Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa
File:                     1B76F89E00A711F199FCBD49676F56BC.roa (raw, json)
Hash identifier:          /C2J4Qs4PGfzVYfqvIgW+FmbAu7z2oRPvQRofGzt+EM=
Subject key identifier:   F8:4C:CB:D3:FA:2D:FC:52:30:36:CA:79:00:10:CF:80:4C:01:F0:54
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DDE
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa
Signing time:             Wed 19 Aug 2026 00:49:34 +0000
ROA not before:           Wed 19 Aug 2026 00:49:34 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     5065
IP address blocks:        101.55.34.0/24 maxlen: 24
                          101.55.39.0/24 maxlen: 24
                          112.196.195.0/24 maxlen: 24
                          112.196.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15838 (0x3dde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug 19 00:49:34 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a84fd9e-f573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:25:67:f9:19:18:92:bd:7e:e8:ea:0e:84:
                    47:c1:57:2b:02:c1:13:80:e0:6b:13:b7:8b:db:91:
                    d1:26:29:c1:e1:0e:15:19:58:d5:12:07:cb:ca:cc:
                    c8:b6:1f:f9:1a:70:f2:fc:10:da:69:d1:de:d3:e6:
                    81:ec:5b:39:f0:84:51:6f:49:b9:18:71:84:68:7d:
                    8a:f9:4b:93:6c:0e:e0:5b:04:88:6b:51:fa:52:cf:
                    1d:b4:af:28:a6:c7:2c:21:95:3f:67:ed:a1:23:bb:
                    8b:5d:ac:d3:9d:d5:81:f3:8a:fe:b9:93:fe:a4:3d:
                    92:9c:36:b8:f0:02:66:ef:91:3f:80:bc:d0:bf:8c:
                    41:8f:ec:a0:38:11:0c:79:f1:71:7e:c0:41:17:73:
                    ce:f3:bd:c8:d5:c9:cb:c0:7c:97:e8:57:6d:f3:15:
                    79:bb:0f:20:de:8b:18:56:10:f3:f1:b2:9b:28:61:
                    1e:5b:c2:87:a0:8f:66:31:a4:8d:44:33:9d:e3:6d:
                    1d:49:72:d6:72:ae:b1:fa:e8:1d:b1:52:51:bf:b1:
                    a5:98:b9:2f:65:22:4b:94:cd:6c:94:33:9e:c8:39:
                    44:7b:d7:de:2a:fe:0d:40:e7:bc:6f:6d:a5:8c:31:
                    0e:75:51:c4:fe:53:89:df:c0:da:48:2c:98:ff:68:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:CB:D3:FA:2D:FC:52:30:36:CA:79:00:10:CF:80:4C:01:F0:54
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1B76F89E00A711F199FCBD49676F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.55.34.0/24
                  101.55.39.0/24
                  112.196.195.0/24
                  112.196.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:ab:ce:a3:13:ce:04:65:ce:dd:6b:fc:87:a3:4e:f8:71:01:
         37:0d:e8:42:0f:07:b7:f5:17:c0:fb:6a:03:ed:72:bd:f4:0d:
         75:13:42:99:89:77:a6:c5:18:1e:e7:21:b4:3b:f9:2c:9d:65:
         2a:e9:95:a6:7a:69:d5:54:5c:77:75:00:e6:9f:f8:6c:53:ff:
         84:c4:7c:79:f0:dd:e4:d9:11:3c:22:ce:f1:a0:47:e6:ab:d5:
         17:ca:e2:1f:82:26:15:00:9f:1f:94:cd:ad:c9:2c:d1:98:1b:
         d5:fd:94:7d:42:1c:39:22:6c:b3:be:c8:4a:e3:f2:d8:24:ee:
         b1:30:0b:35:ad:d4:ba:74:60:91:bc:92:72:2a:31:8f:d9:8f:
         c0:b7:b0:0b:35:0b:68:e1:81:42:8a:fd:fe:1e:99:00:7e:7e:
         a1:92:ef:69:13:f8:82:e6:28:9c:48:35:11:bc:8d:cc:2e:6a:
         f2:b8:66:91:1f:bb:d2:1e:69:39:c5:c5:d6:a7:da:1d:de:f1:
         c3:b9:1f:bc:f1:c9:47:57:23:2f:a5:22:bf:f1:2b:b3:05:41:
         b6:05:54:e4:55:53:e9:30:1a:38:e6:f0:2e:5f:e8:f1:f6:10:
         ab:60:23:cd:4c:34:01:80:0b:42:72:d6:67:a2:a9:e8:02:18:
         40:84:46:c6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICPd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjYwODE5MDA0OTM0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0ZmQ5ZS1mNTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjgUlZ/kZGJK9fujqDoRHwVcrAsETgOBrE7eL25HRJinB4Q4VGVjVEgfLyszI
th/5GnDy/BDaadHe0+aB7Fs58IRRb0m5GHGEaH2K+UuTbA7gWwSIa1H6Us8dtK8o
pscsIZU/Z+2hI7uLXazTndWB84r+uZP+pD2SnDa48AJm75E/gLzQv4xBj+ygOBEM
efFxfsBBF3PO873I1cnLwHyX6Fdt8xV5uw8g3osYVhDz8bKbKGEeW8KHoI9mMaSN
RDOd420dSXLWcq6x+ugdsVJRv7GlmLkvZSJLlM1slDOeyDlEe9feKv4NQOe8b22l
jDEOdVHE/lOJ38DaSCyY/2hWCQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFPhMy9P6
LfxSMDbKeQAQz4BMAfBUMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMUI3NkY4OUUw
MEE3MTFGMTk5RkNCRDQ5Njc2RjU2QkMucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAZTciAwQAZTcnAwQAcMTDAwQBcMTOMA0GCSqGSIb3DQEBCwUAA4IB
AQDHq86jE84EZc7da/yHo074cQE3DehCDwe39RfA+2oD7XK99A11E0KZiXemxRge
5yG0O/ksnWUq6ZWmemnVVFx3dQDmn/hsU/+ExHx58N3k2RE8Is7xoEfmq9UXyuIf
giYVAJ8flM2tySzRmBvV/ZR9Qhw5ImyzvshK4/LYJO6xMAs1rdS6dGCRvJJyKjGP
2Y/At7ALNQto4YFCiv3+HpkAfn6hku9pE/iC5iicSDURvI3MLmryuGaRH7vSHmk5
xcXWp9od3vHDuR+88clHVyMvpSK/8SuzBUG2BVTkVVPpMBo45vAuX+jx9hCrYCPN
TDQBgAtCctZnoqnoAhhAhEbG
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:38 2026 by rpki-client