Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/2CCA96D68FD211F190436B696E11F970.roa
File:                     2CCA96D68FD211F190436B696E11F970.roa (raw, json)
Hash identifier:          kSdcFd2O63Jc9KHwU5xShOS7z0NUdNaBK9poX1JxZ0o=
Subject key identifier:   D7:71:3B:2A:2F:79:D9:35:B2:53:99:40:81:4C:6A:1C:32:A2:D4:A1
Certificate issuer:       /CN=A914699C/serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
Certificate serial:       58
Authority key identifier: 5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/2CCA96D68FD211F190436B696E11F970.roa
Signing time:             Tue 04 Aug 2026 07:43:05 +0000
ROA not before:           Tue 04 Aug 2026 07:43:05 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     400619
IP address blocks:        162.4.40.0/23 maxlen: 23
                          162.4.40.0/24 maxlen: 24
                          162.4.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl
                          rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 22:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914699C, serialNumber=5BB9A8E1A4060ACC2F3BFA21EFCAD2C3066E8E89
        Validity
            Not Before: Aug  4 07:43:05 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a719809-3dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:cc:0b:4a:a0:a9:24:29:fb:27:a7:0b:9b:
                    a2:db:06:89:35:cb:11:a6:cb:db:82:56:62:3c:91:
                    f5:f7:ec:86:cb:32:83:6f:ee:f4:0b:37:2a:05:a7:
                    58:e3:81:5a:6e:1e:e9:c3:6d:b7:05:06:9f:ce:6c:
                    bf:35:8f:a6:08:cd:db:7a:bf:bd:b2:b9:5e:fe:ac:
                    a3:ab:8c:21:46:d5:ea:aa:49:c8:dd:87:69:0d:21:
                    85:e7:13:52:8f:4e:e3:ff:3e:16:db:20:17:4b:51:
                    b1:4a:80:d8:fa:0a:24:8e:2c:3e:6c:a9:39:22:eb:
                    5a:6e:00:d0:b0:44:60:b4:9b:5d:02:03:7e:45:f6:
                    6f:5e:9d:18:1f:6e:c3:29:37:f7:90:58:e9:4c:94:
                    0b:0c:ea:7a:e9:2f:14:4d:6a:35:82:74:6c:1d:da:
                    ec:b8:cd:4e:45:a5:f9:1b:6f:01:91:55:61:ae:c7:
                    cb:dd:a9:d1:e1:5d:88:d7:d6:7c:05:6b:7a:d5:a7:
                    af:d4:53:51:61:ce:85:c7:0f:97:a2:1e:2b:c9:e2:
                    71:9f:60:98:57:a2:35:c3:2f:45:ad:84:53:95:86:
                    a5:52:5f:4b:ee:28:d9:33:36:d9:5f:a0:0d:2a:93:
                    41:d4:be:bb:96:e8:6d:5c:cc:47:8d:6a:bf:68:83:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:3B:2A:2F:79:D9:35:B2:53:99:40:81:4C:6A:1C:32:A2:D4:A1
            X509v3 Authority Key Identifier:
                keyid:5B:B9:A8:E1:A4:06:0A:CC:2F:3B:FA:21:EF:CA:D2:C3:06:6E:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/W7mo4aQGCswvO_oh78rSwwZujok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W7mo4aQGCswvO_oh78rSwwZujok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/9B9DCA3241F911F1A7AAA033BF833773/2CCA96D68FD211F190436B696E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:80:a6:dd:db:6b:e8:cf:7b:67:1f:d3:e8:2c:80:19:38:
         9b:af:36:48:17:38:df:05:72:5c:00:19:fd:de:01:67:77:3e:
         e8:e9:c0:b0:26:dd:22:e3:42:c2:65:89:7e:4b:5a:59:66:28:
         90:ca:a3:32:6f:90:1c:be:b5:7f:73:30:f3:43:e5:53:b8:4a:
         30:11:6d:05:33:02:6d:78:cc:25:9a:3f:7f:bf:b1:bd:b5:4c:
         6c:10:56:ad:4f:9c:ff:df:61:a5:03:d1:06:81:34:52:02:69:
         f0:de:3d:99:0a:18:ea:b1:39:22:15:b3:e5:b9:5b:2f:8b:cc:
         99:ad:10:3b:da:dc:93:04:a8:43:3a:a1:09:d6:b5:6f:59:ca:
         f9:c6:20:57:ea:ee:7d:71:fb:ab:86:70:49:78:d5:fd:27:3f:
         13:f2:7a:75:fb:d5:4b:fe:0e:b4:65:df:04:c7:f9:de:0c:8f:
         92:0a:77:24:aa:1f:d8:55:97:fc:9f:7d:d5:ff:a8:b4:3a:ca:
         46:7f:ef:f8:51:f8:9c:7e:53:dd:7f:33:d4:d9:ff:55:49:c6:
         3f:ef:70:e3:0f:9c:cb:65:ef:aa:07:0f:db:ea:3f:a4:c2:9d:
         39:9f:fd:30:e4:0b:da:a6:a2:bd:55:11:94:00:b8:f8:ff:4c:
         a5:e5:1f:a2
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Njk5QzExMC8GA1UEBRMoNUJCOUE4RTFBNDA2MEFDQzJGM0JGQTIxRUZDQUQyQzMw
NjZFOEU4OTAeFw0yNjA4MDQwNzQzMDVaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNzE5ODA5LTNkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4WcwLSqCpJCn7J6cLm6LbBok1yxGmy9uCVmI8kfX37IbLMoNv7vQLNyoFp1jj
gVpuHunDbbcFBp/ObL81j6YIzdt6v72yuV7+rKOrjCFG1eqqScjdh2kNIYXnE1KP
TuP/PhbbIBdLUbFKgNj6CiSOLD5sqTki61puANCwRGC0m10CA35F9m9enRgfbsMp
N/eQWOlMlAsM6nrpLxRNajWCdGwd2uy4zU5FpfkbbwGRVWGux8vdqdHhXYjX1nwF
a3rVp6/UU1FhzoXHD5eiHivJ4nGfYJhXojXDL0WthFOVhqVSX0vuKNkzNtlfoA0q
k0HUvruW6G1czEeNar9og+7NAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU13E7Ki95
2TWyU5lAgUxqHDKi1KEwHwYDVR0jBBgwFoAUW7mo4aQGCswvO/oh78rSwwZujokw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDLzlCOURDQTMyNDFG
OTExRjFBN0FBQTAzM0JGODMzNzczL1c3bW80YVFHQ3N3dk9fb2g3OHJTd3dadWpv
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVzdtbzRhUUdDc3d2T19vaDc4clN3d1p1am9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Njk5Qy85QjlEQ0EzMjQxRjkxMUYxQTdBQUEwMzNCRjgzMzc3My8yQ0NBOTZENjhG
RDIxMUYxOTA0MzZCNjk2RTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGiBCgwDQYJKoZIhvcNAQELBQADggEBAFj4gKbd22voz3tnH9PoLIAZ
OJuvNkgXON8FclwAGf3eAWd3PujpwLAm3SLjQsJliX5LWllmKJDKozJvkBy+tX9z
MPND5VO4SjARbQUzAm14zCWaP3+/sb21TGwQVq1PnP/fYaUD0QaBNFICafDePZkK
GOqxOSIVs+W5Wy+LzJmtEDva3JMEqEM6oQnWtW9ZyvnGIFfq7n1x+6uGcEl41f0n
PxPyenX71Uv+DrRl3wTH+d4Mj5IKdySqH9hVl/yffdX/qLQ6ykZ/7/hR+Jx+U91/
M9TZ/1VJxj/vcOMPnMtl76oHD9vqP6TCnTmf/TDkC9qmor1VEZQAuPj/TKXlH6I=
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:28 2026 by rpki-client