHjIjDv5N28kc6wR5HfIVtyW6A3DrdFPOPlTzo+7tcj/T/
ujrfDx2BLnEUoFRLo6V//h3MYOY2FGuqZx/72N8kI+d13A6fvPIsmFOmi87Unhoo
uwmj19hYjcWqeZMqcaQPBDedCQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFM9qQ5U4
OA3BGE9gc4zSPc+J7hiAMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNkQ1NDFCMTg2
M0Q2MTFFRDg2M0E0QzFFQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY
BAIAATASAwQAOmE+AwQAPVqkAwQAy5DQMA8EAgACMAkDBwAgAQ+wENAwDQYJKoZI
hvcNAQELBQADggEBAFHZJIcXEzEyG0o04dUmikEf1hewO4/+GRs4TEPb28jrCMlr
Yp+H4aq/q4Q3U8EPYnmgFJbTR1bsbIBJNHcKTW5vmyEBqOFB3YtdtMmAg0VslViz
IxN6DHb6cAw5ujPCd3VqaQZzL9UFR7s/PZz6NSDaOifQMOdN9g9Qs9DC27iP75R4
01kfktOxNiv1wfri1TYQ696LyvG+xIzAht0Zohc/lCnxCMuGK6bldwqaiEd5lA0G
K99356FSl5BMI037L2Ap1Ve4CNwdeiYidPGoOOXf2bOtVly9I3Q427OWGeffaYeH
uCxYrkvvSUbAkX6AuuO5z9qIGqZ3SgX5Qu0Ccvo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:13 2026 by rpki-client