Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/F407EC687A8711F18A4B7A2898A30FBC.roa
File:                     F407EC687A8711F18A4B7A2898A30FBC.roa (raw, json)
Hash identifier:          dbJOtySmHlCrVLnA91Fl15rpXoiwAXBjnY/J/x5tB+0=
Subject key identifier:   66:40:76:16:CB:08:B8:30:AA:5E:8A:3F:43:94:B6:2D:C6:A1:25:68
Certificate issuer:       /CN=A918B2BC/serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
Certificate serial:       02
Authority key identifier: E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/F407EC687A8711F18A4B7A2898A30FBC.roa
Signing time:             Wed 08 Jul 2026 04:46:16 +0000
ROA not before:           Wed 08 Jul 2026 04:46:16 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136441
IP address blocks:        162.4.210.0/24 maxlen: 24
                          162.4.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.crl
                          rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B2BC, serialNumber=E20A06B985613FDA1A6AE8C767BA4B8D7F72405B
        Validity
            Not Before: Jul  8 04:46:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4dd618-b910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:7c:86:b4:2b:7d:d6:50:b1:d3:2b:3c:de:
                    83:d1:f0:bb:cd:ed:53:70:ca:12:72:fc:ab:79:59:
                    f5:13:e6:b4:1d:52:37:17:79:90:2d:1d:e7:d5:94:
                    c2:80:df:c0:e9:8e:c5:7b:af:38:87:db:7f:64:86:
                    f9:72:aa:1b:de:60:07:82:11:b2:42:ee:08:12:cf:
                    11:24:e8:38:cb:56:49:85:34:e2:f2:27:a6:50:3a:
                    aa:61:48:1b:cf:e3:36:5e:e7:fa:f5:c2:2a:6d:42:
                    63:99:18:2e:27:79:fc:fb:f1:89:71:7f:55:b2:0e:
                    bf:c4:c1:b4:9b:9e:82:b6:48:1d:62:44:65:62:6f:
                    81:4e:bd:4d:ce:48:36:e1:b1:d8:b6:ef:08:fc:aa:
                    ef:60:0e:83:21:82:ad:68:86:1d:87:d2:e8:96:57:
                    84:09:fd:5f:3f:3c:60:c7:06:de:ba:c9:3b:f4:fd:
                    37:1b:46:40:d8:41:85:ab:f3:44:73:a0:f1:bb:4b:
                    36:f4:9c:4a:69:82:ad:84:ef:81:3c:ce:88:fc:46:
                    27:c0:5c:95:73:c4:76:1e:e3:3f:96:78:e0:25:88:
                    40:21:75:0c:10:0c:7a:8a:d5:0b:53:9c:af:b2:a1:
                    9b:b2:ff:22:54:51:76:11:a3:28:53:01:f8:22:a3:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:40:76:16:CB:08:B8:30:AA:5E:8A:3F:43:94:B6:2D:C6:A1:25:68
            X509v3 Authority Key Identifier:
                keyid:E2:0A:06:B9:85:61:3F:DA:1A:6A:E8:C7:67:BA:4B:8D:7F:72:40:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/4goGuYVhP9oaaujHZ7pLjX9yQFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4goGuYVhP9oaaujHZ7pLjX9yQFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2BC/F089B9F07A8611F1ABF6630798A30FBC/F407EC687A8711F18A4B7A2898A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:8b:69:a9:2d:d4:e3:50:35:f9:2c:32:96:38:92:74:e9:16:
         5e:3f:00:7a:78:1b:99:7d:ec:d3:d3:e3:43:79:b4:24:16:db:
         af:6f:40:77:67:31:34:ab:2f:2a:92:50:a8:1c:3b:5c:85:6e:
         d7:0a:6b:24:7c:c1:21:d5:dd:5b:ea:a8:db:65:ae:de:ef:b9:
         87:d2:16:ff:00:e8:42:2e:31:06:12:bc:72:82:cd:0c:46:89:
         e2:e1:a6:59:b4:b4:ac:a2:07:a7:4a:f5:25:b0:27:6c:cf:48:
         97:39:17:7e:fa:24:69:4e:ad:48:ab:d0:38:cb:35:73:05:e1:
         98:f0:fa:c8:9e:bc:e4:fc:8b:59:95:38:73:12:a2:d2:78:45:
         47:9e:4f:f8:09:22:0d:48:66:7c:b2:77:35:57:16:7f:28:16:
         7d:1f:2d:8a:b8:53:4e:e5:d8:17:26:a7:12:80:a5:9a:69:7e:
         d6:ac:3c:7c:df:74:fe:e8:e1:6b:bb:dd:2d:3d:bf:10:79:e0:
         a5:e9:de:14:d1:36:78:e1:f5:5a:d3:c5:7a:22:9c:f5:1c:c3:
         9c:ab:b0:da:da:ff:4f:7e:fa:44:f9:cb:12:81:fa:27:9d:f2:
         52:95:9e:c8:1c:2b:2d:7c:ad:d8:81:e8:09:c1:c8:31:5e:c4:
         75:65:83:0a
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QjJCQzExMC8GA1UEBRMoRTIwQTA2Qjk4NTYxM0ZEQTFBNkFFOEM3NjdCQTRCOEQ3
RjcyNDA1QjAeFw0yNjA3MDgwNDQ2MTZaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNGRkNjE4LWI5MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdFXyGtCt91lCx0ys83oPR8LvN7VNwyhJy/Kt5WfUT5rQdUjcXeZAtHefVlMKA
38DpjsV7rziH239khvlyqhveYAeCEbJC7ggSzxEk6DjLVkmFNOLyJ6ZQOqphSBvP
4zZe5/r1wiptQmOZGC4nefz78Ylxf1WyDr/EwbSbnoK2SB1iRGVib4FOvU3OSDbh
sdi27wj8qu9gDoMhgq1ohh2H0uiWV4QJ/V8/PGDHBt66yTv0/TcbRkDYQYWr80Rz
oPG7Szb0nEppgq2E74E8zoj8RifAXJVzxHYe4z+WeOAliEAhdQwQDHqK1QtTnK+y
oZuy/yJUUXYRoyhTAfgioyUrAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUZkB2FssI
uDCqXoo/Q5S2LcahJWgwHwYDVR0jBBgwFoAU4goGuYVhP9oaaujHZ7pLjX9yQFsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCMkJDL0YwODlCOUYwN0E4
NjExRjFBQkY2NjMwNzk4QTMwRkJDLzRnb0d1WVZoUDlvYWF1akhaN3BMalg5eVFG
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNGdvR3VZVmhQOW9hYXVqSFo3cExqWDl5UUZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjJCQy9GMDg5QjlGMDdBODYxMUYxQUJGNjYzMDc5OEEzMEZCQy9GNDA3RUM2ODdB
ODcxMUYxOEE0QjdBMjg5OEEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGiBNIwDQYJKoZIhvcNAQELBQADggEBAC6Laakt1ONQNfksMpY4knTp
Fl4/AHp4G5l97NPT40N5tCQW269vQHdnMTSrLyqSUKgcO1yFbtcKayR8wSHV3Vvq
qNtlrt7vuYfSFv8A6EIuMQYSvHKCzQxGieLhplm0tKyiB6dK9SWwJ2zPSJc5F376
JGlOrUir0DjLNXMF4Zjw+sievOT8i1mVOHMSotJ4RUeeT/gJIg1IZnyydzVXFn8o
Fn0fLYq4U07l2BcmpxKApZppftasPHzfdP7o4Wu73S09vxB54KXp3hTRNnjh9VrT
xXoinPUcw5yrsNra/09++kT5yxKB+ied8lKVnsgcKy18rdiB6AnByDFexHVlgwo=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:05 2026 by rpki-client