Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/0171E23E2E9411E9A7232A19C4F9AE02.roa
File:                     0171E23E2E9411E9A7232A19C4F9AE02.roa (raw, json)
Hash identifier:          bWAeW20kddbPWVtd6T4H+eKbHvFtn75Lyk3GSBrZZzo=
Subject key identifier:   7D:C5:A5:2E:67:F1:DE:4E:C5:E1:7F:02:29:AD:F0:6B:C7:6F:E5:9A
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       26B1
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/0171E23E2E9411E9A7232A19C4F9AE02.roa
Signing time:             Mon 20 Jul 2026 16:17:18 +0000
ROA not before:           Mon 20 Jul 2026 16:17:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     4797
IP address blocks:        112.198.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9905 (0x26b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 20 16:17:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5e4a0e-d733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:09:9c:5a:d8:43:f1:37:76:f0:b5:96:0e:
                    28:aa:1e:b9:28:a7:af:68:0c:80:d5:ed:69:c8:99:
                    d5:c6:de:01:f2:fb:e2:4d:4e:65:ea:a2:54:4c:b6:
                    d3:ef:c9:8c:5d:fa:26:a5:a5:c8:06:71:c7:3c:31:
                    9a:53:77:54:5b:1a:44:a9:69:b0:46:48:e9:ce:f2:
                    98:1c:24:e2:f1:65:ab:c2:d7:0d:b5:96:24:92:ef:
                    a3:24:e6:9d:7d:f7:30:ad:e7:de:05:22:be:6a:f7:
                    b0:d3:82:1c:19:9b:02:31:c4:28:d0:53:b2:73:75:
                    25:94:a9:bd:ff:6b:72:eb:38:c6:60:51:a8:86:2b:
                    bd:5c:56:e8:c4:7f:41:57:2b:4c:2b:52:2d:6d:d8:
                    b2:2c:cb:7d:3b:e5:08:7d:f4:20:88:4a:d0:b4:10:
                    f0:a8:3d:f6:1e:ff:91:8b:2b:ac:ef:ed:7f:27:74:
                    0e:e7:46:5b:c1:d8:ee:91:af:92:f0:e4:9c:c2:29:
                    d8:56:40:89:a4:2f:ef:69:73:1a:99:c7:c2:12:de:
                    5e:0b:d9:84:f5:c2:d4:5b:27:d9:29:c9:89:aa:79:
                    05:84:60:a1:47:ba:fc:eb:4a:1c:5f:43:bc:f3:75:
                    09:f7:a4:79:c7:a9:b2:a2:6a:cd:66:c8:62:0a:ed:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C5:A5:2E:67:F1:DE:4E:C5:E1:7F:02:29:AD:F0:6B:C7:6F:E5:9A
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/0171E23E2E9411E9A7232A19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.198.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ac:db:7c:4b:83:5d:51:db:6b:93:f9:b2:57:1b:dc:a1:65:
         90:c5:92:22:5e:85:13:d7:1c:7f:ab:9d:17:6d:ad:f3:0e:42:
         e9:14:d7:a9:eb:69:97:12:07:85:43:0e:2e:87:de:1f:1e:cd:
         52:64:d7:1d:2f:4d:f0:47:8c:69:d9:53:ea:1b:76:ad:6e:ba:
         fc:42:7a:04:72:d7:07:2d:5d:c7:78:ea:30:30:32:19:e7:69:
         d9:c2:7c:39:ee:8e:3a:64:22:60:e7:20:20:d7:37:3a:89:b7:
         5b:c3:b0:81:79:42:9c:df:9b:4d:f8:3f:5a:2c:e6:65:d1:0d:
         cb:d7:5e:90:a1:22:2f:37:72:bb:98:89:50:68:57:75:8b:7c:
         22:e4:c2:c4:86:12:99:7a:f9:98:69:ba:39:4d:6f:39:8e:d1:
         28:8d:71:71:18:b8:cd:dd:24:a1:0f:3f:53:d9:0d:ef:39:26:
         93:a9:89:d2:66:43:2e:72:a3:81:c2:46:8a:ac:80:3e:c9:e5:
         8c:e7:a4:0a:de:3b:a9:1b:4c:8e:29:d8:c9:8b:e4:9d:10:8a:
         ce:e1:5d:17:01:79:b1:fe:cb:15:63:bf:f0:00:91:54:38:c4:
         ae:09:9f:9c:8d:1d:f2:8b:51:5f:bf:ad:d8:60:75:46:0a:26:
         f3:41:d0:e1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjYwNzIwMTYxNzE4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlNGEwZS1kNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6wJnFrYQ/E3dvC1lg4oqh65KKevaAyA1e1pyJnVxt4B8vviTU5l6qJUTLbT
78mMXfompaXIBnHHPDGaU3dUWxpEqWmwRkjpzvKYHCTi8WWrwtcNtZYkku+jJOad
ffcwrefeBSK+avew04IcGZsCMcQo0FOyc3UllKm9/2ty6zjGYFGohiu9XFboxH9B
VytMK1ItbdiyLMt9O+UIffQgiErQtBDwqD32Hv+Riyus7+1/J3QO50Zbwdjuka+S
8OScwinYVkCJpC/vaXMamcfCEt5eC9mE9cLUWyfZKcmJqnkFhGChR7r860ocX0O8
83UJ96R5x6myomrNZshiCu12RQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH3FpS5n
8d5OxeF/Aimt8GvHb+WaMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMDE3MUUyM0Uy
RTk0MTFFOUE3MjMyQTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcMYeMA0GCSqGSIb3DQEBCwUAA4IBAQBwrNt8S4NdUdtrk/myVxvc
oWWQxZIiXoUT1xx/q50Xba3zDkLpFNep62mXEgeFQw4uh94fHs1SZNcdL03wR4xp
2VPqG3atbrr8QnoEctcHLV3HeOowMDIZ52nZwnw57o46ZCJg5yAg1zc6ibdbw7CB
eUKc35tN+D9aLOZl0Q3L116QoSIvN3K7mIlQaFd1i3wi5MLEhhKZevmYabo5TW85
jtEojXFxGLjN3SShDz9T2Q3vOSaTqYnSZkMucqOBwkaKrIA+yeWM56QK3jupG0yO
KdjJi+SdEIrO4V0XAXmx/ssVY7/wAJFUOMSuCZ+cjR3yi1Ffv63YYHVGCibzQdDh
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:40:24 2026 by rpki-client