Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/0BDDA52C7E4711F1A538061D81A30FBC.roa
File:                     0BDDA52C7E4711F1A538061D81A30FBC.roa (raw, json)
Hash identifier:          HsWAdOU5aGRJlW8FY2L3nkNFibcMLbUNXEEQ7VNVJdI=
Subject key identifier:   C7:E9:D0:A2:8A:CC:76:2B:06:AA:C8:EE:81:EC:E8:66:3D:54:BE:D9
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       04C7
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/0BDDA52C7E4711F1A538061D81A30FBC.roa
Signing time:             Sun 12 Jul 2026 23:11:43 +0000
ROA not before:           Sun 12 Jul 2026 23:11:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4771
IP address blocks:        202.36.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 00:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Jul 12 23:11:43 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a541f2f-1667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:92:97:a8:b8:76:33:42:a5:62:22:74:01:
                    93:0f:f3:4b:94:e2:ab:a6:bc:10:48:88:be:ee:7f:
                    96:b2:f3:df:a2:a4:55:a3:5b:f6:17:0a:94:c8:6b:
                    9b:e1:3b:a8:e4:05:75:1a:3f:e2:e3:62:ca:e6:4e:
                    f5:e2:0d:04:7e:6b:5b:76:54:a4:2a:31:d0:68:d3:
                    10:cd:fd:2a:dc:a4:86:b5:29:3b:77:f2:08:b3:46:
                    5a:b0:2f:dc:66:0c:4d:e0:e0:f4:29:fd:52:88:f1:
                    2d:7c:e8:2a:5b:1c:31:c7:2f:75:f8:fb:09:3e:dc:
                    a4:e6:d1:86:77:11:6b:7f:62:a3:5a:69:f4:28:d6:
                    87:3e:c6:06:c5:4b:9b:7d:7d:60:7f:8b:60:a1:71:
                    21:dd:66:11:09:7c:fd:ca:76:5c:c9:f9:25:86:92:
                    dd:55:31:c4:56:b4:7e:64:11:6d:f3:35:03:26:8e:
                    d2:7f:fb:3f:2c:4d:bd:e2:f6:49:ef:0b:07:c9:e8:
                    62:c2:44:35:b2:03:9d:df:ab:f5:d0:d5:1f:18:d9:
                    4b:43:81:9d:84:69:5c:48:84:4c:08:c2:d0:57:d2:
                    1e:03:c1:93:9a:40:77:09:72:18:35:4a:a5:70:9e:
                    8c:2d:08:4c:79:71:46:55:a5:e6:d6:9a:61:f4:8e:
                    08:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:D0:A2:8A:CC:76:2B:06:AA:C8:EE:81:EC:E8:66:3D:54:BE:D9
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/0BDDA52C7E4711F1A538061D81A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:92:b1:d9:6a:7a:ee:12:20:cd:80:c8:4c:6d:4e:0a:fa:97:
         99:fa:90:ef:e1:69:c0:9b:82:a8:9e:8f:7f:78:79:3f:7a:08:
         c4:3a:63:ef:35:72:38:ad:3d:fa:76:8c:a8:45:7a:f4:28:ec:
         52:d9:8d:00:24:c8:0c:68:70:ae:b8:e4:48:85:ab:15:16:04:
         fe:8e:1a:07:1b:c6:91:95:b6:0a:5f:89:0c:a0:6a:82:36:06:
         b0:08:d5:19:ef:b1:97:f0:b0:2b:32:f1:1a:96:23:1c:29:ee:
         8f:c6:fe:a6:75:4a:ea:67:bf:1f:d9:44:eb:17:8d:9e:c4:48:
         98:5d:df:4f:40:86:a6:84:51:a9:2c:99:55:4b:7e:44:6b:d8:
         5b:28:cb:01:6d:07:5b:4c:f6:b8:2d:a1:b9:6b:1c:ca:07:38:
         09:38:b0:6e:b3:ec:fe:23:31:b7:77:39:65:08:4c:d7:e4:5b:
         38:29:cc:50:0f:69:69:96:93:24:73:b4:95:24:88:eb:ff:b4:
         4e:b4:37:3d:ff:9d:cc:50:43:4d:5e:f4:02:a9:b7:82:91:c5:
         11:21:a1:11:f3:11:68:cb:ec:57:6e:c4:83:e1:eb:ce:18:a4:
         e7:a9:11:35:f1:63:90:c8:29:f5:e0:f6:d5:b1:f2:5d:e1:a3:
         5a:bc:0f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:23 2026 by rpki-client