Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa
File:                     2C04F1F202CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier:          XsVZgmVaO9HxHlBF+QjQjR40DfffVdZHEBqljv9Stss=
Subject key identifier:   42:42:50:08:AF:B5:57:93:39:17:62:97:BF:5D:12:F4:CF:71:1D:B5
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       26AA
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa
Signing time:             Mon 20 Jul 2026 16:17:03 +0000
ROA not before:           Mon 20 Jul 2026 16:17:03 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24451
IP address blocks:        203.177.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9898 (0x26aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 20 16:17:03 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5e49ff-9438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:3d:a9:d0:51:40:b4:a2:f3:22:42:ec:78:
                    88:e3:63:3d:d8:cc:9b:85:14:43:7e:47:86:7c:50:
                    d8:93:29:30:a1:76:35:a5:3b:0e:6b:9f:5a:24:ca:
                    af:61:88:00:b4:32:8d:d8:22:9b:3d:e0:cb:d3:19:
                    fa:3e:d4:f5:69:3d:16:40:42:3f:fe:6f:a9:34:9a:
                    a0:43:52:a5:d6:39:8a:1f:f1:dc:26:d3:2a:fd:08:
                    19:84:dc:c1:da:da:a6:20:e4:28:7f:90:63:da:10:
                    06:af:ac:49:c5:92:2b:fc:74:1c:d2:33:22:a6:aa:
                    79:2f:c0:7a:c6:e0:bb:50:cc:06:93:08:9a:a9:37:
                    24:4b:c0:1d:38:d5:04:e7:f5:4f:06:50:aa:f2:f7:
                    0b:f5:93:56:f4:53:62:ba:af:d5:9c:e8:19:d8:37:
                    eb:19:51:8f:56:d3:3d:77:bb:cc:42:bb:af:3b:39:
                    e2:5a:13:07:a1:19:a2:af:92:8d:f9:46:88:01:00:
                    02:0a:72:d1:03:51:4e:c4:63:37:6e:b8:62:f0:ee:
                    73:fc:87:51:4d:e8:13:b1:48:35:e1:c7:d6:d4:a9:
                    56:c9:18:4d:34:64:4c:d1:81:1e:0c:8b:52:10:c8:
                    d6:39:14:e4:36:39:56:5c:59:68:8c:af:bf:72:33:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:42:50:08:AF:B5:57:93:39:17:62:97:BF:5D:12:F4:CF:71:1D:B5
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.177.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:48:20:c6:6f:5e:a7:b6:d2:e2:ab:7a:5e:d8:fc:51:88:
         bd:68:d9:e6:98:1a:70:7b:1a:d4:a5:20:f5:64:ac:36:56:6d:
         bb:f2:19:d2:f7:70:68:7c:13:7e:f4:6c:55:56:40:8e:88:e2:
         a6:d8:f0:94:97:7d:41:af:83:0c:56:78:15:e4:80:d1:ed:71:
         20:20:b3:6a:cd:2f:88:5b:f3:c5:19:c7:f0:8d:0b:19:8f:28:
         00:b0:19:6f:c5:53:67:17:7c:c7:68:e2:7e:0b:94:0d:50:f2:
         0f:08:e9:fd:32:1f:12:5a:cf:01:c6:0d:6a:41:dc:60:6c:6e:
         a6:47:87:71:1a:99:ce:f0:e3:dd:40:12:f0:db:65:90:21:f2:
         29:e5:c5:f1:0b:ee:f1:77:0a:be:2a:23:36:c8:31:9a:4b:4f:
         c1:73:eb:e3:72:57:c3:bf:a0:7b:51:d3:b1:da:03:7b:0f:07:
         e9:48:62:36:05:39:c8:da:e1:2e:e6:77:f2:f1:67:ef:12:ce:
         e9:ab:b2:d6:63:11:ef:42:70:40:78:c9:60:f5:65:eb:d0:04:
         d8:f7:57:f6:fe:db:fc:6e:47:d1:8e:7a:d0:39:d7:fd:66:be:
         3e:5e:1c:c7:e2:e4:a9:2a:78:d1:7b:47:04:62:21:06:84:d4:
         ea:d7:11:18
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjYwNzIwMTYxNzAzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlNDlmZi05NDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyRo9qdBRQLSi8yJC7HiI42M92MybhRRDfkeGfFDYkykwoXY1pTsOa59aJMqv
YYgAtDKN2CKbPeDL0xn6PtT1aT0WQEI//m+pNJqgQ1Kl1jmKH/HcJtMq/QgZhNzB
2tqmIOQof5Bj2hAGr6xJxZIr/HQc0jMipqp5L8B6xuC7UMwGkwiaqTckS8AdONUE
5/VPBlCq8vcL9ZNW9FNiuq/VnOgZ2DfrGVGPVtM9d7vMQruvOzniWhMHoRmir5KN
+UaIAQACCnLRA1FOxGM3brhi8O5z/IdRTegTsUg14cfW1KlWyRhNNGRM0YEeDItS
EMjWORTkNjlWXFlojK+/cjMwWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEJCUAiv
tVeTORdil79dEvTPcR21MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMkMwNEYxRjIw
MkNFMTFFNkIxNjczMDNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy7FRMA0GCSqGSIb3DQEBCwUAA4IBAQAtvEggxm9ep7bS4qt6Xtj8
UYi9aNnmmBpwexrUpSD1ZKw2Vm278hnS93BofBN+9GxVVkCOiOKm2PCUl31Br4MM
VngV5IDR7XEgILNqzS+IW/PFGcfwjQsZjygAsBlvxVNnF3zHaOJ+C5QNUPIPCOn9
Mh8SWs8Bxg1qQdxgbG6mR4dxGpnO8OPdQBLw22WQIfIp5cXxC+7xdwq+KiM2yDGa
S0/Bc+vjclfDv6B7UdOx2gN7DwfpSGI2BTnI2uEu5nfy8WfvEs7pq7LWYxHvQnBA
eMlg9WXr0ATY91f2/tv8bkfRjnrQOdf9Zr4+XhzH4uSpKnjRe0cEYiEGhNTq1xEY
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:11 2026 by rpki-client