Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa
File:                     B4D9927A014E11EB9E13483FC4F9AE02.roa (raw, json)
Hash identifier:          4DTbmP+xRxjGDE89+/a/qomlQfxJqn5MNFnbFzsPJmc=
Subject key identifier:   0A:33:81:21:C9:CB:10:B7:61:0F:21:55:C1:C1:D5:A2:84:E0:25:1E
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       33CA
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa
Signing time:             Wed 05 Aug 2026 06:32:58 +0000
ROA not before:           Wed 05 Aug 2026 06:32:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        59.163.231.0/24 maxlen: 24
                          115.108.48.0/20 maxlen: 24
                          115.112.168.0/23 maxlen: 23
                          121.241.30.0/24 maxlen: 24
                          203.199.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13258 (0x33ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Aug  5 06:32:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a72d919-d09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:b6:e8:85:5a:8b:62:d2:c1:ec:2f:06:d9:
                    57:77:15:60:3f:6c:09:5c:f0:75:5a:f2:c8:dd:ee:
                    72:27:c5:6b:de:a3:77:1d:1a:bb:49:a3:61:df:75:
                    21:3c:f3:28:2e:3c:a0:51:43:38:3b:09:8e:a9:ff:
                    a9:53:c7:0c:9a:29:53:9d:49:b3:13:3a:93:79:f5:
                    85:70:c4:ce:0f:9b:c4:8c:4a:e9:19:68:aa:14:c0:
                    cb:4e:59:78:5b:76:53:64:8a:3c:43:d7:b6:2e:81:
                    39:d5:9c:56:47:10:41:cf:f1:a6:29:32:e6:46:1e:
                    da:55:17:a8:23:80:31:81:fd:5e:ac:bb:a8:22:88:
                    74:49:9a:1c:ca:b8:b5:1c:4a:28:4e:88:a8:07:cf:
                    16:b5:0a:13:92:d7:7a:9b:ba:4e:71:df:86:15:69:
                    2e:e0:f7:cb:f9:3e:15:a3:8d:7b:92:f4:94:fd:b0:
                    3f:11:53:ba:d7:d7:c6:20:b2:4f:8c:b7:d0:f7:5a:
                    c7:0f:89:07:2a:8d:b2:74:07:cd:4e:b7:59:34:51:
                    dc:a6:9a:d7:42:0f:3e:7e:d8:5e:c1:f0:e5:97:e3:
                    a5:76:f4:51:6b:d2:67:13:d3:87:60:c4:f8:b0:14:
                    78:ae:3c:4e:8c:1e:6f:50:86:77:92:47:6a:5c:a3:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:33:81:21:C9:CB:10:B7:61:0F:21:55:C1:C1:D5:A2:84:E0:25:1E
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B4D9927A014E11EB9E13483FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.163.231.0/24
                  115.108.48.0/20
                  115.112.168.0/23
                  121.241.30.0/24
                  203.199.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:5f:9c:98:b6:2c:a6:2f:11:dd:a9:a0:cd:97:dc:b3:44:57:
         d0:15:67:2a:b4:e3:86:c5:22:47:01:49:63:af:6e:ae:e2:18:
         03:ef:3a:ed:15:7d:59:2f:e0:9e:41:f3:ba:c5:ad:00:a4:52:
         ca:4b:f6:c8:21:71:ff:b1:0d:70:74:cd:6d:2d:0b:73:61:8e:
         8c:e4:58:e9:d5:68:f5:b1:bf:4f:af:b6:a5:73:54:0e:d0:ed:
         c6:77:8b:10:3b:e0:48:fa:3d:c7:9b:29:40:e2:a7:1c:26:e2:
         e3:7a:b5:80:2a:8c:d3:8e:be:9a:f2:62:3f:24:d4:89:ff:d0:
         bb:eb:88:74:2a:d5:1a:93:19:a4:42:42:b2:d2:b6:af:40:2c:
         e0:1d:74:4a:ab:3e:b1:bb:f2:dd:64:06:3f:41:eb:1f:82:7d:
         f0:38:35:a0:4f:5d:7f:74:ac:3b:d4:47:1a:93:7e:82:19:9a:
         94:e0:58:22:2a:50:98:32:da:0e:fc:8d:32:a2:39:9a:e9:fa:
         49:4b:32:21:ae:18:6d:cd:9f:42:26:34:13:ac:62:90:47:da:
         6a:bb:3b:ce:06:f7:67:85:6a:6f:b8:52:b8:d5:52:cc:6c:bf:
         9b:81:31:2a:b8:97:42:70:6a:aa:77:11:43:ac:81:eb:42:97:
         7b:50:fe:c8
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICM8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjYwODA1MDYzMjU4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcyZDkxOS1kMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+u26IVai2LSwewvBtlXdxVgP2wJXPB1WvLI3e5yJ8Vr3qN3HRq7SaNh33Uh
PPMoLjygUUM4OwmOqf+pU8cMmilTnUmzEzqTefWFcMTOD5vEjErpGWiqFMDLTll4
W3ZTZIo8Q9e2LoE51ZxWRxBBz/GmKTLmRh7aVReoI4Axgf1erLuoIoh0SZocyri1
HEooToioB88WtQoTktd6m7pOcd+GFWku4PfL+T4Vo417kvSU/bA/EVO619fGILJP
jLfQ91rHD4kHKo2ydAfNTrdZNFHcpprXQg8+fthewfDll+OldvRRa9JnE9OHYMT4
sBR4rjxOjB5vUIZ3kkdqXKN7cQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFAozgSHJ
yxC3YQ8hVcHB1aKE4CUeMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvQjREOTkyN0Ew
MTRFMTFFQjlFMTM0ODNGQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk
BAIAATAeAwQAO6PnAwQEc2wwAwQBc3CoAwQAefEeAwQAy8fzMA0GCSqGSIb3DQEB
CwUAA4IBAQAZX5yYtiymLxHdqaDNl9yzRFfQFWcqtOOGxSJHAUljr26u4hgD7zrt
FX1ZL+CeQfO6xa0ApFLKS/bIIXH/sQ1wdM1tLQtzYY6M5Fjp1Wj1sb9Pr7alc1QO
0O3Gd4sQO+BI+j3HmylA4qccJuLjerWAKozTjr6a8mI/JNSJ/9C764h0KtUakxmk
QkKy0ravQCzgHXRKqz6xu/LdZAY/Qesfgn3wODWgT11/dKw71Ecak36CGZqU4Fgi
KlCYMtoO/I0yojma6fpJSzIhrhhtzZ9CJjQTrGKQR9pquzvOBvdnhWpvuFK41VLM
bL+bgTEquJdCcGqqdxFDrIHrQpd7UP7I
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:04:19 2026 by rpki-client