Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E9A2C6AAAC1711F1AC2C3D313311F970.roa
File:                     E9A2C6AAAC1711F1AC2C3D313311F970.roa (raw, json)
Hash identifier:          IUVg4aIeQJz80P8SnnQNdARYWjlA4YkPhCYesR8rZeY=
Subject key identifier:   F8:18:C9:DF:48:ED:77:2D:EC:B7:55:97:1D:E1:CE:C2:C7:5A:D9:6E
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       03E2
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E9A2C6AAAC1711F1AC2C3D313311F970.roa
Signing time:             Wed 09 Sep 2026 06:30:14 +0000
ROA not before:           Wed 09 Sep 2026 06:30:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138077
IP address blocks:        202.155.66.0/23 maxlen: 24
                          202.155.68.0/23 maxlen: 23
                          202.155.70.0/23 maxlen: 24
                          202.155.80.0/22 maxlen: 24
                          202.155.84.0/23 maxlen: 24
                          202.155.92.0/23 maxlen: 24
                          202.155.104.0/22 maxlen: 24
                          202.155.108.0/22 maxlen: 24
                          202.155.112.0/23 maxlen: 24
                          202.155.114.0/23 maxlen: 24
                          202.155.122.0/23 maxlen: 24
                          202.155.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 06:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Sep  9 06:30:14 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6aa0fcf6-3f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:18:00:00:43:68:01:52:b5:f5:b5:7c:f5:
                    f6:88:a8:09:77:27:83:91:a8:6b:d7:be:b6:a1:2c:
                    8b:92:36:08:9b:e9:7a:ab:9b:23:14:68:21:b0:ab:
                    75:0f:c6:81:10:35:a7:d1:53:e0:f6:95:dd:39:97:
                    3f:1b:94:ca:25:2b:80:22:93:ca:5d:dc:2a:43:be:
                    84:1e:fd:c6:b8:18:5e:a3:a2:9c:e7:ff:ea:fe:d1:
                    1f:4b:90:ba:3e:f7:0c:44:a2:19:ec:20:e0:0a:9f:
                    07:44:cd:b8:27:1a:05:c0:4f:68:89:23:f6:06:a9:
                    49:60:6d:bf:cf:3d:2d:8b:30:5a:6b:c6:92:9e:33:
                    18:e2:6c:c3:ff:79:17:11:38:00:1a:7a:9d:3e:b9:
                    d0:6b:fb:ad:53:b6:3d:7b:a5:a7:53:85:e6:bb:11:
                    8b:04:5a:60:a2:f3:58:b6:7c:85:fe:6d:69:f7:1a:
                    e5:97:6e:e8:28:fe:7c:c9:6c:31:ce:0a:fc:cb:2d:
                    74:95:49:e9:63:39:38:90:df:20:2e:12:9c:28:f0:
                    79:63:78:27:a0:10:a2:5d:19:92:6a:7f:4b:64:6f:
                    8a:e5:e9:72:57:9a:ed:16:b5:16:bb:fd:98:b8:a9:
                    88:4a:23:b6:d5:f2:55:81:5e:d7:ad:9f:33:78:57:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:18:C9:DF:48:ED:77:2D:EC:B7:55:97:1D:E1:CE:C2:C7:5A:D9:6E
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E9A2C6AAAC1711F1AC2C3D313311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.66.0-202.155.71.255
                  202.155.80.0-202.155.85.255
                  202.155.92.0/23
                  202.155.104.0-202.155.115.255
                  202.155.122.0-202.155.125.255

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:5e:0e:8b:04:2b:5b:c1:74:59:92:c8:6a:27:a2:14:29:
         7d:7e:fb:71:a5:cb:9e:01:51:d9:f4:27:eb:e4:a9:5e:57:67:
         c6:29:ae:a3:ec:d5:ee:87:66:fb:78:07:70:ae:5f:40:61:d0:
         cd:71:8a:9b:cd:a0:02:55:e2:c8:77:93:6c:2d:55:89:2e:ef:
         ea:a4:95:eb:e1:68:63:50:9c:42:ad:01:55:4f:f0:ea:bb:f5:
         75:27:bc:16:c9:ab:2f:54:00:ec:91:b0:e5:1b:be:5d:38:e9:
         1a:b8:1c:a5:f2:c9:51:cb:4b:3d:30:ad:95:57:7b:e7:51:41:
         e3:6a:26:6f:31:e3:1b:a8:7f:dc:5b:8e:73:80:82:fc:8e:df:
         c0:b6:49:6a:22:e3:98:da:62:91:d4:21:0d:31:8a:06:d3:7e:
         d1:36:7a:10:7b:0e:04:5a:72:82:ed:32:53:cd:1a:7d:3a:95:
         8b:17:7a:a1:84:9e:34:d8:2e:0d:9e:35:b7:94:6d:f3:e8:e5:
         85:e7:33:0d:46:d0:23:d8:03:45:4c:ba:b1:f7:4c:50:96:a6:
         0b:ae:52:0d:69:8c:0d:18:12:0b:5a:89:6f:67:00:26:03:8a:
         79:cf:e8:9d:86:cd:e7:6f:35:0f:24:f9:84:1a:da:69:fd:be:
         ae:cd:f3:c0
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjYwOTA5MDYzMDE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwZmNmNi0zZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0A8YAABDaAFStfW1fPX2iKgJdyeDkahr1762oSyLkjYIm+l6q5sjFGghsKt1
D8aBEDWn0VPg9pXdOZc/G5TKJSuAIpPKXdwqQ76EHv3GuBheo6Kc5//q/tEfS5C6
PvcMRKIZ7CDgCp8HRM24JxoFwE9oiSP2BqlJYG2/zz0tizBaa8aSnjMY4mzD/3kX
ETgAGnqdPrnQa/utU7Y9e6WnU4XmuxGLBFpgovNYtnyF/m1p9xrll27oKP58yWwx
zgr8yy10lUnpYzk4kN8gLhKcKPB5Y3gnoBCiXRmSan9LZG+K5elyV5rtFrUWu/2Y
uKmISiO21fJVgV7XrZ8zeFchsQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFPgYyd9I
7Xct7LdVlx3hzsLHWtluMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvRTlBMkM2QUFB
QzE3MTFGMUFDMkMzRDMxMzMxMUY5NzAucm9hMFcGCCsGAQUFBwEHAQH/BEgwRjBE
BAIAATA+MAwDBAHKm0IDBAPKm0AwDAMEBMqbUAMEAcqbVAMEAcqbXDAMAwQDypto
AwQCyptwMAwDBAHKm3oDBAHKm3wwDQYJKoZIhvcNAQELBQADggEBAHM7Xg6LBCtb
wXRZkshqJ6IUKX1++3Gly54BUdn0J+vkqV5XZ8YprqPs1e6HZvt4B3CuX0Bh0M1x
ipvNoAJV4sh3k2wtVYku7+qklevhaGNQnEKtAVVP8Oq79XUnvBbJqy9UAOyRsOUb
vl046Rq4HKXyyVHLSz0wrZVXe+dRQeNqJm8x4xuof9xbjnOAgvyO38C2SWoi45ja
YpHUIQ0xigbTftE2ehB7DgRacoLtMlPNGn06lYsXeqGEnjTYLg2eNbeUbfPo5YXn
Mw1G0CPYA0VMurH3TFCWpguuUg1pjA0YEgtaiW9nACYDinnP6J2GzedvNQ8k+YQa
2mn9vq7N88A=
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:24 2026 by rpki-client