Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/A7EA26127C7511F1A21A554E75A30FBC.roa
File:                     A7EA26127C7511F1A21A554E75A30FBC.roa (raw, json)
Hash identifier:          BGxj9JZPsci+IfGkHlmqHb1QKouulEgZC6AeVROuOFI=
Subject key identifier:   A2:47:96:E0:8F:53:50:13:19:E1:8F:12:F5:42:A1:FA:93:A3:AE:BC
Certificate issuer:       /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial:       2C
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/A7EA26127C7511F1A21A554E75A30FBC.roa
Signing time:             Fri 10 Jul 2026 15:40:20 +0000
ROA not before:           Fri 10 Jul 2026 15:40:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140572
IP address blocks:        162.4.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
                          rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
        Validity
            Not Before: Jul 10 15:40:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a511264-7655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:76:05:ca:6f:f3:96:42:30:3f:c1:5d:88:
                    76:76:a2:db:00:15:6a:ce:ae:de:97:24:af:76:23:
                    38:6d:d0:4b:53:36:80:57:e1:8c:e7:dc:cb:48:3e:
                    b6:b6:fd:8f:91:8f:b8:c9:d3:82:85:ff:52:9a:8f:
                    79:5c:aa:39:e0:2c:78:3b:88:68:8d:39:7a:b6:38:
                    d4:15:ae:ca:f5:09:64:95:a3:9b:46:32:6a:e6:b4:
                    f3:96:c2:1c:4a:eb:2f:eb:0b:d0:fb:a7:d6:47:3f:
                    be:a6:dc:09:ee:e4:d3:09:83:03:e6:eb:5b:d4:10:
                    ad:20:da:9d:3d:ef:57:c0:ba:6c:66:d7:f2:12:ee:
                    a0:59:9b:be:50:ba:8f:b6:60:22:45:9d:23:87:7e:
                    5c:74:25:cc:54:4d:9f:5c:7e:d5:d9:f7:81:0e:4b:
                    54:f4:f7:1a:a9:88:62:23:98:59:93:57:54:87:cb:
                    f5:7b:24:7f:6e:2c:c1:1b:92:b8:26:e1:95:11:43:
                    cb:7f:87:74:9b:e6:2e:96:d9:ad:4b:24:d9:18:a7:
                    24:e5:e7:d1:4f:4a:2a:51:6c:e9:e5:ba:3b:15:28:
                    cc:c1:c2:74:bb:29:32:64:78:3a:82:1b:6b:fe:a0:
                    b3:08:f1:95:04:5e:46:1d:b5:10:f5:0c:29:fb:db:
                    b8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:96:E0:8F:53:50:13:19:E1:8F:12:F5:42:A1:FA:93:A3:AE:BC
            X509v3 Authority Key Identifier:
                keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/A7EA26127C7511F1A21A554E75A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:4c:b0:64:9e:3d:fa:47:1d:cc:b7:be:30:12:ff:7f:2b:04:
         e3:87:20:2d:f9:1e:6f:30:81:e6:4c:34:07:3a:dc:14:01:65:
         b9:9a:55:dd:21:92:f7:77:e2:fa:1e:3b:9e:a6:85:23:d8:84:
         ee:1d:3e:64:b9:f6:2d:99:b3:18:00:ab:47:45:7a:9a:2d:14:
         ad:a6:4e:fe:af:62:00:42:2a:17:4c:ff:aa:fc:47:dc:3b:43:
         73:fb:60:52:0d:71:95:1a:6c:27:b2:20:33:99:0c:3e:2e:42:
         34:f0:c1:f9:4b:a7:ab:56:8f:3d:03:0e:01:b2:7a:b7:86:58:
         a3:ab:3a:55:71:00:ea:a4:24:36:9c:98:04:dc:5f:02:04:16:
         ea:d6:df:a1:76:95:0b:f7:bb:5f:12:ad:58:6d:ca:24:e4:99:
         cc:33:f0:b5:96:d5:7d:cc:96:85:fc:94:b6:22:99:a3:c6:7b:
         60:40:f1:22:54:31:9a:b3:d3:50:a8:ac:ce:44:b4:d5:84:58:
         fd:7f:8a:cf:b5:a9:fc:41:30:c9:a3:a9:36:59:f5:84:67:9e:
         4e:ed:12:dd:f1:fe:c6:5b:86:b7:b4:97:cb:73:5c:c8:ce:16:
         fd:3d:d0:3a:84:2d:94:16:db:d8:2f:56:f0:46:7e:7f:05:2c:
         bb:0e:e7:f8
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RUVEOTExMC8GA1UEBRMoNEFCRjY2NkIxRTNDNkM3MTJDNEI0NzcwMUJGREQxNTdE
RTAzOEYyRjAeFw0yNjA3MTAxNTQwMjBaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNTExMjY0LTc2NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTXHYFym/zlkIwP8FdiHZ2otsAFWrOrt6XJK92Izht0EtTNoBX4Yzn3MtIPra2
/Y+Rj7jJ04KF/1Kaj3lcqjngLHg7iGiNOXq2ONQVrsr1CWSVo5tGMmrmtPOWwhxK
6y/rC9D7p9ZHP76m3Anu5NMJgwPm61vUEK0g2p0971fAumxm1/IS7qBZm75Quo+2
YCJFnSOHflx0JcxUTZ9cftXZ94EOS1T09xqpiGIjmFmTV1SHy/V7JH9uLMEbkrgm
4ZURQ8t/h3Sb5i6W2a1LJNkYpyTl59FPSipRbOnlujsVKMzBwnS7KTJkeDqCG2v+
oLMI8ZUEXkYdtRD1DCn727gXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUokeW4I9T
UBMZ4Y8S9UKh+pOjrrwwHwYDVR0jBBgwFoAUSr9max48bHEsS0dwG/3RV94Djy8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRUQ5LzI0MkUwQkJBNDNB
NzExRjFBNTkxMTJFMDkzODMzNzczL1NyOW1heDQ4YkhFc1MwZHdHXzNSVjk0RGp5
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvU3I5bWF4NDhiSEVzUzBkd0dfM1JWOTREank4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUVEOS8yNDJFMEJCQTQzQTcxMUYxQTU5MTEyRTA5MzgzMzc3My9BN0VBMjYxMjdD
NzUxMUYxQTIxQTU1NEU3NUEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACiBDEwDQYJKoZIhvcNAQELBQADggEBAEJMsGSePfpHHcy3vjAS/38r
BOOHIC35Hm8wgeZMNAc63BQBZbmaVd0hkvd34voeO56mhSPYhO4dPmS59i2ZsxgA
q0dFepotFK2mTv6vYgBCKhdM/6r8R9w7Q3P7YFINcZUabCeyIDOZDD4uQjTwwflL
p6tWjz0DDgGyereGWKOrOlVxAOqkJDacmATcXwIEFurW36F2lQv3u18SrVhtyiTk
mcwz8LWW1X3MloX8lLYimaPGe2BA8SJUMZqz01CorM5EtNWEWP1/is+1qfxBMMmj
qTZZ9YRnnk7tEt3x/sZbhre0l8tzXMjOFv090DqELZQW29gvVvBGfn8FLLsO5/g=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:39 2026 by rpki-client