Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa
File:                     147B50A8D70411EFA945F56EC4F9AE02.roa (raw, json)
Hash identifier:          cYx6l8Vt8EJsdln8S7BM7QXiBCdMz2V7snGbX23mjjY=
Subject key identifier:   A9:FA:93:7F:13:66:27:E4:20:1A:A6:9C:DA:F6:99:21:19:AB:BC:C8
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C84
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa
Signing time:             Fri 09 Oct 2026 07:58:56 +0000
ROA not before:           Fri 09 Oct 2026 07:58:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     17556
IP address blocks:        58.97.124.0/24 maxlen: 24
                          58.97.125.0/24 maxlen: 24
                          114.109.249.0/24 maxlen: 24
                          115.87.70.0/24 maxlen: 24
                          115.87.71.0/24 maxlen: 24
                          115.87.72.0/24 maxlen: 24
                          115.87.73.0/24 maxlen: 24
                          119.46.99.0/24 maxlen: 24
                          119.46.255.0/24 maxlen: 24
                          124.120.219.0/24 maxlen: 24
                          210.86.191.0/24 maxlen: 24
                          2001:fb0:101::/48 maxlen: 48
                          2001:fb0:102::/48 maxlen: 48
                          2001:fb0:10b2::/48 maxlen: 48
                          2001:fb1::/32 maxlen: 48
                          2001:fb1:3009:1::/64 maxlen: 64
                          2001:fb1:3009:2::/64 maxlen: 64
                          2001:fb1:3009:3::/64 maxlen: 64
                          2001:fb1:3009:7::/64 maxlen: 64
                          2001:fb1:3009:3e::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15492 (0x3c84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Oct  9 07:58:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ac89ec0-2544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:88:57:72:9f:c4:ea:5c:4f:67:7e:37:48:04:
                    86:9f:3b:f0:ee:2b:14:31:7a:5d:02:80:ad:9c:02:
                    6a:cf:1d:41:fd:f3:83:f2:2a:8b:4c:40:bb:f6:24:
                    f0:be:3a:0f:b5:f3:d9:4b:0e:3f:d5:2d:31:0f:80:
                    70:31:8e:76:ed:b4:ca:48:40:8d:62:11:f8:49:a6:
                    bd:d8:8c:11:5c:73:db:7a:a0:52:9f:71:26:bb:e8:
                    49:13:95:83:77:8a:ec:3e:f2:5f:b2:81:fa:7a:c0:
                    c0:b7:94:5f:b1:a7:5a:84:eb:93:82:a7:be:1e:4e:
                    13:e0:6f:5e:d5:df:f9:4b:cc:2b:15:71:df:9a:83:
                    b8:dd:15:20:f7:32:58:d2:b3:d4:86:b4:b9:bf:3a:
                    d8:dd:2f:34:50:1b:ef:31:ac:d7:1e:ae:73:c1:50:
                    4d:9a:df:b4:23:26:30:32:55:d4:f2:80:b0:63:5c:
                    50:9b:26:84:3b:0b:17:8b:86:19:5a:60:e4:c0:8c:
                    e6:35:f8:95:06:55:b0:97:f6:51:49:ed:4b:d2:34:
                    ce:46:32:3f:a6:14:40:12:82:0b:71:58:74:f2:61:
                    5a:0f:38:4b:4f:b8:18:9a:d2:89:0d:71:09:8b:77:
                    a6:34:be:97:38:ad:d8:47:47:7a:d5:94:6d:0f:2f:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FA:93:7F:13:66:27:E4:20:1A:A6:9C:DA:F6:99:21:19:AB:BC:C8
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/147B50A8D70411EFA945F56EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.124.0/23
                  114.109.249.0/24
                  115.87.70.0-115.87.73.255
                  119.46.99.0/24
                  119.46.255.0/24
                  124.120.219.0/24
                  210.86.191.0/24
                IPv6:
                  2001:fb0:101::-2001:fb0:102:ffff:ffff:ffff:ffff:ffff
                  2001:fb0:10b2::/48
                  2001:fb1::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:7f:6f:f4:dc:0a:e7:eb:d2:5e:a0:64:f9:e5:c4:05:eb:c1:
         6d:01:ee:45:b1:59:5e:93:3e:61:55:77:a6:19:70:08:f2:d8:
         f4:fe:30:2e:df:ff:02:2c:7b:3d:26:dd:ee:bc:b4:67:c0:40:
         e4:0d:d8:40:d9:47:b1:fe:ef:77:f6:a6:2f:40:81:b7:50:0e:
         58:0e:05:49:c7:e9:ab:46:26:7d:fd:83:22:67:17:51:50:ba:
         c1:93:57:70:a8:f4:a3:d2:1f:98:d8:09:96:41:3a:a6:4a:a1:
         c5:62:8b:26:13:43:a2:ed:77:30:84:ab:fe:e6:cd:42:48:17:
         94:8c:f9:c9:0e:95:bf:74:ff:ba:3c:5f:ad:41:05:6b:f1:a7:
         c3:61:3c:14:5f:91:23:74:57:78:e6:68:80:b6:d6:1a:bc:d6:
         cc:54:58:0f:97:2f:d5:31:3d:ce:ff:6c:ae:95:0a:43:26:b0:
         77:23:e1:fe:5a:b8:0a:3e:f8:01:98:fd:ca:1b:fe:ac:3c:2b:
         67:1b:5f:4c:52:84:e1:2f:6f:43:7f:ed:55:0b:40:9e:16:e7:
         b1:8c:27:18:ee:13:88:ae:c6:11:d3:82:4b:35:8a:b5:ef:90:
         41:35:31:46:f2:cc:5e:76:8e:71:62:0c:3b:21:e3:08:59:5b:
         46:32:75:2d
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICPIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYxMDA5MDc1ODU2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM4OWVjMC0yNTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IhXcp/E6lxPZ343SASGnzvw7isUMXpdAoCtnAJqzx1B/fOD8iqLTEC79iTw
vjoPtfPZSw4/1S0xD4BwMY527bTKSECNYhH4Saa92IwRXHPbeqBSn3Emu+hJE5WD
d4rsPvJfsoH6esDAt5RfsadahOuTgqe+Hk4T4G9e1d/5S8wrFXHfmoO43RUg9zJY
0rPUhrS5vzrY3S80UBvvMazXHq5zwVBNmt+0IyYwMlXU8oCwY1xQmyaEOwsXi4YZ
WmDkwIzmNfiVBlWwl/ZRSe1L0jTORjI/phRAEoILcVh08mFaDzhLT7gYmtKJDXEJ
i3emNL6XOK3YR0d61ZRtDy8mGQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFKn6k38T
ZifkIBqmnNr2mSEZq7zIMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMTQ3QjUwQThE
NzA0MTFFRkE5NDVGNTZFQzRGOUFFMDIucm9hMHcGCCsGAQUFBwEHAQH/BGgwZjA4
BAIAATAyAwQBOmF8AwQAcm35MAwDBAFzV0YDBAFzV0gDBAB3LmMDBAB3Lv8DBAB8
eNsDBADSVr8wKgQCAAIwJDASAwcAIAEPsAEBAwcAIAEPsAECAwcAIAEPsBCyAwUA
IAEPsTANBgkqhkiG9w0BAQsFAAOCAQEAhH9v9NwK5+vSXqBk+eXEBevBbQHuRbFZ
XpM+YVV3phlwCPLY9P4wLt//Aix7PSbd7ry0Z8BA5A3YQNlHsf7vd/amL0CBt1AO
WA4FScfpq0Ymff2DImcXUVC6wZNXcKj0o9IfmNgJlkE6pkqhxWKLJhNDou13MISr
/ubNQkgXlIz5yQ6Vv3T/ujxfrUEFa/Gnw2E8FF+RI3RXeOZogLbWGrzWzFRYD5cv
1TE9zv9srpUKQyawdyPh/lq4Cj74AZj9yhv+rDwrZxtfTFKE4S9vQ3/tVQtAnhbn
sYwnGO4TiK7GEdOCSzWKte+QQTUxRvLMXnaOcWIMOyHjCFlbRjJ1LQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:01 2026 by rpki-client