Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
File:                     332F710683A611F0948BAE55C4F9AE02.roa (raw, json)
Hash identifier:          wIlvjak1/bwhoMoPMzGzkl2f0ID/o4a8YJzFPdRg3cI=
Subject key identifier:   5E:15:89:0A:C6:2F:F0:41:39:99:FF:78:0E:49:0B:6C:20:E1:CB:1F
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DB4
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:11:54 +0000
ROA not before:           Thu 06 Aug 2026 15:11:54 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        61.251.182.0/24 maxlen: 24
                          101.53.64.0/24 maxlen: 24
                          101.53.73.0/24 maxlen: 24
                          175.176.130.0/24 maxlen: 24
                          175.176.133.0/24 maxlen: 24
                          203.173.98.0/24 maxlen: 24
                          203.173.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 14:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15796 (0x3db4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:11:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a43a-d4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:11:ec:01:c9:89:62:3d:b7:27:40:2c:54:
                    0c:7a:bf:90:90:1e:c1:8d:86:85:2e:4e:1e:de:88:
                    42:1b:30:29:ab:8b:7b:e5:66:88:3e:5b:e1:f0:f7:
                    b2:ef:86:4d:ca:e5:0b:d2:bf:20:61:98:00:e1:73:
                    f8:10:54:65:08:52:cd:f8:e3:51:a5:2e:40:46:51:
                    15:e5:c5:40:09:07:71:82:e1:53:6a:2e:65:a0:87:
                    86:f3:ff:3a:d7:9b:23:fa:04:90:1c:27:73:a4:18:
                    7a:a8:81:b6:54:4d:0d:4b:38:2c:11:21:7e:46:f7:
                    bc:39:5b:33:e5:7f:34:97:ee:fb:1e:a1:23:2f:12:
                    ed:b8:df:b3:90:36:91:1c:f4:bb:ff:27:35:8c:12:
                    b6:64:93:0a:11:0b:99:34:f0:1d:b1:87:8a:9a:ad:
                    58:b8:16:91:61:c7:c0:85:93:b7:78:d0:88:ac:0e:
                    a3:3b:78:a5:e8:fc:a0:a8:a1:33:fc:3f:1a:ea:3a:
                    28:81:bf:c2:1e:e0:93:ed:c9:a2:25:09:53:d0:9c:
                    21:a1:80:75:0f:80:a1:2b:21:c7:1b:dc:2a:56:b3:
                    ae:57:bb:3b:db:c5:94:6e:23:52:00:29:a3:48:19:
                    4e:76:b4:86:81:74:18:16:5d:3a:33:24:68:7a:3d:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:15:89:0A:C6:2F:F0:41:39:99:FF:78:0E:49:0B:6C:20:E1:CB:1F
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/332F710683A611F0948BAE55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.251.182.0/24
                  101.53.64.0/24
                  101.53.73.0/24
                  175.176.130.0/24
                  175.176.133.0/24
                  203.173.98.0/24
                  203.173.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:da:e1:6b:45:65:21:6b:01:51:be:89:c2:91:2f:f4:9a:ba:
         da:4e:6c:af:d3:2b:86:ed:d1:41:7b:29:b9:e4:dd:95:6d:78:
         44:14:62:bc:df:fc:7e:24:12:11:cf:06:c6:99:20:16:10:ae:
         ac:26:d6:86:5a:be:f8:c5:52:71:05:a8:33:eb:27:e3:8a:fb:
         39:0b:dc:fc:9f:1a:a4:b4:31:83:b5:34:d7:7d:fa:dd:a4:b0:
         78:cd:1a:b5:19:40:4b:c7:8d:b2:e3:b2:95:47:1a:bc:1d:98:
         78:da:72:1a:0b:ca:89:f6:a7:07:f9:dc:33:a6:d0:40:30:fe:
         cc:17:de:60:21:14:5d:b7:7a:e2:e9:a6:0c:cc:50:1e:2b:70:
         f5:ae:64:be:23:c1:0a:da:57:3b:91:0e:f4:30:92:60:1d:97:
         04:e5:c4:15:18:72:c2:d6:b8:66:08:2e:07:0d:08:75:68:af:
         a2:69:e7:7c:4d:55:dd:73:59:ed:01:46:d1:53:fb:12:af:83:
         90:22:07:f9:b5:87:cc:7d:af:15:55:cb:ff:d2:a7:db:93:8d:
         fe:0a:ea:b9:1f:5e:26:1b:2f:0a:14:40:79:a5:79:68:44:46:
         8b:5f:83:27:dc:e2:f5:57:d7:26:cb:e7:2d:ea:81:90:20:eb:
         9f:db:1b:c8
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgICPbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjYwODA2MTUxMTU0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0YTQzYS1kNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1QR7AHJiWI9tydALFQMer+QkB7BjYaFLk4e3ohCGzApq4t75WaIPlvh8Pey
74ZNyuUL0r8gYZgA4XP4EFRlCFLN+ONRpS5ARlEV5cVACQdxguFTai5loIeG8/86
15sj+gSQHCdzpBh6qIG2VE0NSzgsESF+Rve8OVsz5X80l+77HqEjLxLtuN+zkDaR
HPS7/yc1jBK2ZJMKEQuZNPAdsYeKmq1YuBaRYcfAhZO3eNCIrA6jO3il6PygqKEz
/D8a6joogb/CHuCT7cmiJQlT0JwhoYB1D4ChKyHHG9wqVrOuV7s728WUbiNSACmj
SBlOdrSGgXQYFl06MyRoej2ftwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFF4ViQrG
L/BBOZn/eA5JC2wg4csfMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMzMyRjcxMDY4
M0E2MTFGMDk0OEJBRTU1QzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw
BAIAATAqAwQAPfu2AwQAZTVAAwQAZTVJAwQAr7CCAwQAr7CFAwQAy61iAwQAy61z
MA0GCSqGSIb3DQEBCwUAA4IBAQC/2uFrRWUhawFRvonCkS/0mrraTmyv0yuG7dFB
eym55N2VbXhEFGK83/x+JBIRzwbGmSAWEK6sJtaGWr74xVJxBagz6yfjivs5C9z8
nxqktDGDtTTXffrdpLB4zRq1GUBLx42y47KVRxq8HZh42nIaC8qJ9qcH+dwzptBA
MP7MF95gIRRdt3ri6aYMzFAeK3D1rmS+I8EK2lc7kQ70MJJgHZcE5cQVGHLC1rhm
CC4HDQh1aK+iaed8TVXdc1ntAUbRU/sSr4OQIgf5tYfMfa8VVcv/0qfbk43+Cuq5
H14mGy8KFEB5pXloREaLX4Mn3OL1V9cmy+ct6oGQIOuf2xvI
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:59 2026 by rpki-client