Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6B4DD2F0BE4A11F1B3C6EB026711F970.roa
File:                     6B4DD2F0BE4A11F1B3C6EB026711F970.roa (raw, json)
Hash identifier:          U0cQUuGQRi/IIGTgd61WJSLqYucJeCgIHOf3JjQhLcs=
Subject key identifier:   06:C6:24:D9:DE:45:75:81:43:A9:50:F2:0A:6B:12:77:41:D2:3B:25
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0E6A
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6B4DD2F0BE4A11F1B3C6EB026711F970.roa
Signing time:             Fri 02 Oct 2026 10:17:06 +0000
ROA not before:           Fri 02 Oct 2026 10:17:06 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     219393
IP address blocks:        61.18.217.0/24 maxlen: 24
                          61.18.219.0/24 maxlen: 24
                          61.18.221.0/24 maxlen: 24
                          61.18.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3690 (0xe6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Oct  2 10:17:06 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6abf84a2-57c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7c:9f:e8:24:d3:7f:36:b7:7e:50:e1:03:ef:
                    05:da:38:6e:3d:d9:f7:e2:a8:39:69:ee:c4:16:ba:
                    d4:43:f4:1c:18:da:be:ab:a3:34:79:f2:10:85:a8:
                    67:7b:69:09:f5:54:68:42:42:e4:44:b3:f6:2a:4c:
                    6f:3d:99:b6:20:ea:c7:5e:a7:1d:98:6d:53:28:9b:
                    b5:fe:42:73:b3:96:11:77:40:91:03:09:6a:9f:08:
                    22:d9:7f:5e:27:c1:cc:e3:cf:20:0a:be:a0:8d:18:
                    39:e6:2e:92:ca:60:a8:33:0f:7e:0c:cd:a4:30:2c:
                    1a:95:50:f6:ee:e2:7c:a7:f4:f1:4b:cf:cd:2c:89:
                    cb:ad:4b:29:f5:87:32:38:7e:81:af:ce:a9:90:ec:
                    7d:1d:a9:53:96:8b:54:61:28:49:a6:2e:e9:3f:82:
                    b4:4d:74:33:d5:75:94:5d:bd:e1:bf:dd:08:02:25:
                    d3:e7:fc:34:24:2f:78:df:a1:37:e0:07:95:d4:52:
                    a2:1d:79:ce:c0:61:42:94:09:e6:d1:74:58:53:15:
                    b0:49:be:a4:29:9f:9b:b4:fe:47:75:25:07:47:46:
                    78:62:26:d1:56:db:b5:6f:2a:37:e4:b6:a1:c9:3b:
                    59:68:38:a3:bb:6c:af:95:48:e8:21:41:d2:5f:0e:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C6:24:D9:DE:45:75:81:43:A9:50:F2:0A:6B:12:77:41:D2:3B:25
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6B4DD2F0BE4A11F1B3C6EB026711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.18.217.0/24
                  61.18.219.0/24
                  61.18.221.0/24
                  61.18.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:52:df:3d:04:55:dc:62:6f:b2:91:0e:13:95:40:e5:eb:05:
         81:4e:d6:10:ee:7c:c9:95:5e:b2:22:0f:e9:e5:db:46:6b:bf:
         11:9c:cd:4b:67:22:b8:1e:ea:b8:e8:01:98:a3:81:66:0b:c1:
         c6:b5:f3:0c:88:d9:68:da:2f:71:29:2e:35:22:59:f1:b6:45:
         d6:23:6f:23:52:6c:02:8b:db:b8:36:47:2c:a8:00:a9:25:df:
         59:a8:c5:e5:92:81:bc:ba:e4:75:b8:26:3f:4b:4e:db:25:4e:
         2e:c4:68:ea:1c:a4:f3:88:8d:b0:b2:1a:4e:22:6a:99:ad:f1:
         8a:7d:b9:1f:c8:ab:56:a9:f5:4a:fc:8d:35:99:45:02:ef:14:
         56:5a:46:4f:3f:a0:52:fe:0c:1a:0c:b0:b7:54:c9:7d:61:d5:
         a6:72:2f:05:3b:1b:6b:d9:54:e2:5b:59:ef:ee:3f:c3:06:e6:
         59:34:29:ce:26:a5:39:5e:3b:02:82:4c:5b:a9:5c:b5:e1:b0:
         f0:63:c9:3a:1c:0b:ef:d1:c6:f3:0a:29:ff:ee:6e:1d:f2:07:
         3a:ae:73:50:c4:78:1c:22:d3:3d:b8:fa:03:fb:eb:9e:30:8e:
         1e:da:b3:d0:b3:70:0f:85:fa:e1:2e:af:e5:75:c5:1f:64:e5:
         92:51:ac:f9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICDmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjYxMDAyMTAxNzA2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmODRhMi01N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03yf6CTTfza3flDhA+8F2jhuPdn34qg5ae7EFrrUQ/QcGNq+q6M0efIQhahn
e2kJ9VRoQkLkRLP2KkxvPZm2IOrHXqcdmG1TKJu1/kJzs5YRd0CRAwlqnwgi2X9e
J8HM488gCr6gjRg55i6SymCoMw9+DM2kMCwalVD27uJ8p/TxS8/NLInLrUsp9Ycy
OH6Br86pkOx9HalTlotUYShJpi7pP4K0TXQz1XWUXb3hv90IAiXT5/w0JC9436E3
4AeV1FKiHXnOwGFClAnm0XRYUxWwSb6kKZ+btP5HdSUHR0Z4YibRVtu1byo35Lah
yTtZaDiju2yvlUjoIUHSXw4ARQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFAbGJNne
RXWBQ6lQ8gprEndB0jslMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNkI0REQyRjBC
RTRBMTFGMUIzQzZFQjAyNjcxMUY5NzAucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAPRLZAwQAPRLbAwQAPRLdAwQAPRLfMA0GCSqGSIb3DQEBCwUAA4IB
AQBEUt89BFXcYm+ykQ4TlUDl6wWBTtYQ7nzJlV6yIg/p5dtGa78RnM1LZyK4Huq4
6AGYo4FmC8HGtfMMiNlo2i9xKS41IlnxtkXWI28jUmwCi9u4NkcsqACpJd9ZqMXl
koG8uuR1uCY/S07bJU4uxGjqHKTziI2wshpOImqZrfGKfbkfyKtWqfVK/I01mUUC
7xRWWkZPP6BS/gwaDLC3VMl9YdWmci8FOxtr2VTiW1nv7j/DBuZZNCnOJqU5XjsC
gkxbqVy14bDwY8k6HAvv0cbzCin/7m4d8gc6rnNQxHgcItM9uPoD++ueMI4e2rPQ
s3APhfrhLq/ldcUfZOWSUaz5
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:07 2026 by rpki-client