Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
File:                     9D1066F8474111F08A856E0FC4F9AE02.roa (raw, json)
Hash identifier:          lZNlE/5r5MZ4XMTH8CVA91Rl/WT5KKOh61al2MEr/uk=
Subject key identifier:   18:2A:7D:F4:F3:3B:1F:77:CE:06:E4:F2:09:6C:44:E6:07:87:44:62
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2106
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:31:10 +0000
ROA not before:           Wed 30 Sep 2026 16:31:10 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     148981
IP address blocks:        121.62.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8454 (0x2106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:31:10 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd394e-0fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:c0:d7:ee:53:bb:07:12:a6:d1:86:ec:7e:
                    73:a9:ab:01:4a:a5:8a:88:36:f1:a1:0a:4b:a4:05:
                    57:41:69:7d:3a:8c:ee:17:2a:96:36:e8:47:03:80:
                    07:5a:af:8b:8b:8c:fc:8f:43:5f:4e:21:9a:1e:f0:
                    4f:80:73:46:3b:20:ca:1e:07:f6:aa:4e:36:ec:d1:
                    03:5d:52:42:02:c2:d3:70:8b:8e:13:72:f6:fc:ab:
                    95:1e:ee:0b:38:e6:d9:8d:a4:01:de:6c:fd:1a:8e:
                    ac:54:7f:0f:5d:c4:00:bd:8b:75:41:d6:b0:7e:a1:
                    1e:03:26:f5:49:03:81:75:de:1f:ac:16:79:a4:e4:
                    bb:84:52:a2:4e:b1:30:81:10:e1:22:80:cc:a7:69:
                    1e:22:ba:7d:13:b1:0a:60:9d:b0:e5:b1:cc:c0:f7:
                    c8:e5:0e:95:27:c9:4d:fa:73:0a:0a:7d:62:4c:ce:
                    67:60:85:8f:2b:b5:8f:77:8d:c5:1b:91:5d:13:a9:
                    1e:a5:49:2c:e8:42:c6:a9:a1:c5:e6:63:1f:e2:f2:
                    f1:14:0a:bf:00:0c:1b:16:dd:c6:11:d9:56:9c:ed:
                    81:3f:7d:e2:8f:db:49:cb:66:5e:68:a3:76:38:1b:
                    7d:e2:2f:22:dc:e7:c3:5e:7c:07:49:d7:70:11:fb:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2A:7D:F4:F3:3B:1F:77:CE:06:E4:F2:09:6C:44:E6:07:87:44:62
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/9D1066F8474111F08A856E0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.62.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:6b:f9:f4:8e:e3:32:04:18:34:bb:02:ee:01:43:0e:9d:
         f9:15:52:72:ae:e6:1f:37:d0:cd:7c:75:e8:78:30:0a:74:89:
         be:3c:cf:83:e5:cf:78:cb:96:d6:d4:83:ed:78:6d:a6:23:44:
         44:9a:b3:9c:45:a5:62:0f:3b:b0:f2:54:1d:d6:49:2d:c5:41:
         60:e9:62:6d:7d:3f:b6:5a:f1:ad:e9:5b:1d:d3:62:1a:03:d4:
         cd:bb:38:cd:6c:76:97:14:63:2f:04:78:62:3c:8e:e4:05:ab:
         cf:e7:b2:31:2b:4f:d0:91:57:d2:d4:c5:8b:9d:f2:0a:58:e0:
         73:a2:ae:22:ba:4c:c7:a2:ae:e0:0b:6c:a4:de:03:ea:77:53:
         bb:99:1a:1f:7f:8e:b1:5a:aa:41:75:1a:97:d7:6d:fc:15:b8:
         b7:27:c7:fe:26:84:b1:2c:39:2a:53:fd:ae:57:c3:21:42:66:
         52:dd:35:74:07:e7:e2:33:a1:2b:6e:8e:2a:83:60:47:17:60:
         8b:f1:52:6b:be:1e:0b:8f:e0:50:fb:84:01:ea:af:8c:a6:c6:
         2f:d2:7a:d6:63:3d:6d:8f:fb:ec:ca:78:14:d2:ac:9c:1a:b8:
         87:64:eb:d9:94:38:7c:86:fe:28:70:37:6e:f1:83:d8:e1:89:
         82:6a:48:64
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTEwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkMzk0ZS0wZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo87A1+5TuwcSptGG7H5zqasBSqWKiDbxoQpLpAVXQWl9OozuFyqWNuhHA4AH
Wq+Li4z8j0NfTiGaHvBPgHNGOyDKHgf2qk427NEDXVJCAsLTcIuOE3L2/KuVHu4L
OObZjaQB3mz9Go6sVH8PXcQAvYt1QdawfqEeAyb1SQOBdd4frBZ5pOS7hFKiTrEw
gRDhIoDMp2keIrp9E7EKYJ2w5bHMwPfI5Q6VJ8lN+nMKCn1iTM5nYIWPK7WPd43F
G5FdE6kepUks6ELGqaHF5mMf4vLxFAq/AAwbFt3GEdlWnO2BP33ij9tJy2ZeaKN2
OBt94i8i3OfDXnwHSddwEfumxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBgqffTz
Ox93zgbk8glsROYHh0RiMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvOUQxMDY2Rjg0
NzQxMTFGMDhBODU2RTBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDeT4QMA0GCSqGSIb3DQEBCwUAA4IBAQBgz2v59I7jMgQYNLsC7gFD
Dp35FVJyruYfN9DNfHXoeDAKdIm+PM+D5c94y5bW1IPteG2mI0REmrOcRaViDzuw
8lQd1kktxUFg6WJtfT+2WvGt6Vsd02IaA9TNuzjNbHaXFGMvBHhiPI7kBavP57Ix
K0/QkVfS1MWLnfIKWOBzoq4iukzHoq7gC2yk3gPqd1O7mRoff46xWqpBdRqX1238
Fbi3J8f+JoSxLDkqU/2uV8MhQmZS3TV0B+fiM6Erbo4qg2BHF2CL8VJrvh4Lj+BQ
+4QB6q+MpsYv0nrWYz1tj/vsyngU0qycGriHZOvZlDh8hv4ocDdu8YPY4YmCakhk
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:22 2026 by rpki-client