Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/A2842DA6E07D11F0A337A81D3B6F56BC.roa
File:                     A2842DA6E07D11F0A337A81D3B6F56BC.roa (raw, json)
Hash identifier:          lQCG5bO2hXXa8ahGpDK/D/U+xuREtg7HYAlsXRNTx/o=
Subject key identifier:   57:03:8C:2A:B3:63:A5:2E:62:2F:5E:96:AB:51:43:01:D0:41:A5:D8
Certificate issuer:       /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial:       2C4F
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/A2842DA6E07D11F0A337A81D3B6F56BC.roa
Signing time:             Fri 31 Jul 2026 16:22:38 +0000
ROA not before:           Fri 31 Jul 2026 16:22:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136816
IP address blocks:        138.252.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 15:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11343 (0x2c4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Validity
            Not Before: Jul 31 16:22:38 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6ccbce-530a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:58:ab:09:d2:95:65:ce:9e:c1:15:a3:2c:
                    d9:7e:79:8a:cc:53:5f:26:8a:19:46:4b:99:89:32:
                    ee:79:ca:11:86:a7:bb:33:0c:8b:59:50:51:ea:26:
                    84:ee:5a:ff:00:1a:a2:d3:66:b6:2a:6d:c5:4b:61:
                    34:12:f2:a8:a1:68:ad:99:a6:e5:d0:ab:ef:7f:bb:
                    db:b7:04:30:92:03:ff:eb:80:4b:00:41:d9:84:87:
                    b4:26:01:02:68:f1:ca:30:e1:d4:b1:d3:c5:76:4f:
                    87:1d:25:df:de:84:5a:b6:55:0a:2e:32:a6:39:8b:
                    25:d4:52:b8:ac:a6:ec:38:af:67:6f:5c:fd:be:65:
                    23:f5:f3:7e:3a:30:75:87:23:2c:ff:52:4f:3f:f7:
                    bc:cf:51:a3:e4:ce:27:64:92:b5:a9:c7:6c:b7:f1:
                    75:a7:7e:bd:6d:c0:a3:c4:ff:76:7a:fd:45:ef:73:
                    35:24:dd:eb:2e:10:00:b3:a6:73:6c:ca:0c:46:ec:
                    04:13:e5:02:22:a3:ac:84:31:59:84:ea:39:fc:61:
                    54:8f:dc:4c:8d:c6:d7:8f:3a:27:35:82:e4:57:92:
                    0c:88:c4:7e:39:a5:f6:23:51:72:d9:f0:c6:db:64:
                    f2:13:70:e8:3a:3d:21:8d:7a:aa:5a:49:fa:eb:28:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:03:8C:2A:B3:63:A5:2E:62:2F:5E:96:AB:51:43:01:D0:41:A5:D8
            X509v3 Authority Key Identifier:
                keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/A2842DA6E07D11F0A337A81D3B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:d4:26:f4:ca:8d:97:ea:97:bb:c0:13:9f:df:ee:9f:bb:fe:
         fe:0d:fe:9a:ee:d8:3c:7b:a4:64:75:74:87:7f:24:38:b7:2c:
         93:7c:b0:48:7a:16:5c:cb:21:e0:82:4e:ae:1a:57:5e:e9:b3:
         6e:c6:0f:65:47:bc:35:09:87:e6:12:21:16:25:dd:e3:74:8f:
         c2:b0:15:e1:04:ed:34:50:2e:fa:0c:fb:ee:21:8d:12:e2:83:
         17:3c:97:5b:fb:25:bb:e1:d2:b2:b3:6a:fe:24:4e:a9:15:42:
         57:e6:16:a3:78:74:53:00:33:71:c7:45:da:c1:3c:cc:cf:b2:
         ed:ef:56:c1:b7:f2:83:36:5a:ba:f9:e2:08:c6:6f:ca:c6:cb:
         da:32:35:42:76:19:4b:18:dd:7f:13:20:47:8c:ed:83:34:ec:
         7e:f4:73:2a:69:d9:1a:89:5a:a3:86:56:09:76:77:f8:1a:c7:
         fa:0c:f8:5e:4c:67:7c:75:0e:5b:28:27:df:44:2b:5c:8a:5d:
         fc:c0:1c:c3:4d:07:f1:df:38:dc:d1:fd:15:15:aa:7e:bd:19:
         27:c5:89:d2:63:b7:e1:4a:a2:c8:55:b8:62:af:00:10:1f:18:
         be:f6:65:c2:17:f8:ed:94:9b:bd:14:93:bd:d5:f6:ab:9b:83:
         9f:cf:d4:48
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2
MUY4MkE5NTcwHhcNMjYwNzMxMTYyMjM4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZjY2JjZS01MzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkNRYqwnSlWXOnsEVoyzZfnmKzFNfJooZRkuZiTLuecoRhqe7MwyLWVBR6iaE
7lr/ABqi02a2Km3FS2E0EvKooWitmabl0Kvvf7vbtwQwkgP/64BLAEHZhIe0JgEC
aPHKMOHUsdPFdk+HHSXf3oRatlUKLjKmOYsl1FK4rKbsOK9nb1z9vmUj9fN+OjB1
hyMs/1JPP/e8z1Gj5M4nZJK1qcdst/F1p369bcCjxP92ev1F73M1JN3rLhAAs6Zz
bMoMRuwEE+UCIqOshDFZhOo5/GFUj9xMjcbXjzonNYLkV5IMiMR+OaX2I1Fy2fDG
22TyE3DoOj0hjXqqWkn66yhQhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFcDjCqz
Y6UuYi9elqtRQwHQQaXYMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQjdGODE5NTgzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTI4NDJEQTZF
MDdEMTFGMEEzMzdBODFEM0I2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAivy3MA0GCSqGSIb3DQEBCwUAA4IBAQBZ1Cb0yo2X6pe7wBOf3+6f
u/7+Df6a7tg8e6RkdXSHfyQ4tyyTfLBIehZcyyHggk6uGlde6bNuxg9lR7w1CYfm
EiEWJd3jdI/CsBXhBO00UC76DPvuIY0S4oMXPJdb+yW74dKys2r+JE6pFUJX5haj
eHRTADNxx0XawTzMz7Lt71bBt/KDNlq6+eIIxm/KxsvaMjVCdhlLGN1/EyBHjO2D
NOx+9HMqadkaiVqjhlYJdnf4Gsf6DPheTGd8dQ5bKCffRCtcil38wBzDTQfx3zjc
0f0VFap+vRknxYnSY7fhSqLIVbhirwAQHxi+9mXCF/jtlJu9FJO91farm4Ofz9RI
-----END CERTIFICATE-----
Generated at Sun Aug 2 21:41:58 2026 by rpki-client