Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/43DADDD0A6BB11ED9D458785C4F9AE02.roa
File:                     43DADDD0A6BB11ED9D458785C4F9AE02.roa (raw, json)
Hash identifier:          xQALMS8MVy6vgFNZU1n/cwNCMwkUv9odzcA9DfGkDEA=
Subject key identifier:   BB:67:A3:FB:DE:A6:AB:F0:77:00:BE:DE:EC:5B:29:BC:5D:2A:65:90
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       3168
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/43DADDD0A6BB11ED9D458785C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 16:20:14 +0000
ROA not before:           Fri 31 Jul 2026 16:20:14 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        202.6.115.0/24 maxlen: 24
                          203.56.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12648 (0x3168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Jul 31 16:20:14 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6ccb3e-d3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:53:48:44:a4:95:6a:ed:f8:bd:fd:bb:c3:bd:
                    8d:ff:74:b9:3f:56:71:1a:d1:2a:c3:8f:45:3f:58:
                    df:59:f1:60:56:a8:4d:e1:a6:47:f2:7a:68:c5:cb:
                    b8:d0:94:a1:6a:f5:e3:dc:25:50:b8:2a:e6:32:77:
                    22:0f:de:0d:42:14:54:80:e4:c3:96:aa:f5:9e:59:
                    7a:67:7b:c0:14:48:34:d1:8a:bb:39:bd:d6:f5:81:
                    96:af:b8:12:ad:b9:9e:7c:e3:ce:fc:01:ef:48:93:
                    73:0f:29:6d:b8:04:89:bb:d7:21:ae:f1:0f:9b:64:
                    c3:60:03:42:fd:07:20:9b:f7:8b:b1:bd:cf:2b:e2:
                    56:f7:b0:11:c4:10:09:ff:bf:48:2f:b5:e9:59:99:
                    9e:69:46:17:2b:63:1c:c2:8d:5c:be:38:ec:d6:7e:
                    ba:81:21:f5:51:c9:63:d8:94:a0:1e:10:79:86:c2:
                    da:e1:86:9d:47:48:47:ec:db:6b:32:f2:8c:fd:ad:
                    a2:fc:ab:d9:55:11:b1:a6:76:2a:48:7c:1b:3d:cc:
                    95:9a:6b:24:68:0e:9f:d4:3c:d2:e2:4b:b5:92:1a:
                    14:f7:e1:a0:9a:93:26:75:26:59:f1:1b:8b:96:75:
                    51:1b:eb:35:53:d9:40:b7:82:99:5e:37:15:fd:42:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:67:A3:FB:DE:A6:AB:F0:77:00:BE:DE:EC:5B:29:BC:5D:2A:65:90
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/43DADDD0A6BB11ED9D458785C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.115.0/24
                  203.56.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:a6:2f:14:8a:6c:47:3b:a2:aa:38:17:a1:46:d1:9a:75:
         67:de:1f:cf:10:5c:29:39:c7:34:dd:35:2e:b1:c2:b1:24:c4:
         bb:0d:5b:85:92:c4:5c:cb:a0:a8:f7:3d:e8:52:30:b3:11:1b:
         11:20:b8:4c:34:32:5d:f2:02:41:cf:ed:ff:e9:de:1e:a0:a0:
         07:04:5c:d2:fb:20:b5:fb:87:1a:e7:df:c7:d2:cf:7e:e1:0a:
         a2:7d:d6:97:a8:27:22:f5:bf:c6:87:dd:3a:3e:95:f1:f3:4f:
         55:0e:db:37:c8:3f:ef:1a:ae:72:6d:5f:f1:e7:49:bd:d7:68:
         7a:ec:2f:83:61:57:4e:2b:c3:82:ca:99:92:4f:3c:25:b0:a9:
         90:cd:5f:16:c6:a9:e3:c9:72:9d:21:d7:8d:93:ac:48:22:85:
         70:c7:42:53:cd:c8:ce:65:b6:5f:5c:55:eb:13:66:5a:77:c8:
         87:c0:ab:67:8d:1e:e7:8f:aa:5e:0a:23:6b:74:66:aa:0e:78:
         d5:a2:4e:bf:72:28:92:9a:34:e3:a1:07:5a:00:bb:ce:2c:fb:
         ce:80:09:10:73:06:fd:07:c1:04:bb:9a:62:63:e2:41:8f:95:
         e6:c4:03:e7:50:2e:d5:8f:59:a8:3e:7f:03:d1:73:b3:c7:d9:
         00:7f:68:d2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICMWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1
QjMxMkMwNkYwHhcNMjYwNzMxMTYyMDE0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZjY2IzZS1kM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArFNIRKSVau34vf27w72N/3S5P1ZxGtEqw49FP1jfWfFgVqhN4aZH8npoxcu4
0JShavXj3CVQuCrmMnciD94NQhRUgOTDlqr1nll6Z3vAFEg00Yq7Ob3W9YGWr7gS
rbmefOPO/AHvSJNzDyltuASJu9chrvEPm2TDYANC/Qcgm/eLsb3PK+JW97ARxBAJ
/79IL7XpWZmeaUYXK2Mcwo1cvjjs1n66gSH1Uclj2JSgHhB5hsLa4YadR0hH7Ntr
MvKM/a2i/KvZVRGxpnYqSHwbPcyVmmskaA6f1DzS4ku1khoU9+GgmpMmdSZZ8RuL
lnVRG+s1U9lAt4KZXjcV/ULKNQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLtno/ve
pqvwdwC+3uxbKbxdKmWQMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE
MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0IxREEvMTRCNzZCQzhFRDBCMTFFMkEzNURDNjQ4NTkxMUVBMzIvNDNEQURERDBB
NkJCMTFFRDlENDU4Nzg1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAygZzAwQAyziwMA0GCSqGSIb3DQEBCwUAA4IBAQA/76YvFIpsRzui
qjgXoUbRmnVn3h/PEFwpOcc03TUuscKxJMS7DVuFksRcy6Co9z3oUjCzERsRILhM
NDJd8gJBz+3/6d4eoKAHBFzS+yC1+4ca59/H0s9+4QqifdaXqCci9b/Gh906PpXx
809VDts3yD/vGq5ybV/x50m912h67C+DYVdOK8OCypmSTzwlsKmQzV8WxqnjyXKd
IdeNk6xIIoVwx0JTzcjOZbZfXFXrE2Zad8iHwKtnjR7nj6peCiNrdGaqDnjVok6/
ciiSmjTjoQdaALvOLPvOgAkQcwb9B8EEu5piY+JBj5XmxAPnUC7Vj1moPn8D0XOz
x9kAf2jS
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:53 2026 by rpki-client