Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/F72199D4C23111F1AADE648B5A11F970.roa
File:                     F72199D4C23111F1AADE648B5A11F970.roa (raw, json)
Hash identifier:          AiEjjG8pw2r8DAOtvGL+9ko0yxwM+202DD+kZXh9KDo=
Subject key identifier:   75:25:FA:83:DB:2D:BA:A3:79:C0:DC:0D:BE:2C:6F:16:DC:DB:74:5C
Certificate issuer:       /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial:       19AE
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/F72199D4C23111F1AADE648B5A11F970.roa
Signing time:             Wed 07 Oct 2026 09:32:08 +0000
ROA not before:           Wed 07 Oct 2026 09:32:08 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     134489
IP address blocks:        122.129.86.0/24 maxlen: 24
                          203.128.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 16:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6574 (0x19ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
        Validity
            Not Before: Oct  7 09:32:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6ac61198-0ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:3b:bd:4d:a4:28:6f:a7:f0:02:ea:ee:d5:
                    94:ae:7b:11:4c:16:f5:80:22:54:9c:32:6f:fa:63:
                    92:bf:8a:4f:a6:c8:d4:aa:2c:40:b2:26:c1:f5:44:
                    2b:13:77:90:0c:5b:de:ca:2d:58:3c:23:ee:6d:3c:
                    1d:a8:ca:cf:a1:ec:52:d7:e3:ee:9a:bf:30:d5:57:
                    50:60:14:9c:4d:69:94:1a:c3:28:59:65:18:4d:bb:
                    d9:02:3f:ae:fb:00:03:8c:f3:c2:0b:fa:42:13:45:
                    55:a8:ec:fb:90:6c:fe:51:c3:ae:c1:83:8d:5b:fc:
                    54:64:4a:02:25:06:21:f9:a9:8a:db:25:b5:7a:13:
                    33:65:7d:c0:f2:c4:cf:af:34:1d:4a:ae:45:64:3b:
                    53:ae:d5:2d:ce:21:9e:62:48:31:4f:61:43:c0:24:
                    dc:48:2d:c6:7a:f5:77:33:a9:d2:bd:1c:0f:02:e5:
                    c0:dc:f5:dc:d1:7e:a3:41:fd:cf:8e:2f:7c:cc:a1:
                    c3:72:af:54:ab:6f:78:2a:c4:a0:4b:6a:de:5d:c2:
                    33:84:c3:8d:14:76:af:bb:1e:92:10:66:16:4d:aa:
                    9e:f2:05:ba:76:22:8a:96:26:fb:56:12:ef:c3:24:
                    0c:40:a6:be:92:8c:a2:c7:51:c5:fa:cf:6d:a3:a2:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:FA:83:DB:2D:BA:A3:79:C0:DC:0D:BE:2C:6F:16:DC:DB:74:5C
            X509v3 Authority Key Identifier:
                keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/F72199D4C23111F1AADE648B5A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.129.86.0/24
                  203.128.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:cb:03:7b:c2:0b:d4:b5:00:86:f8:56:39:c7:d8:8d:90:31:
         21:1b:09:44:ae:6e:1a:23:4a:f0:94:52:4f:10:c8:6e:27:0b:
         68:18:61:70:fa:36:60:60:b4:c2:fb:43:54:05:99:a8:df:c8:
         be:61:39:a2:29:1b:7d:5e:d6:68:88:cf:05:71:0e:cd:30:5e:
         26:0b:b1:67:ea:aa:dc:d8:c5:0e:1b:98:db:7c:81:82:56:d0:
         e3:6c:eb:df:ee:65:be:06:ae:c3:c2:7a:9c:17:d4:44:91:aa:
         23:3a:ec:a1:bc:dc:82:c3:63:ad:10:a0:cb:49:d8:7f:37:9e:
         ba:d2:66:74:97:48:a9:7c:36:e6:bd:aa:1a:17:93:0b:c8:b5:
         34:de:94:25:da:22:be:14:6d:63:82:69:c5:be:8f:22:4c:39:
         62:9d:a3:50:a1:10:dc:0b:d1:95:8b:cb:ef:51:7e:4b:b7:f8:
         38:a2:35:91:1d:ec:54:e8:14:8b:9f:bd:62:d5:16:2e:98:d1:
         f9:19:6a:d5:99:c2:af:64:92:ab:1a:8f:ed:71:19:42:c6:7b:
         fe:bb:30:23:a6:e2:c8:8d:7a:7f:66:06:3a:da:59:f3:8c:19:
         ba:9a:4f:82:98:67:28:a1:47:7c:a7:db:c7:ea:6c:77:f1:cb:
         c5:f0:e9:9c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICGa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC
MEZCOTQ1QkUwHhcNMjYxMDA3MDkzMjA4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM2MTE5OC0wZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMs7vU2kKG+n8ALq7tWUrnsRTBb1gCJUnDJv+mOSv4pPpsjUqixAsibB9UQr
E3eQDFveyi1YPCPubTwdqMrPoexS1+Pumr8w1VdQYBScTWmUGsMoWWUYTbvZAj+u
+wADjPPCC/pCE0VVqOz7kGz+UcOuwYONW/xUZEoCJQYh+amK2yW1ehMzZX3A8sTP
rzQdSq5FZDtTrtUtziGeYkgxT2FDwCTcSC3GevV3M6nSvRwPAuXA3PXc0X6jQf3P
ji98zKHDcq9Uq294KsSgS2reXcIzhMONFHavux6SEGYWTaqe8gW6diKKlib7VhLv
wyQMQKa+koyix1HF+s9to6LQrwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHUl+oPb
LbqjecDcDb4sbxbc23RcMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5
RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvRjcyMTk5RDRD
MjMxMTFGMUFBREU2NDhCNUExMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAeoFWAwQAy4AKMA0GCSqGSIb3DQEBCwUAA4IBAQCzywN7wgvUtQCG
+FY5x9iNkDEhGwlErm4aI0rwlFJPEMhuJwtoGGFw+jZgYLTC+0NUBZmo38i+YTmi
KRt9XtZoiM8FcQ7NMF4mC7Fn6qrc2MUOG5jbfIGCVtDjbOvf7mW+Bq7DwnqcF9RE
kaojOuyhvNyCw2OtEKDLSdh/N5660mZ0l0ipfDbmvaoaF5MLyLU03pQl2iK+FG1j
gmnFvo8iTDlinaNQoRDcC9GVi8vvUX5Lt/g4ojWRHexU6BSLn71i1RYumNH5GWrV
mcKvZJKrGo/tcRlCxnv+uzAjpuLIjXp/ZgY62lnzjBm6mk+CmGcooUd8p9vH6mx3
8cvF8Omc
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:29:42 2026 by rpki-client