Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/0C4B4A28892811F1A62CD15C5611F970.roa
File:                     0C4B4A28892811F1A62CD15C5611F970.roa (raw, json)
Hash identifier:          QmtANBl3xbqi6d33sHeUXu4Ac01FQws4OrK79nYT1zU=
Subject key identifier:   E9:5C:F8:D3:C3:E5:C4:2D:B9:BD:1F:BF:A2:4F:31:28:B5:22:44:A8
Certificate issuer:       /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE
Certificate serial:       A4
Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/0C4B4A28892811F1A62CD15C5611F970.roa
Signing time:             Sun 26 Jul 2026 19:27:32 +0000
ROA not before:           Sun 26 Jul 2026 19:27:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132608
IP address blocks:        203.34.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl
                          rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE
        Validity
            Not Before: Jul 26 19:27:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a665fa4-ca03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:d9:d5:b8:d4:59:20:18:49:86:d3:34:f5:
                    60:bc:a4:eb:4a:28:db:6c:31:2e:a2:b5:c8:51:4b:
                    95:0a:fb:24:f0:c4:cf:6a:a7:bd:09:1d:8f:e1:6c:
                    23:92:1b:57:a0:83:00:c7:46:e6:9e:e0:a9:ee:48:
                    f9:0b:91:52:6c:f4:00:79:c3:d3:3c:64:59:d6:e4:
                    15:d0:ee:a5:0c:d6:46:2a:bc:14:c2:ee:69:1b:81:
                    b9:a0:0f:7b:af:21:73:86:72:4f:cf:14:74:a7:cc:
                    75:53:d9:be:10:c3:f3:9c:84:a1:4d:ed:f8:e6:30:
                    37:80:cf:ed:fc:dc:e3:45:b2:6d:1e:66:a6:bf:31:
                    e8:c0:7f:5f:2f:04:32:28:75:65:f0:28:8a:11:ef:
                    77:3f:b6:38:d9:a2:b8:2f:bd:9b:33:02:d2:ba:93:
                    3c:47:3d:bc:a7:d4:94:4e:d4:86:dd:bc:be:0b:19:
                    06:a5:c9:a1:e2:0e:b3:d4:b5:da:e0:09:68:e9:a0:
                    2b:0e:95:54:d7:98:d3:95:8e:8e:1f:06:3d:01:87:
                    17:3b:da:55:7f:fc:01:30:4c:e6:d2:4a:98:ea:3d:
                    e0:01:21:8b:72:91:b6:67:2b:f1:a8:7d:e6:d6:97:
                    a2:93:3d:21:f0:e7:82:fb:75:32:d9:ba:21:4e:b9:
                    43:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5C:F8:D3:C3:E5:C4:2D:B9:BD:1F:BF:A2:4F:31:28:B5:22:44:A8
            X509v3 Authority Key Identifier:
                keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/0C4B4A28892811F1A62CD15C5611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.34.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:cd:80:94:be:4b:91:db:6e:4e:c5:2d:ab:2b:3a:14:45:99:
         6f:49:dc:dc:6d:e8:1e:57:02:f4:7a:34:f7:bf:00:5c:4b:b4:
         d3:70:8d:78:9d:81:b9:df:83:1a:9a:ca:45:3b:aa:eb:51:73:
         0a:29:c6:70:c2:8b:89:03:7a:1b:d4:b6:c7:3f:ed:60:cd:12:
         19:6d:c7:4d:a8:d7:4c:43:ae:66:03:f1:cc:4f:f6:a5:e5:d2:
         65:e6:3a:6a:77:78:75:8c:ad:53:b8:f2:3e:8b:87:d8:7b:cc:
         6e:4c:45:08:1c:ea:20:5c:b1:d3:eb:cb:b4:56:8d:d4:8c:64:
         dd:2f:f5:80:81:44:44:5f:43:5a:4d:c0:41:95:35:4c:67:ea:
         d2:af:ce:1f:72:ce:28:ce:f3:cb:73:4c:6b:48:f6:34:54:fd:
         f5:2d:10:b3:c5:b9:d9:58:28:cc:e1:b7:31:28:24:8f:8f:37:
         f6:c8:12:c7:21:24:38:61:16:b1:12:e7:d9:4d:07:59:a3:70:
         9e:c2:8e:d5:ec:33:69:1a:86:53:b6:90:42:c9:b7:f7:be:71:
         20:53:8b:0f:5b:03:27:e9:ae:88:52:cb:91:63:89:bc:e6:db:
         57:ce:a3:90:7c:56:39:0f:82:5f:66:a8:9f:fb:ea:23:ee:ae:
         97:19:0d:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdCMDcxMTAvBgNVBAUTKENDRTlDNTYyNEJBQ0Y5RDA5ODVFM0YyRDZFMzFFNkIy
RDg2RDgyQUUwHhcNMjYwNzI2MTkyNzMyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY2NWZhNC1jYTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1e3Z1bjUWSAYSYbTNPVgvKTrSijbbDEuorXIUUuVCvsk8MTPaqe9CR2P4Wwj
khtXoIMAx0bmnuCp7kj5C5FSbPQAecPTPGRZ1uQV0O6lDNZGKrwUwu5pG4G5oA97
ryFzhnJPzxR0p8x1U9m+EMPznIShTe345jA3gM/t/NzjRbJtHmamvzHowH9fLwQy
KHVl8CiKEe93P7Y42aK4L72bMwLSupM8Rz28p9SUTtSG3by+CxkGpcmh4g6z1LXa
4Alo6aArDpVU15jTlY6OHwY9AYcXO9pVf/wBMEzm0kqY6j3gASGLcpG2ZyvxqH3m
1peikz0h8OeC+3Uy2bohTrlD8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOlc+NPD
5cQtub0fv6JPMSi1IkSoMB8GA1UdIwQYMBaAFMzpxWJLrPnQmF4/LW4x5rLYbYKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0IwNy9EODg1NDQ5MjhG
RDUxMUYwQTYxQzlCMkJDNEY5QUUwMi96T25GWWt1cy1kQ1lYajh0YmpIbXN0aHRn
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pPbkZZa3VzLWRDWVhqOHRiakhtc3RodGdxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdCMDcvRDg4NTQ0OTI4RkQ1MTFGMEE2MUM5QjJCQzRGOUFFMDIvMEM0QjRBMjg4
OTI4MTFGMUE2MkNEMTVDNTYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyyLxMA0GCSqGSIb3DQEBCwUAA4IBAQCkzYCUvkuR225OxS2rKzoU
RZlvSdzcbegeVwL0ejT3vwBcS7TTcI14nYG534MamspFO6rrUXMKKcZwwouJA3ob
1LbHP+1gzRIZbcdNqNdMQ65mA/HMT/al5dJl5jpqd3h1jK1TuPI+i4fYe8xuTEUI
HOogXLHT68u0Vo3UjGTdL/WAgUREX0NaTcBBlTVMZ+rSr84fcs4ozvPLc0xrSPY0
VP31LRCzxbnZWCjM4bcxKCSPjzf2yBLHISQ4YRaxEufZTQdZo3Cewo7V7DNpGoZT
tpBCybf3vnEgU4sPWwMn6a6IUsuRY4m85ttXzqOQfFY5D4JfZqif++oj7q6XGQ0U
-----END CERTIFICATE-----
Generated at Tue Jul 28 01:57:54 2026 by rpki-client