Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/C6E76EEA8FCF11F1994D69236E11F970.roa
File:                     C6E76EEA8FCF11F1994D69236E11F970.roa (raw, json)
Hash identifier:          eR6LdGASZNunus79hsPIR+KLu/e01tVe2TG2ul1VWOI=
Subject key identifier:   BB:37:20:56:4C:22:E2:87:36:A9:5D:50:68:0C:23:D9:67:60:4F:B4
Certificate issuer:       /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF
Certificate serial:       29B9
Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/C6E76EEA8FCF11F1994D69236E11F970.roa
Signing time:             Tue 04 Aug 2026 06:43:18 +0000
ROA not before:           Tue 04 Aug 2026 06:43:18 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     132045
IP address blocks:        101.2.190.0/24 maxlen: 24
                          203.153.220.0/24 maxlen: 24
                          203.153.222.0/24 maxlen: 24
                          223.224.12.0/24 maxlen: 24
                          223.224.22.0/24 maxlen: 24
                          223.224.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl
                          rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10681 (0x29b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A447, serialNumber=1F68258C526C5DBC715434357D380020146440EF
        Validity
            Not Before: Aug  4 06:43:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a718a06-5d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c4:37:a1:49:89:57:e1:88:83:56:18:cf:8e:
                    95:da:61:2f:93:92:c4:6d:8d:8f:35:5d:38:9d:bd:
                    9c:b9:b9:2e:5e:2b:dc:05:29:f4:59:46:46:b4:39:
                    23:ab:59:1c:c0:e5:ea:ad:32:88:fe:6b:b1:05:f6:
                    3e:25:4c:dd:5c:b3:fd:a1:b2:3d:ac:da:04:b8:20:
                    f6:07:85:e5:11:59:df:f1:c4:80:33:78:4a:08:8f:
                    85:ca:48:5e:f1:57:8f:66:2c:18:c5:bf:fa:04:25:
                    4a:02:03:2e:28:08:88:cb:27:2c:c2:e2:fa:b0:82:
                    3d:a3:dd:d5:2f:a6:14:27:09:b6:01:15:c0:ea:9e:
                    aa:23:7a:a3:3c:69:6c:ac:fe:cf:4c:ef:5a:d3:52:
                    41:56:d2:74:c1:f1:72:89:e9:6d:81:25:35:62:3d:
                    09:aa:d9:95:b5:58:e6:59:cb:85:b6:a0:fe:b1:8e:
                    f3:4e:2f:0c:be:da:2a:c7:11:c7:5c:36:8c:cd:8a:
                    5c:a3:a3:87:1f:29:bb:48:e8:b8:75:37:15:22:69:
                    48:b0:6e:13:cc:81:35:32:b5:f3:be:ce:53:0d:da:
                    31:6c:32:b1:7c:2f:b6:22:9e:f8:00:5e:35:af:83:
                    2b:bd:94:cf:1a:39:34:96:65:30:83:ed:6d:3d:fc:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:37:20:56:4C:22:E2:87:36:A9:5D:50:68:0C:23:D9:67:60:4F:B4
            X509v3 Authority Key Identifier:
                keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/C6E76EEA8FCF11F1994D69236E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.2.190.0/24
                  203.153.220.0/24
                  203.153.222.0/24
                  223.224.12.0/24
                  223.224.22.0/24
                  223.224.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:5c:cd:83:0a:05:68:9d:42:d5:e5:63:db:27:dd:d0:18:
         5c:93:e1:4f:7f:33:bc:18:dc:be:78:58:d4:5c:0a:52:6f:a6:
         43:9f:64:c5:4f:79:29:73:6e:c2:95:d6:a4:ae:5c:80:96:c3:
         15:fa:98:54:94:ff:3b:43:af:5e:7d:1d:f1:5f:63:94:1f:eb:
         dd:c1:b2:af:f8:eb:5b:29:ae:9b:f6:04:95:79:dd:6c:2d:a0:
         a1:e4:fc:5c:2d:ff:94:62:44:8b:53:5f:05:2d:6d:46:26:63:
         10:75:c5:88:cc:57:0f:2a:8e:ac:a9:c3:05:56:64:7c:df:28:
         dd:e4:8e:72:f9:78:b3:da:e3:80:9b:21:f6:05:12:71:25:cf:
         cb:68:6e:8a:0c:91:31:45:ee:7a:12:d8:68:a0:d3:1c:b3:e3:
         e8:e6:40:20:e0:bf:15:df:21:f2:dd:1d:04:57:e4:d7:23:bd:
         f9:b0:93:f1:1d:2d:1f:1a:02:17:7b:0b:54:b2:c4:8b:66:50:
         0f:f1:f4:d2:af:41:c7:30:eb:41:b1:c5:5e:4b:9d:cd:3b:31:
         87:9c:3e:ab:72:8d:68:85:a2:61:e2:8b:6a:5d:39:6e:bc:2c:
         df:d8:8c:92:14:eb:76:64:60:14:42:d6:2e:ae:d8:bb:d0:c9:
         8d:56:f2:ec
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgICKbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw
MTQ2NDQwRUYwHhcNMjYwODA0MDY0MzE4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcxOGEwNi01ZDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3MQ3oUmJV+GIg1YYz46V2mEvk5LEbY2PNV04nb2cubkuXivcBSn0WUZGtDkj
q1kcwOXqrTKI/muxBfY+JUzdXLP9obI9rNoEuCD2B4XlEVnf8cSAM3hKCI+Fykhe
8VePZiwYxb/6BCVKAgMuKAiIyycswuL6sII9o93VL6YUJwm2ARXA6p6qI3qjPGls
rP7PTO9a01JBVtJ0wfFyieltgSU1Yj0JqtmVtVjmWcuFtqD+sY7zTi8MvtoqxxHH
XDaMzYpco6OHHym7SOi4dTcVImlIsG4TzIE1MrXzvs5TDdoxbDKxfC+2Ip74AF41
r4MrvZTPGjk0lmUwg+1tPfzvLwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLs3IFZM
IuKHNqldUGgMI9lnYE+0MB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw
OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR
TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkE0NDcvRDIwNzU4MTRBMDlDMTFFNEI1MEU3QjE1QzRGOUFFMDIvQzZFNzZFRUE4
RkNGMTFGMTk5NEQ2OTIzNkUxMUY5NzAucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq
BAIAATAkAwQAZQK+AwQAy5ncAwQAy5neAwQA3+AMAwQA3+AWAwQA3+AdMA0GCSqG
SIb3DQEBCwUAA4IBAQAr2lzNgwoFaJ1C1eVj2yfd0Bhck+FPfzO8GNy+eFjUXApS
b6ZDn2TFT3kpc27CldakrlyAlsMV+phUlP87Q69efR3xX2OUH+vdwbKv+OtbKa6b
9gSVed1sLaCh5PxcLf+UYkSLU18FLW1GJmMQdcWIzFcPKo6sqcMFVmR83yjd5I5y
+Xiz2uOAmyH2BRJxJc/LaG6KDJExRe56EthooNMcs+Po5kAg4L8V3yHy3R0EV+TX
I735sJPxHS0fGgIXewtUssSLZlAP8fTSr0HHMOtBscVeS53NOzGHnD6rco1ohaJh
4otqXTluvCzf2IySFOt2ZGAUQtYurti70MmNVvLs
-----END CERTIFICATE-----
Generated at Wed Aug 19 17:02:30 2026 by rpki-client