Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa
File:                     4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          0ehtVh7qrnpCP2HNZmYRMc2RbckLARZJZajak2lZeps=
Subject key identifier:   BD:23:BF:29:D9:AD:BA:AB:CC:54:13:0A:C5:B3:56:C3:26:EC:BF:F6
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3707
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:11:33 +0000
ROA not before:           Thu 30 Jul 2026 15:11:33 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55844
IP address blocks:        203.155.156.0/24 maxlen: 24
                          2405:a000:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14087 (0x3707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:11:33 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b69a5-43d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:2c:9a:48:93:f8:e3:35:6a:4d:a2:a1:3e:
                    1e:49:ea:9f:e2:75:8e:21:a3:84:92:e6:12:7c:e2:
                    ac:53:d1:72:e2:ad:d5:3a:69:f0:fa:28:64:12:6d:
                    54:42:a1:3b:a0:c8:fa:a8:ad:1c:9f:74:ab:f1:49:
                    17:51:09:80:77:6d:31:84:09:ad:ff:ef:37:ef:96:
                    1c:fc:81:36:69:df:ac:b3:8d:b5:ca:86:62:47:ea:
                    a7:79:90:36:50:ff:19:39:d0:4a:f4:5e:df:ad:3a:
                    05:31:1a:66:6d:40:3b:fb:a2:ab:6b:69:e1:92:4d:
                    2e:30:23:bc:15:e3:4b:29:fa:f6:78:e2:3b:0e:2d:
                    05:2f:e1:62:22:57:f6:6c:c4:9b:89:43:89:95:83:
                    20:65:56:58:2e:ac:3d:05:ae:76:dc:09:fc:44:17:
                    bd:89:8a:fa:a9:c7:45:5e:17:43:d2:74:49:cd:1b:
                    f0:c8:3b:f5:5e:d5:ac:bf:a6:14:8a:0a:93:b4:81:
                    8e:32:3e:fb:51:f1:b1:c4:a1:4f:0e:ff:08:93:a9:
                    02:cd:88:2e:a3:ee:2d:cb:96:d4:90:11:50:f3:84:
                    95:bd:55:36:08:af:88:35:f3:5c:29:8d:1d:5a:b7:
                    8e:9a:d8:0f:02:0d:24:8d:26:a5:e9:aa:aa:c4:d1:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:23:BF:29:D9:AD:BA:AB:CC:54:13:0A:C5:B3:56:C3:26:EC:BF:F6
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4A71D7E08DB811E98ACC9F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.155.156.0/24
                IPv6:
                  2405:a000:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:61:cb:e6:c2:98:98:d5:2e:cf:70:08:9c:82:94:ee:a4:7e:
         5b:6f:49:4d:91:c5:46:e4:d7:59:7d:d1:af:a1:de:ae:36:04:
         09:5f:70:84:e3:64:b7:73:96:8e:41:83:76:99:5c:53:7a:0b:
         07:52:11:ca:65:27:94:06:5b:3e:29:70:f8:36:76:f6:6e:56:
         ef:c7:9a:7b:e0:3c:74:ae:74:30:74:54:81:79:cf:14:01:07:
         f5:5e:c2:b3:95:c4:e3:c0:1c:1e:5c:51:4a:f3:09:71:7e:3b:
         ce:00:5f:da:27:fc:74:63:ad:ae:0e:45:e4:81:0b:f9:6a:46:
         80:c5:7f:10:aa:bd:96:a0:45:6a:14:56:84:9b:39:b7:c2:51:
         65:1e:38:18:a7:34:f8:3b:7d:49:42:ac:6d:16:50:91:40:70:
         36:64:79:9b:ed:24:a3:81:31:44:5f:71:d8:2f:e5:3a:14:f8:
         61:fa:16:35:12:1f:a4:98:5c:58:81:b4:d7:94:07:95:91:7f:
         03:60:5a:98:72:6f:d9:5d:19:f1:38:44:39:16:5b:ef:42:1a:
         e8:22:1f:5d:48:bc:5b:97:04:dd:38:98:54:e1:65:ab:f0:0c:
         26:a8:a4:b1:24:04:27:40:d6:6b:af:69:ad:5d:ae:1c:54:3b:
         aa:33:51:c6
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICNwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjYwNzMwMTUxMTMzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiNjlhNS00M2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDQsmkiT+OM1ak2ioT4eSeqf4nWOIaOEkuYSfOKsU9Fy4q3VOmnw+ihkEm1U
QqE7oMj6qK0cn3Sr8UkXUQmAd20xhAmt/+8375Yc/IE2ad+ss421yoZiR+qneZA2
UP8ZOdBK9F7frToFMRpmbUA7+6Kra2nhkk0uMCO8FeNLKfr2eOI7Di0FL+FiIlf2
bMSbiUOJlYMgZVZYLqw9Ba523An8RBe9iYr6qcdFXhdD0nRJzRvwyDv1XtWsv6YU
igqTtIGOMj77UfGxxKFPDv8Ik6kCzYguo+4ty5bUkBFQ84SVvVU2CK+INfNcKY0d
WreOmtgPAg0kjSal6aqqxNF+AQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL0jvynZ
rbqrzFQTCsWzVsMm7L/2MB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNEE3MUQ3RTA4
REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAy5ucMA8EAgACMAkDBwAkBaAAABMwDQYJKoZIhvcNAQELBQADggEB
AHxhy+bCmJjVLs9wCJyClO6kfltvSU2RxUbk11l90a+h3q42BAlfcITjZLdzlo5B
g3aZXFN6CwdSEcplJ5QGWz4pcPg2dvZuVu/HmnvgPHSudDB0VIF5zxQBB/VewrOV
xOPAHB5cUUrzCXF+O84AX9on/HRjra4OReSBC/lqRoDFfxCqvZagRWoUVoSbObfC
UWUeOBinNPg7fUlCrG0WUJFAcDZkeZvtJKOBMURfcdgv5ToU+GH6FjUSH6SYXFiB
tNeUB5WRfwNgWphyb9ldGfE4RDkWW+9CGugiH11IvFuXBN04mFThZavwDCaopLEk
BCdA1muvaa1drhxUO6ozUcY=
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:49:47 2026 by rpki-client