Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa
File:                     CE4049E0CF9811E9A72F1F65C4F9AE02.roa (raw, json)
Hash identifier:          n3D3uWoQtuJezhynx+w6atzLkJgnD+wG5EO+6lXG6eI=
Subject key identifier:   86:81:F8:14:F8:C5:E2:85:6A:28:C8:6A:4E:E1:A1:5B:82:65:D0:4A
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       269B
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa
Signing time:             Mon 20 Jul 2026 16:16:30 +0000
ROA not before:           Mon 20 Jul 2026 16:16:29 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139626
IP address blocks:        222.127.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9883 (0x269b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: Jul 20 16:16:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5e49dd-7ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:fa:7d:b3:aa:17:cf:c8:ab:5c:11:77:da:
                    3d:1c:f6:eb:4a:3c:ff:96:14:f1:34:49:f4:1d:14:
                    56:eb:ab:36:93:8e:dd:40:99:16:75:50:cd:10:cc:
                    7d:f8:ab:2e:07:5c:90:df:0f:aa:04:e8:98:23:c8:
                    68:29:38:e1:2b:db:31:68:fa:c1:98:08:ed:21:f4:
                    d9:c9:84:9a:90:a6:24:cf:30:52:d5:dd:6c:92:c2:
                    58:e1:1a:2b:30:3f:bd:6b:3d:28:8f:bb:03:95:f0:
                    ce:b7:62:48:0a:ce:ca:41:ab:3a:d7:5a:f3:1b:0b:
                    fe:e6:d4:44:9a:57:0d:12:89:f2:67:9a:cc:09:47:
                    a4:f7:5b:63:38:96:c8:ad:e7:7a:2e:4a:78:c4:9a:
                    a0:28:11:f4:e6:20:5f:44:55:23:ff:c0:38:c0:68:
                    67:3e:c6:31:91:5f:a2:20:e5:01:f3:cc:bf:60:35:
                    d6:9c:e5:a7:89:f0:99:f0:a2:11:1d:1e:0e:95:64:
                    6e:88:12:5f:5f:dd:64:ee:01:03:09:ba:2f:f4:d1:
                    67:35:e3:60:39:07:ff:64:e7:ae:a1:ba:c8:0d:be:
                    33:bb:d1:9b:0a:a0:cb:66:1c:60:2d:81:31:dd:33:
                    64:7c:c3:93:26:be:c4:1b:89:9c:eb:8a:d7:e4:08:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:81:F8:14:F8:C5:E2:85:6A:28:C8:6A:4E:E1:A1:5B:82:65:D0:4A
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CE4049E0CF9811E9A72F1F65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.127.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c7:b1:a5:18:9d:39:2f:d9:f5:82:ba:eb:67:c1:56:ab:45:
         04:15:bf:d6:e9:d7:ca:30:38:1c:0c:6f:f2:18:c0:a3:e0:36:
         e7:4c:be:a7:ab:bd:f7:93:da:01:9a:4c:ea:b0:b1:ed:6f:e9:
         40:98:4b:b6:bf:b9:95:16:8d:58:09:39:65:2a:46:fa:f3:ba:
         12:c8:9a:ca:f1:6e:96:58:f6:78:a5:5c:67:dd:c7:18:81:10:
         c9:8a:53:98:17:a4:b4:2b:16:c9:ba:71:23:66:d8:4d:66:dc:
         c0:fe:1f:04:d8:a3:ec:d7:2f:9e:8a:f6:fc:4b:15:60:b5:12:
         90:82:62:dc:51:d1:07:c6:4c:00:06:9c:7a:33:fd:a3:1c:77:
         83:0f:c0:47:c9:db:75:a6:63:d5:7a:15:0f:e8:ba:dc:c0:2f:
         2d:4f:b6:e1:06:78:a5:e5:1b:10:29:f6:71:8c:a1:49:a3:0f:
         08:b8:70:b4:22:b9:38:3a:97:85:9c:da:03:19:46:fe:7b:3a:
         b6:8d:d8:86:24:5b:7e:a9:03:d3:9d:b1:be:61:b7:63:c8:d0:
         57:60:79:89:f8:37:25:1e:3b:77:f6:76:55:60:d0:d3:26:f9:
         92:dd:8f:80:72:e5:48:0c:ae:59:fc:25:03:66:6c:a8:8b:8c:
         ed:a5:76:24
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC
OEIyNDAwMkIwHhcNMjYwNzIwMTYxNjI5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlNDlkZC03YWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxIz6fbOqF8/Iq1wRd9o9HPbrSjz/lhTxNEn0HRRW66s2k47dQJkWdVDNEMx9
+KsuB1yQ3w+qBOiYI8hoKTjhK9sxaPrBmAjtIfTZyYSakKYkzzBS1d1sksJY4Ror
MD+9az0oj7sDlfDOt2JICs7KQas611rzGwv+5tREmlcNEonyZ5rMCUek91tjOJbI
red6Lkp4xJqgKBH05iBfRFUj/8A4wGhnPsYxkV+iIOUB88y/YDXWnOWnifCZ8KIR
HR4OlWRuiBJfX91k7gEDCbov9NFnNeNgOQf/ZOeuobrIDb4zu9GbCqDLZhxgLYEx
3TNkfMOTJr7EG4mc64rX5Ag8cwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIaB+BT4
xeKFaijIak7hoVuCZdBKMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy
Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQ0U0MDQ5RTBD
Rjk4MTFFOUE3MkYxRjY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA3n9lMA0GCSqGSIb3DQEBCwUAA4IBAQCgx7GlGJ05L9n1grrrZ8FW
q0UEFb/W6dfKMDgcDG/yGMCj4DbnTL6nq733k9oBmkzqsLHtb+lAmEu2v7mVFo1Y
CTllKkb687oSyJrK8W6WWPZ4pVxn3ccYgRDJilOYF6S0KxbJunEjZthNZtzA/h8E
2KPs1y+eivb8SxVgtRKQgmLcUdEHxkwABpx6M/2jHHeDD8BHydt1pmPVehUP6Lrc
wC8tT7bhBnil5RsQKfZxjKFJow8IuHC0Irk4OpeFnNoDGUb+ezq2jdiGJFt+qQPT
nbG+YbdjyNBXYHmJ+DclHjt39nZVYNDTJvmS3Y+AcuVIDK5Z/CUDZmyoi4ztpXYk
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:54 2026 by rpki-client