Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/94DAF6C241DE11F1A57436B1B5833773.roa
File:                     94DAF6C241DE11F1A57436B1B5833773.roa (raw, json)
Hash identifier:          9AeXOOMXpBY5Hw+qh02itkG4wf9hqR+y5ENFHPEiYrI=
Subject key identifier:   CD:B1:9E:08:D6:C3:C6:DE:B4:4B:6F:60:AD:72:7A:20:A6:54:A8:84
Certificate issuer:       /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial:       022C
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/94DAF6C241DE11F1A57436B1B5833773.roa
Signing time:             Fri 31 Jul 2026 16:20:11 +0000
ROA not before:           Fri 31 Jul 2026 16:20:11 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24434
IP address blocks:        137.219.0.0/16 maxlen: 16
                          137.219.0.0/18 maxlen: 18
                          137.219.64.0/18 maxlen: 18
                          137.219.128.0/18 maxlen: 18
                          137.219.192.0/22 maxlen: 22
                          137.219.196.0/22 maxlen: 22
                          137.219.200.0/22 maxlen: 22
                          137.219.204.0/22 maxlen: 22
                          137.219.208.0/22 maxlen: 22
                          137.219.218.0/24 maxlen: 24
                          137.219.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
        Validity
            Not Before: Jul 31 16:20:11 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6ccb3b-a3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:6e:e2:2f:3f:8d:f1:9a:89:3f:35:eb:9b:
                    c8:63:7f:b8:70:30:4c:c8:9c:48:36:6a:94:bf:57:
                    dd:b5:6a:a5:3c:85:eb:59:d1:a3:0d:8d:b5:c4:a1:
                    46:98:65:41:6f:7d:f2:c0:fb:7a:30:33:27:96:59:
                    e3:a9:1d:2e:4a:ea:70:da:b6:aa:55:8b:a4:f1:78:
                    52:a7:d4:d6:44:61:d2:96:49:52:4f:2b:86:91:20:
                    e3:16:b5:fc:ec:bf:aa:25:57:f9:0b:e1:5a:fc:4c:
                    5e:1a:5e:0e:0c:61:ab:a2:2f:b6:ed:92:21:63:70:
                    bc:8a:a8:fe:29:cd:ab:1c:69:74:7f:9a:fa:a0:cf:
                    15:7d:bf:0f:28:f5:45:8e:6a:f6:08:04:f9:36:ad:
                    2d:08:f1:ca:d8:fe:94:77:b6:16:05:e9:72:2f:92:
                    f3:bf:da:77:fc:c7:db:25:c9:d5:9d:90:c4:90:82:
                    c2:e6:af:de:36:fe:2b:3c:f6:60:13:37:26:95:ac:
                    6a:85:51:2c:0d:f4:e4:db:a2:bc:d8:97:c5:be:c4:
                    2f:bf:23:26:85:ed:c6:66:a6:09:31:bd:1d:a1:c7:
                    62:30:fe:94:44:b1:96:44:6e:7d:0a:ad:e8:db:7e:
                    4b:fd:59:55:8a:9e:6e:8e:99:5f:a9:4a:26:11:ce:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B1:9E:08:D6:C3:C6:DE:B4:4B:6F:60:AD:72:7A:20:A6:54:A8:84
            X509v3 Authority Key Identifier:
                keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/94DAF6C241DE11F1A57436B1B5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c1:d3:60:f3:e1:ce:ca:87:d0:10:c0:54:3a:cb:2d:44:0e:59:
         a6:0c:3f:b0:a2:b3:2c:a1:1d:e2:86:a2:d9:6b:c6:82:2f:81:
         84:93:a5:9b:fa:0c:dd:30:dc:8b:17:d6:29:ae:ca:fc:c5:0d:
         56:d2:bc:b2:e6:7f:86:36:39:0f:33:cb:be:c9:61:74:ce:f2:
         76:9b:89:b1:08:19:3a:89:e7:01:f9:f5:cc:f5:30:be:c5:88:
         46:5e:6e:6b:97:28:98:fd:aa:9f:73:29:b4:00:cc:4d:dd:59:
         3d:f4:05:ab:17:3f:aa:6c:c6:52:51:e2:0c:69:68:f3:6c:b7:
         27:20:c5:da:6c:68:e7:7c:95:a9:08:11:b8:3d:51:65:59:0a:
         b0:2c:67:fe:1a:73:f2:24:ae:d4:17:9b:48:85:5e:4c:2e:86:
         55:dc:8a:dc:fe:4b:24:05:1c:cb:cc:b2:e4:05:3d:f8:9f:47:
         c5:6e:0e:fe:5e:a1:d7:94:0d:02:61:f2:f8:7d:28:2b:3e:19:
         9a:5d:ae:26:8e:28:22:41:1a:18:6b:dc:16:2f:3a:b0:23:24:
         75:33:cd:7b:d9:db:ae:ef:97:74:f9:94:e0:21:f5:00:09:34:
         ec:78:67:34:8b:39:81:89:2d:a6:b2:ac:32:88:4b:b7:78:c7:
         38:18:68:5c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0
RTdCNDNCMTcwHhcNMjYwNzMxMTYyMDExWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZjY2IzYi1hM2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfVu4i8/jfGaiT8165vIY3+4cDBMyJxINmqUv1fdtWqlPIXrWdGjDY21xKFG
mGVBb33ywPt6MDMnllnjqR0uSupw2raqVYuk8XhSp9TWRGHSlklSTyuGkSDjFrX8
7L+qJVf5C+Fa/ExeGl4ODGGroi+27ZIhY3C8iqj+Kc2rHGl0f5r6oM8Vfb8PKPVF
jmr2CAT5Nq0tCPHK2P6Ud7YWBelyL5Lzv9p3/MfbJcnVnZDEkILC5q/eNv4rPPZg
EzcmlaxqhVEsDfTk26K82JfFvsQvvyMmhe3GZqYJMb0docdiMP6URLGWRG59Cq3o
235L/VlVip5ujplfqUomEc6X4QIDAQABo4ICXzCCAlswHQYDVR0OBBYEFM2xngjW
w8betEtvYK1yeiCmVKiEMB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD
NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0IxREEvQTkwRjhEQTQ0Qzc5MTFFRUE3OURDRDNCQzRGOUFFMDIvOTREQUY2QzI0
MURFMTFGMUE1NzQzNkIxQjU4MzM3NzMucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAidswDQYJKoZIhvcNAQELBQADggEBAMHTYPPhzsqH0BDAVDrLLUQO
WaYMP7CisyyhHeKGotlrxoIvgYSTpZv6DN0w3IsX1imuyvzFDVbSvLLmf4Y2OQ8z
y77JYXTO8nabibEIGTqJ5wH59cz1ML7FiEZebmuXKJj9qp9zKbQAzE3dWT30BasX
P6psxlJR4gxpaPNstycgxdpsaOd8lakIEbg9UWVZCrAsZ/4ac/IkrtQXm0iFXkwu
hlXcitz+SyQFHMvMsuQFPfifR8VuDv5eodeUDQJh8vh9KCs+GZpdriaOKCJBGhhr
3BYvOrAjJHUzzXvZ267vl3T5lOAh9QAJNOx4ZzSLOYGJLaayrDKIS7d4xzgYaFw=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:23 2026 by rpki-client