Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2F88F46802CE11E6B167303FC4F9AE02.roa
File:                     2F88F46802CE11E6B167303FC4F9AE02.roa (raw, json)
Hash identifier:          Bk1JT23cvT2IaHE3oikg+BR927YJ1u3qo38PnnG2XQE=
Subject key identifier:   A0:40:51:AE:72:06:FC:73:EC:D2:B8:E7:CD:9C:87:0B:CE:05:3B:EC
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       26AD
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2F88F46802CE11E6B167303FC4F9AE02.roa
Signing time:             Mon 20 Jul 2026 16:17:09 +0000
ROA not before:           Mon 20 Jul 2026 16:17:09 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38822
IP address blocks:        222.127.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9901 (0x26ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 20 16:17:09 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5e4a05-260d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:d4:2d:95:57:a7:73:23:a1:a7:c1:d4:63:
                    dc:ff:2f:da:2a:7a:16:a5:81:45:f4:3f:72:3c:7c:
                    be:ea:77:23:ae:59:ad:ee:42:bf:4c:e1:b5:e3:ad:
                    39:42:0b:f0:1e:71:5d:b2:3c:87:d3:2d:3b:3f:56:
                    0f:87:f0:ca:2f:a4:0e:fe:15:0c:8d:4d:8f:62:94:
                    f0:ed:2f:72:67:a1:45:f6:60:64:73:26:98:7d:86:
                    51:15:bb:6f:96:5d:fa:ef:25:c1:78:e8:13:13:8f:
                    32:a1:b4:c4:e8:09:84:7a:2d:c3:6f:e3:72:c0:0a:
                    57:3b:6c:6b:19:5f:24:4c:a5:33:d5:48:c0:ca:29:
                    0b:76:9f:70:17:5d:b8:6f:e6:22:59:45:58:0f:57:
                    a6:58:d3:ff:13:bb:f7:87:e6:42:84:dd:b0:20:2a:
                    32:51:f4:b3:6c:98:43:1a:36:26:c0:7a:17:5d:e5:
                    48:9b:93:f2:79:e9:98:9c:8b:a9:1a:87:81:44:3e:
                    83:5b:40:e3:42:81:a3:71:f2:ed:ac:ac:38:e5:20:
                    4c:1b:b3:00:7c:0c:89:f6:ac:72:fc:f3:a5:78:91:
                    f3:0f:f0:94:15:bc:51:28:28:ed:38:83:f7:3b:92:
                    32:71:bd:d5:56:7a:f9:6d:d0:6f:3d:8a:c8:93:93:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:40:51:AE:72:06:FC:73:EC:D2:B8:E7:CD:9C:87:0B:CE:05:3B:EC
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2F88F46802CE11E6B167303FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.127.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:c8:a3:b6:4c:2d:98:b2:91:43:53:10:97:2b:38:ca:fa:
         2a:ee:a5:d5:cb:6e:20:f1:c6:30:82:56:9c:fd:f3:63:33:f2:
         de:2a:bc:e3:79:0f:1c:cf:ee:fc:32:b3:aa:d8:81:79:4f:17:
         82:03:6c:b7:1f:05:d6:72:4e:9a:f4:06:0a:1c:74:63:3d:a2:
         e2:50:d6:60:ae:3d:e1:a2:c8:a3:b5:9e:5e:50:bc:48:e1:5e:
         fb:63:69:21:cc:a6:da:cd:bf:27:68:0b:58:e7:c5:57:c4:91:
         e2:c9:6a:79:94:e5:b2:e1:30:a7:88:9b:a4:ca:5b:bf:db:2b:
         eb:1f:01:ba:ec:f0:8c:6b:23:9f:3f:f2:f6:12:7e:d2:a6:fb:
         4c:dd:17:f2:5b:bf:05:9d:e4:a7:93:aa:df:95:b5:26:d2:28:
         23:f7:2c:a3:7b:22:36:4f:6f:56:7f:a4:0e:6b:38:5a:96:76:
         a9:69:66:77:1d:ab:5f:f5:05:94:60:e3:fd:bb:6f:a1:b3:9f:
         12:36:02:8c:84:f1:ae:df:32:d8:ad:7a:33:80:68:e9:59:5c:
         b6:f5:b3:e2:96:f9:56:00:cd:87:a1:c3:8d:e0:f0:ea:6b:db:
         66:ad:92:c9:7c:44:a9:3a:5c:2d:f7:34:42:8f:47:2a:cb:d3:
         32:a5:59:0a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjYwNzIwMTYxNzA5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlNGEwNS0yNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAnULZVXp3MjoafB1GPc/y/aKnoWpYFF9D9yPHy+6ncjrlmt7kK/TOG14605
QgvwHnFdsjyH0y07P1YPh/DKL6QO/hUMjU2PYpTw7S9yZ6FF9mBkcyaYfYZRFbtv
ll367yXBeOgTE48yobTE6AmEei3Db+NywApXO2xrGV8kTKUz1UjAyikLdp9wF124
b+YiWUVYD1emWNP/E7v3h+ZChN2wICoyUfSzbJhDGjYmwHoXXeVIm5PyeemYnIup
GoeBRD6DW0DjQoGjcfLtrKw45SBMG7MAfAyJ9qxy/POleJHzD/CUFbxRKCjtOIP3
O5Iycb3VVnr5bdBvPYrIk5MK7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKBAUa5y
Bvxz7NK4582chwvOBTvsMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMkY4OEY0Njgw
MkNFMTFFNkIxNjczMDNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA3n+KMA0GCSqGSIb3DQEBCwUAA4IBAQCgq8ijtkwtmLKRQ1MQlys4
yvoq7qXVy24g8cYwglac/fNjM/LeKrzjeQ8cz+78MrOq2IF5TxeCA2y3HwXWck6a
9AYKHHRjPaLiUNZgrj3hosijtZ5eULxI4V77Y2khzKbazb8naAtY58VXxJHiyWp5
lOWy4TCniJukylu/2yvrHwG67PCMayOfP/L2En7SpvtM3RfyW78FneSnk6rflbUm
0igj9yyjeyI2T29Wf6QOazhalnapaWZ3Hatf9QWUYOP9u2+hs58SNgKMhPGu3zLY
rXozgGjpWVy29bPilvlWAM2HocON4PDqa9tmrZLJfESpOlwt9zRCj0cqy9MypVkK
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:08 2026 by rpki-client