Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa
File:                     8D0B94E6729F11EC85AE6D45C4F9AE02.roa (raw, json)
Hash identifier:          pj3Z0KCpB6eZz2MgOMyqS6/vJrHE3gaDN+M1+yE199g=
Subject key identifier:   3B:D8:B5:3B:E7:71:33:4A:1E:EE:4F:EB:EC:34:7F:A2:3A:A8:0E:1C
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C34
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:13:36 +0000
ROA not before:           Mon 06 Jul 2026 15:13:36 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     58692
IP address blocks:        119.46.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15412 (0x3c34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:13:36 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc620-3d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:79:92:8f:53:48:03:b7:87:0e:17:2d:0d:ea:
                    6d:19:cc:4a:2c:64:41:1f:64:f8:07:38:48:cd:ef:
                    12:c1:c8:69:cd:b6:3c:b9:17:de:fb:7e:5f:28:df:
                    1f:82:d2:93:e6:4f:11:12:89:08:cf:45:4e:5f:55:
                    11:97:bc:1f:6e:f7:61:44:51:79:24:e4:48:7b:72:
                    5b:52:1e:49:a8:e0:5f:30:cf:29:d8:c1:23:a1:b5:
                    25:84:a2:ac:dc:32:c4:42:a0:38:06:a5:20:c4:fe:
                    b0:24:83:a1:59:bd:c3:e6:91:c7:fd:e1:e7:0a:2b:
                    52:6a:cd:97:f1:5d:f0:91:47:94:d8:bd:d6:36:3c:
                    5f:50:61:b6:14:15:5f:5c:49:2f:71:12:5f:54:39:
                    60:23:9a:78:cc:e6:d0:9f:f0:e1:0c:ae:74:96:f4:
                    46:ef:c1:54:94:d2:30:20:0f:a9:e8:64:79:19:58:
                    b1:fa:0a:e5:c8:36:7f:ec:61:b0:c9:a1:a9:30:54:
                    67:8e:5f:f8:4f:2b:72:1e:86:99:76:c4:17:e3:ea:
                    45:0b:bf:7b:4c:ba:c6:ca:3a:6e:51:d6:43:40:9f:
                    34:3e:df:d1:c3:36:c2:fc:27:f7:b7:d8:c0:2c:c6:
                    25:12:a4:bc:0c:18:f9:22:7f:cb:da:70:09:fa:36:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D8:B5:3B:E7:71:33:4A:1E:EE:4F:EB:EC:34:7F:A2:3A:A8:0E:1C
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8D0B94E6729F11EC85AE6D45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:f7:2b:f2:ed:d8:05:a4:d6:2c:50:e1:3b:f6:35:d0:01:
         5d:a2:e4:69:3c:c2:d1:82:01:05:4e:45:f7:26:77:dd:ae:cd:
         ce:7d:37:19:d6:61:f0:ea:c1:80:96:8c:08:66:92:27:1e:e6:
         87:88:d7:15:db:ac:e3:83:56:26:2e:36:e6:e4:ff:bd:30:9a:
         94:0e:c0:14:49:35:24:bc:c5:68:7b:fe:fb:0c:2b:5d:41:14:
         27:15:50:c6:f6:83:cd:26:ed:fd:2c:e0:80:fd:e1:91:74:90:
         04:9a:32:98:20:da:5e:76:60:1c:95:8f:62:67:7a:f7:1a:c4:
         6c:42:0a:de:6d:76:77:01:a9:23:5c:3d:b1:de:8e:97:f4:ba:
         79:a1:40:d0:9d:bf:c1:b7:ab:41:bd:7f:a7:ca:8c:b0:95:6e:
         1f:ad:e3:eb:d6:ca:2e:73:fe:0a:e2:cb:01:fe:ae:bd:55:e8:
         b7:1b:bd:38:a7:d7:ab:0d:6a:1c:1b:1d:10:77:43:72:3d:84:
         79:a4:14:02:ce:6a:ef:cd:41:a0:df:18:98:a6:6b:6d:24:cf:
         77:29:49:a1:f8:61:e6:b2:6b:a0:d0:a2:6c:a5:2e:78:7e:46:
         b7:d7:e6:ed:ec:08:55:04:33:c6:e0:73:83:57:58:d1:f7:09:
         8d:36:c0:df
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMzM2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzYyMC0zZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA93mSj1NIA7eHDhctDeptGcxKLGRBH2T4BzhIze8SwchpzbY8uRfe+35fKN8f
gtKT5k8REokIz0VOX1URl7wfbvdhRFF5JORIe3JbUh5JqOBfMM8p2MEjobUlhKKs
3DLEQqA4BqUgxP6wJIOhWb3D5pHH/eHnCitSas2X8V3wkUeU2L3WNjxfUGG2FBVf
XEkvcRJfVDlgI5p4zObQn/DhDK50lvRG78FUlNIwIA+p6GR5GVix+grlyDZ/7GGw
yaGpMFRnjl/4TytyHoaZdsQX4+pFC797TLrGyjpuUdZDQJ80Pt/RwzbC/Cf3t9jA
LMYlEqS8DBj5In/L2nAJ+jbbQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDvYtTvn
cTNKHu5P6+w0f6I6qA4cMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvOEQwQjk0RTY3
MjlGMTFFQzg1QUU2RDQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdy5+MA0GCSqGSIb3DQEBCwUAA4IBAQAvE/cr8u3YBaTWLFDhO/Y1
0AFdouRpPMLRggEFTkX3Jnfdrs3OfTcZ1mHw6sGAlowIZpInHuaHiNcV26zjg1Ym
Ljbm5P+9MJqUDsAUSTUkvMVoe/77DCtdQRQnFVDG9oPNJu39LOCA/eGRdJAEmjKY
INpedmAclY9iZ3r3GsRsQgrebXZ3AakjXD2x3o6X9Lp5oUDQnb/Bt6tBvX+nyoyw
lW4frePr1souc/4K4ssB/q69Vei3G704p9erDWocGx0Qd0NyPYR5pBQCzmrvzUGg
3xiYpmttJM93KUmh+GHmsmug0KJspS54fka31+bt7AhVBDPG4HODV1jR9wmNNsDf
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:16 2026 by rpki-client