Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa
File:                     3D83357646E411EE82ED8843C4F9AE02.roa (raw, json)
Hash identifier:          M/VXx2BREvwNHgixBQpTJl5Ai6BjqeXEvNMr3p9U1X8=
Subject key identifier:   64:7D:2F:3C:73:2E:5A:F4:BB:DC:6D:B0:6E:40:A0:6F:97:35:8A:E7
Certificate issuer:       /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
Certificate serial:       01F9
Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa
Signing time:             Tue 21 Apr 2026 03:35:17 +0000
ROA not before:           Tue 21 Apr 2026 03:35:17 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     4768
IP address blocks:        192.122.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl
                          rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 03:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500
        Validity
            Not Before: Apr 21 03:35:17 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e6f075-5c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:0b:0a:4f:24:9a:f8:87:6c:b4:88:cd:1e:
                    30:c3:2f:b8:73:50:26:3a:a1:0f:f9:8a:c0:10:89:
                    0c:fe:70:11:47:7b:57:13:89:b6:90:9a:65:35:38:
                    4a:3a:e1:dc:42:ff:c9:6e:4b:be:cd:16:28:cc:0c:
                    9e:1c:1a:b6:91:b8:cf:65:03:67:63:1b:46:60:69:
                    83:92:89:f1:60:92:01:b9:d2:2a:c7:7b:d6:a2:0e:
                    fd:02:ff:d1:0b:9b:07:85:3d:2b:8e:59:d9:65:c4:
                    78:76:42:5a:41:75:6a:01:cd:3b:9f:fd:d1:e7:cf:
                    8d:0c:3b:02:d6:e6:1e:fc:71:00:3a:5a:97:4d:ef:
                    73:58:c0:45:29:89:c0:28:e9:15:03:eb:6f:89:5c:
                    d6:02:12:ea:c6:27:e7:02:f8:fa:a5:ce:66:71:af:
                    70:d8:0c:de:cc:b5:89:6f:dd:b4:3b:7e:31:ae:0f:
                    e8:e3:67:a1:f8:7f:d4:2e:fa:d6:fd:e2:dc:2b:4f:
                    4a:42:48:be:b3:d5:32:ed:f0:21:45:29:22:34:5c:
                    9f:a5:6f:81:68:eb:a6:bc:e9:d2:05:53:2d:10:bd:
                    ba:8c:49:a6:6d:75:6e:8d:f2:9e:80:4c:37:30:95:
                    0d:11:79:04:6f:f9:28:b4:4c:02:b1:15:30:e7:70:
                    40:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7D:2F:3C:73:2E:5A:F4:BB:DC:6D:B0:6E:40:A0:6F:97:35:8A:E7
            X509v3 Authority Key Identifier:
                keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/3D83357646E411EE82ED8843C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.122.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ac:ef:cd:84:16:8c:6b:4a:5c:85:e2:93:b6:d3:95:41:12:
         0a:a4:e2:0e:07:4b:b1:35:44:95:45:4b:58:c0:a1:2b:87:c7:
         d1:0a:3c:7c:7e:2f:01:10:72:8f:5a:60:02:59:e9:b9:4b:ea:
         41:5b:e8:8d:ee:e9:0b:e6:18:08:a9:13:5b:02:71:02:f5:02:
         9c:5f:44:0c:a1:06:c0:24:37:fa:e7:d7:6a:06:cd:01:07:ca:
         79:fb:c7:0b:9e:e3:3f:6c:7b:94:5e:0d:ea:18:5e:be:c7:18:
         74:e1:3c:3c:8c:87:62:f2:2b:73:58:72:f8:0e:85:1f:92:36:
         79:04:c3:b9:15:13:2b:de:c6:1c:72:e7:00:82:6b:51:83:f7:
         3a:53:1b:1a:4d:eb:a3:8b:dd:be:63:41:59:1a:01:a7:17:ea:
         ee:7a:ec:de:ed:2c:ce:d3:c0:72:a5:7a:ad:80:6e:9f:8f:ee:
         b9:87:65:e4:8c:40:ee:44:5c:75:56:72:30:18:c2:71:09:90:
         e7:d2:f1:e1:a4:22:13:c9:64:a4:ef:86:3f:4e:f5:ee:58:88:
         76:6e:44:55:30:73:5a:0d:5f:5a:15:d3:1d:b7:00:b0:e8:b4:
         55:2d:32:62:2c:86:49:bf:c9:c1:d0:a4:50:14:4f:24:38:15:
         84:7a:ba:7d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzN0YxMTAvBgNVBAUTKDA0QTlCODkxOUIyMjBGNUYzRUFCRDBGNEREODVFMkY1
QkRCQzU1MDAwHhcNMjYwNDIxMDMzNTE3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU2ZjA3NS01YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHELCk8kmviHbLSIzR4wwy+4c1AmOqEP+YrAEIkM/nARR3tXE4m2kJplNThK
OuHcQv/Jbku+zRYozAyeHBq2kbjPZQNnYxtGYGmDkonxYJIBudIqx3vWog79Av/R
C5sHhT0rjlnZZcR4dkJaQXVqAc07n/3R58+NDDsC1uYe/HEAOlqXTe9zWMBFKYnA
KOkVA+tviVzWAhLqxifnAvj6pc5mca9w2AzezLWJb920O34xrg/o42eh+H/ULvrW
/eLcK09KQki+s9Uy7fAhRSkiNFyfpW+BaOumvOnSBVMtEL26jEmmbXVujfKegEw3
MJUNEXkEb/kotEwCsRUw53BAewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGR9Lzxz
Llr0u9xtsG5AoG+XNYrnMB8GA1UdIwQYMBaAFASpuJGbIg9fPqvQ9N2F4vW9vFUA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODM3Ri82NDU5MEMxMjQ2
RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi9CS200a1pzaUQxOC1xOUQwM1lYaTliMjhW
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JLbTRrWnNpRDE4LXE5RDAzWVhpOWIyOFZRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzgzN0YvNjQ1OTBDMTI0NkUzMTFFRUI1RTQxNjQyQzRGOUFFMDIvM0Q4MzM1NzY0
NkU0MTFFRTgyRUQ4ODQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwHq0MA0GCSqGSIb3DQEBCwUAA4IBAQCBrO/NhBaMa0pcheKTttOV
QRIKpOIOB0uxNUSVRUtYwKErh8fRCjx8fi8BEHKPWmACWem5S+pBW+iN7ukL5hgI
qRNbAnEC9QKcX0QMoQbAJDf659dqBs0BB8p5+8cLnuM/bHuUXg3qGF6+xxh04Tw8
jIdi8itzWHL4DoUfkjZ5BMO5FRMr3sYccucAgmtRg/c6UxsaTeuji92+Y0FZGgGn
F+rueuze7SzO08BypXqtgG6fj+65h2XkjEDuRFx1VnIwGMJxCZDn0vHhpCITyWSk
74Y/TvXuWIh2bkRVMHNaDV9aFdMdtwCw6LRVLTJiLIZJv8nB0KRQFE8kOBWEerp9
-----END CERTIFICATE-----
Generated at Wed Apr 29 16:03:58 2026 by rpki-client