Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
File:                     63F05DE02F1D11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier:          vOR7MkFdjtwcQmI8Q2E4naB63wEs/ZKiAQLoEidZx/Y=
Subject key identifier:   B9:BE:E8:CF:7E:79:37:53:F9:BB:AB:FD:E7:AB:09:21:70:8A:54:E0
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       0419
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 01:49:06 +0000
ROA not before:           Fri 31 Jul 2026 01:49:06 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     18390
IP address blocks:        27.96.192.0/19 maxlen: 24
                          115.69.0.0/18 maxlen: 24
                          202.172.96.0/19 maxlen: 24
                          203.23.236.0/22 maxlen: 24
                          203.29.65.0/24 maxlen: 24
                          203.29.124.0/23 maxlen: 24
                          203.31.202.0/23 maxlen: 24
                          203.56.244.0/22 maxlen: 24
                          203.57.48.0/23 maxlen: 24
                          210.1.192.0/19 maxlen: 24
                          2407:e400::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: Jul 31 01:49:06 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a6bff12-ded6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:e2:51:2d:fd:89:7c:29:6b:84:8b:4b:8e:
                    ef:6e:44:dc:01:ea:07:75:a9:e1:21:89:c7:3b:5f:
                    e2:cb:e0:0e:ec:3f:51:5f:60:1d:91:8b:94:3f:0f:
                    a7:97:c7:68:ec:ee:95:b7:2a:45:5e:90:af:00:46:
                    25:34:51:1e:e5:4f:67:8e:61:10:ba:85:f3:f9:00:
                    87:b4:46:29:e4:82:bb:1d:92:de:b5:c2:47:49:bc:
                    c0:a6:ea:32:c4:64:54:21:08:74:d9:b8:2f:72:f3:
                    de:bb:b1:fc:21:79:10:32:5a:d1:fa:f7:9a:1f:5d:
                    61:0f:03:ce:92:65:2f:a3:ed:21:13:53:a0:2c:31:
                    45:ad:85:72:71:94:2e:27:59:ea:8e:83:02:61:c5:
                    8e:b6:bc:16:d9:d4:18:71:7f:02:f4:fa:a8:99:19:
                    d5:d5:9d:9d:ee:f6:b1:0e:9c:65:d5:7f:bc:1c:91:
                    54:fa:ab:5c:05:16:7a:0e:76:c7:ad:0b:d9:38:c8:
                    88:15:3c:03:11:80:e1:7f:f0:83:29:75:7e:c5:69:
                    de:74:65:db:d9:c8:be:0d:af:81:32:ff:58:87:f3:
                    fe:d2:01:14:5e:58:f5:f5:49:3c:cf:ab:60:04:5d:
                    75:8b:2a:6d:1c:b5:66:56:61:9b:07:f8:18:a2:ba:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BE:E8:CF:7E:79:37:53:F9:BB:AB:FD:E7:AB:09:21:70:8A:54:E0
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.96.192.0/19
                  115.69.0.0/18
                  202.172.96.0/19
                  203.23.236.0/22
                  203.29.65.0/24
                  203.29.124.0/23
                  203.31.202.0/23
                  203.56.244.0/22
                  203.57.48.0/23
                  210.1.192.0/19
                IPv6:
                  2407:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:68:b3:63:d6:be:2b:2c:ad:f8:7e:39:06:c0:63:39:27:eb:
         ea:1a:09:6b:62:f6:0a:01:9a:56:40:50:93:c1:f3:0e:2f:63:
         2b:45:47:34:4f:6e:bc:d1:5b:63:3a:da:a4:70:30:e9:48:4e:
         7d:47:9e:b5:e2:e4:da:ef:28:d2:de:67:30:fe:b2:47:5f:2c:
         01:db:60:b3:93:70:d8:fc:71:b7:a1:6c:73:cc:c0:5e:22:e9:
         83:5c:f3:86:26:07:59:e7:0b:d8:97:6c:01:8c:3d:85:7b:97:
         0e:bd:e0:7b:bf:1d:3e:bb:f3:57:09:90:17:4d:9d:fa:49:db:
         be:30:0d:63:b4:63:54:61:22:cf:84:d2:f5:41:93:66:6d:f0:
         29:49:b3:76:81:a7:e0:0d:53:d3:de:fe:f3:98:5c:6c:50:aa:
         5b:e9:a7:ec:13:aa:5b:e7:09:69:24:bf:0b:c1:b5:2d:3a:5b:
         e9:fb:c2:74:57:73:47:24:49:00:dc:5b:b0:9d:37:89:d5:f0:
         8d:e1:5f:1a:ed:c9:fb:71:c0:b5:dc:7f:53:20:d6:3b:9c:de:
         a4:49:8c:c4:55:6f:b7:ae:2e:cb:0e:b8:b6:da:5a:c9:8c:62:
         89:2e:c3:c2:b9:fb:1d:ee:08:ec:79:a7:bd:b2:7e:52:f2:3c:
         0d:fd:e5:2d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2MzExMTAvBgNVBAUTKDdCRDNFNDNEMTM0RTUyMzVFOTc2MDNDRThCQTk0ODZC
NjJBOUIxRTYwHhcNMjYwNzMxMDE0OTA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiZmYxMi1kZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuWjiUS39iXwpa4SLS47vbkTcAeoHdanhIYnHO1/iy+AO7D9RX2AdkYuUPw+n
l8do7O6VtypFXpCvAEYlNFEe5U9njmEQuoXz+QCHtEYp5IK7HZLetcJHSbzApuoy
xGRUIQh02bgvcvPeu7H8IXkQMlrR+veaH11hDwPOkmUvo+0hE1OgLDFFrYVycZQu
J1nqjoMCYcWOtrwW2dQYcX8C9PqomRnV1Z2d7vaxDpxl1X+8HJFU+qtcBRZ6DnbH
rQvZOMiIFTwDEYDhf/CDKXV+xWnedGXb2ci+Da+BMv9Yh/P+0gEUXlj19Uk8z6tg
BF11iyptHLVmVmGbB/gYorpEewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLm+6M9+
eTdT+bur/eerCSFwilTgMB8GA1UdIwQYMBaAFHvT5D0TTlI16XYDzoupSGtiqbHm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYzMS8zOUU0RDdBOERD
NzgxMUVDQTRFMzA2MTdDNEY5QUUwMi9lOVBrUFJOT1VqWHBkZ1BPaTZsSWEyS3Bz
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2U5UGtQUk5PVWpYcGRnUE9pNmxJYTJLcHNlWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUM2MzEvMzlFNEQ3QThEQzc4MTFFQ0E0RTMwNjE3QzRGOUFFMDIvNjNGMDVERTAy
RjFEMTFFREEzRTI5QjA5QzRGOUFFMDIucm9hMGQGCCsGAQUFBwEHAQH/BFUwUzBC
BAIAATA8AwQFG2DAAwQGc0UAAwQFyqxgAwQCyxfsAwQAyx1BAwQByx18AwQByx/K
AwQCyzj0AwQByzkwAwQF0gHAMA0EAgACMAcDBQAkB+QAMA0GCSqGSIb3DQEBCwUA
A4IBAQBnaLNj1r4rLK34fjkGwGM5J+vqGglrYvYKAZpWQFCTwfMOL2MrRUc0T268
0VtjOtqkcDDpSE59R5614uTa7yjS3mcw/rJHXywB22Czk3DY/HG3oWxzzMBeIumD
XPOGJgdZ5wvYl2wBjD2Fe5cOveB7vx0+u/NXCZAXTZ36Sdu+MA1jtGNUYSLPhNL1
QZNmbfApSbN2gafgDVPT3v7zmFxsUKpb6afsE6pb5wlpJL8LwbUtOlvp+8J0V3NH
JEkA3FuwnTeJ1fCN4V8a7cn7ccC13H9TINY7nN6kSYzEVW+3ri7LDri22lrJjGKJ
LsPCufsd7gjseae9sn5S8jwN/eUt
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:27 2026 by rpki-client