Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/03663FB249A911F188C137899A833773.roa
File:                     03663FB249A911F188C137899A833773.roa (raw, json)
Hash identifier:          /yeqi2077oI8ea99YrDLTqeIfOh5LErgaeotYEZA2og=
Subject key identifier:   01:DD:31:D7:40:A9:61:66:03:B9:E0:FD:3A:83:03:32:25:02:8F:04
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DB5
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/03663FB249A911F188C137899A833773.roa
Signing time:             Thu 06 Aug 2026 15:11:56 +0000
ROA not before:           Thu 06 Aug 2026 15:11:56 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     207550
IP address blocks:        112.196.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 23:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15797 (0x3db5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:11:56 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a43c-dad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4d:50:bc:c2:97:cb:b0:3f:3f:83:b9:13:f6:
                    d1:d0:31:40:04:b9:1f:7b:a4:d5:dc:47:5f:9a:af:
                    2e:be:cb:21:b1:73:ba:b6:37:1b:91:e2:fa:ef:a4:
                    c2:02:db:f5:09:89:d8:33:88:8e:31:45:79:ad:bc:
                    48:dd:ec:57:b8:f7:31:85:6d:6c:2c:d2:c9:07:ce:
                    28:5d:e5:2a:ec:ac:a8:64:2e:1c:9d:83:2e:48:4e:
                    20:9b:b5:2c:a6:d9:ff:06:53:7d:f0:5d:5e:7f:a0:
                    a1:dc:14:9f:27:ef:b4:34:c0:df:fc:90:ec:66:e7:
                    55:42:67:33:ca:63:24:97:df:48:44:c6:15:a5:8d:
                    33:f4:41:2c:13:5f:06:71:48:38:a8:b8:ce:2a:9e:
                    09:e8:c9:52:e3:2e:bf:0e:93:c1:b5:ac:e1:aa:c5:
                    c5:f8:07:2d:25:2a:e8:af:4a:cf:00:22:ac:74:e3:
                    a6:24:ec:a0:1d:d0:0c:da:35:a9:30:70:52:60:06:
                    f3:5d:15:e9:8b:58:ab:32:b0:55:f3:9b:a4:f1:9f:
                    09:78:f3:3b:76:96:f9:b3:27:bc:82:db:b9:0d:6f:
                    6b:48:f4:7d:35:43:d8:89:a9:21:0f:54:0d:52:59:
                    fe:9b:7f:e7:79:73:c1:f2:fd:40:64:9e:7c:1b:59:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DD:31:D7:40:A9:61:66:03:B9:E0:FD:3A:83:03:32:25:02:8F:04
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/03663FB249A911F188C137899A833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.196.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:3b:55:cc:c7:72:af:50:1b:85:c1:b5:28:df:81:6f:95:a2:
         24:cb:84:66:58:9b:84:8d:4d:d9:5e:9a:fa:4f:ec:55:81:45:
         5b:50:b6:c5:51:56:0b:76:90:02:0b:03:85:da:aa:11:d9:75:
         53:c6:3b:3e:2e:a0:e3:9c:d2:c0:c2:2f:bc:2c:64:bf:c9:d6:
         89:40:27:ac:31:da:d3:8e:f0:db:2f:53:91:b8:68:69:72:02:
         63:77:b5:d4:82:c6:d0:c9:43:5d:44:cd:31:b5:42:39:ea:45:
         b0:ea:28:87:8a:2c:ba:c5:91:94:db:dd:61:03:85:ee:50:25:
         7f:2a:4b:ed:ad:5b:ce:a5:69:39:a8:d8:f6:c4:ac:96:99:3f:
         52:14:df:91:bf:70:37:e1:dc:cf:5b:ad:69:22:59:cf:33:e6:
         28:14:2f:a3:35:b1:50:81:29:ee:e0:0d:9b:2f:09:7a:f2:c3:
         e4:e1:53:cd:c3:90:6d:f4:27:11:13:bd:4a:7d:f2:a0:74:f4:
         f8:d0:0d:1c:c6:44:72:26:0c:a6:a5:d1:10:d4:6a:a3:00:02:
         2d:ab:e1:d8:9f:13:5e:c0:b0:db:ee:1c:c2:5a:6a:bd:ba:6e:
         eb:94:d0:ce:ec:c8:25:59:14:9b:16:60:6f:17:99:59:fd:64:
         2b:1c:d5:0e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjYwODA2MTUxMTU2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0YTQzYy1kYWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7k1QvMKXy7A/P4O5E/bR0DFABLkfe6TV3Edfmq8uvsshsXO6tjcbkeL676TC
Atv1CYnYM4iOMUV5rbxI3exXuPcxhW1sLNLJB84oXeUq7KyoZC4cnYMuSE4gm7Us
ptn/BlN98F1ef6Ch3BSfJ++0NMDf/JDsZudVQmczymMkl99IRMYVpY0z9EEsE18G
cUg4qLjOKp4J6MlS4y6/DpPBtazhqsXF+ActJSror0rPACKsdOOmJOygHdAM2jWp
MHBSYAbzXRXpi1irMrBV85uk8Z8JePM7dpb5sye8gtu5DW9rSPR9NUPYiakhD1QN
Uln+m3/neXPB8v1AZJ58G1kgXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAHdMddA
qWFmA7ng/TqDAzIlAo8EMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMDM2NjNGQjI0
OUE5MTFGMTg4QzEzNzg5OUE4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcMTWMA0GCSqGSIb3DQEBCwUAA4IBAQDCO1XMx3KvUBuFwbUo34Fv
laIky4RmWJuEjU3ZXpr6T+xVgUVbULbFUVYLdpACCwOF2qoR2XVTxjs+LqDjnNLA
wi+8LGS/ydaJQCesMdrTjvDbL1ORuGhpcgJjd7XUgsbQyUNdRM0xtUI56kWw6iiH
iiy6xZGU291hA4XuUCV/KkvtrVvOpWk5qNj2xKyWmT9SFN+Rv3A34dzPW61pIlnP
M+YoFC+jNbFQgSnu4A2bLwl68sPk4VPNw5Bt9CcRE71KffKgdPT40A0cxkRyJgym
pdEQ1GqjAAItq+HYnxNewLDb7hzCWmq9um7rlNDO7MglWRSbFmBvF5lZ/WQrHNUO
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:17:44 2026 by rpki-client