Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/B32DFBA0613E11F0807A9A39C4F9AE02.roa
File:                     B32DFBA0613E11F0807A9A39C4F9AE02.roa (raw, json)
Hash identifier:          znQCSmWYjAzJ99g/MnFKRiPRCuuveVvzPYPlkOv1NBM=
Subject key identifier:   DC:29:44:6B:F4:E2:75:30:C7:B9:CD:5E:72:89:24:1B:1B:83:52:A7
Certificate issuer:       /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial:       BC
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/B32DFBA0613E11F0807A9A39C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 08:34:10 +0000
ROA not before:           Fri 03 Jul 2026 08:34:10 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140687
IP address blocks:        165.101.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
                          rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
        Validity
            Not Before: Jul  3 08:34:10 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a477402-055d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:1b:10:38:46:c5:72:32:96:eb:05:23:de:
                    10:0f:b2:47:92:5e:0f:fd:1f:8e:10:e6:ae:65:8b:
                    7c:94:55:08:be:68:b0:3f:b0:d6:96:03:44:a5:d7:
                    63:99:29:d3:a2:ca:04:86:81:02:37:34:41:98:ae:
                    be:ae:18:ae:25:bc:a5:af:5a:34:b5:e3:e8:e6:85:
                    d2:cf:fc:fc:27:b4:c1:c5:6b:2c:81:83:79:c7:29:
                    94:05:a4:74:4a:56:49:d4:cb:7c:ec:a1:46:90:27:
                    52:32:86:a4:25:00:d1:12:9f:8e:01:6c:17:18:77:
                    b5:20:6e:0e:06:89:23:94:03:ff:f9:05:26:95:4d:
                    3f:34:12:e8:a7:fd:44:04:8c:0b:c6:cf:70:95:07:
                    e1:46:e1:eb:f5:c0:6a:2a:e5:2a:b3:88:80:52:62:
                    84:ed:3e:44:1f:64:71:dc:8a:f4:76:c3:81:71:5f:
                    e6:af:69:a9:f5:90:be:a4:89:2d:12:75:55:56:07:
                    e1:3a:46:b2:c1:de:82:27:80:d2:08:b6:b0:17:b0:
                    3d:05:4a:db:20:53:13:96:ee:6c:37:ff:b8:39:30:
                    de:5f:5e:fc:a5:bf:bd:41:7e:61:bb:c7:68:2d:30:
                    38:01:da:05:c0:10:ae:65:56:bf:eb:1e:54:1d:c7:
                    6a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:29:44:6B:F4:E2:75:30:C7:B9:CD:5E:72:89:24:1B:1B:83:52:A7
            X509v3 Authority Key Identifier:
                keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/B32DFBA0613E11F0807A9A39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:ad:15:4e:cf:e4:5d:e1:1c:64:95:38:63:6b:c0:6f:ce:
         cf:42:70:83:0f:88:51:b1:15:e3:a9:87:af:35:a2:d3:36:f1:
         1d:6d:dd:8d:11:25:9d:d3:31:e2:bb:18:b4:1a:5e:50:73:88:
         25:a3:25:3d:cb:d7:91:89:35:f5:99:27:b8:d4:2d:d8:5f:f4:
         93:58:2b:05:42:19:58:a5:3d:90:96:2c:7c:7d:f0:19:68:1d:
         ff:9e:af:62:a8:bb:e7:b4:b5:8f:e3:ae:06:a0:4c:f1:a6:e3:
         ea:a2:c0:6d:f6:7f:ed:be:ef:2a:22:70:d9:e2:05:b0:47:28:
         0f:4b:10:e4:18:c1:ec:cd:fe:52:01:87:83:72:09:29:1a:46:
         ab:a0:2b:ee:0a:bb:b9:3f:36:64:2b:15:4f:6d:e5:d2:e0:5f:
         6c:0e:94:20:1b:e3:78:f0:9e:7f:0d:56:d0:13:4f:15:f6:87:
         1a:18:45:f4:01:b0:f7:c8:34:10:8a:6b:21:8d:b2:85:c7:5d:
         29:1d:68:f6:d2:fe:d2:84:03:4e:f6:de:59:2b:17:ce:ba:0b:
         f8:47:bb:31:1a:bd:fd:89:22:34:cf:dd:02:85:b4:2f:84:1d:
         5f:15:fa:5c:cc:98:2a:3e:f6:59:2c:52:39:e1:44:fd:b6:50:
         a2:76:33:44
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTkzMDkxMTAvBgNVBAUTKDdEOEZBMEJFRjZBRUY3MUJERjg4Mzg1OEY3MzYxOUQz
QjU5RTI3NzcwHhcNMjYwNzAzMDgzNDEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ3NzQwMi0wNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXAbEDhGxXIylusFI94QD7JHkl4P/R+OEOauZYt8lFUIvmiwP7DWlgNEpddj
mSnTosoEhoECNzRBmK6+rhiuJbylr1o0tePo5oXSz/z8J7TBxWssgYN5xymUBaR0
SlZJ1Mt87KFGkCdSMoakJQDREp+OAWwXGHe1IG4OBokjlAP/+QUmlU0/NBLop/1E
BIwLxs9wlQfhRuHr9cBqKuUqs4iAUmKE7T5EH2Rx3Ir0dsOBcV/mr2mp9ZC+pIkt
EnVVVgfhOkaywd6CJ4DSCLawF7A9BUrbIFMTlu5sN/+4OTDeX178pb+9QX5hu8do
LTA4AdoFwBCuZVa/6x5UHcdqbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNwpRGv0
4nUwx7nNXnKJJBsbg1KnMB8GA1UdIwQYMBaAFH2PoL72rvcb34g4WPc2GdO1nid3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTMwOS85ODkxRTkyRTYx
M0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4dmZpRGhZOXpZWjA3V2VK
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUozYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTkzMDkvOTg5MUU5MkU2MTNEMTFGMEIwMzZCODM2QzRGOUFFMDIvQjMyREZCQTA2
MTNFMTFGMDgwN0E5QTM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWVrMA0GCSqGSIb3DQEBCwUAA4IBAQBU660VTs/kXeEcZJU4Y2vA
b87PQnCDD4hRsRXjqYevNaLTNvEdbd2NESWd0zHiuxi0Gl5Qc4gloyU9y9eRiTX1
mSe41C3YX/STWCsFQhlYpT2Qlix8ffAZaB3/nq9iqLvntLWP464GoEzxpuPqosBt
9n/tvu8qInDZ4gWwRygPSxDkGMHszf5SAYeDcgkpGkaroCvuCru5PzZkKxVPbeXS
4F9sDpQgG+N48J5/DVbQE08V9ocaGEX0AbD3yDQQimshjbKFx10pHWj20v7ShANO
9t5ZKxfOugv4R7sxGr39iSI0z90ChbQvhB1fFfpczJgqPvZZLFI54UT9tlCidjNE
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:18:29 2026 by rpki-client