Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa
File:                     E243CD9C227811F1B65A16B9A4833773.roa (raw, json)
Hash identifier:          yUigKe1dmxmlY5PK8ANeaQZIVKCiPZVhXoUmPCQH+IA=
Subject key identifier:   1E:2A:BA:52:1C:08:14:7B:78:4D:A0:BF:4E:EF:9C:D2:3C:CB:20:71
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       35FB
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa
Signing time:             Fri 02 Oct 2026 15:41:33 +0000
ROA not before:           Fri 02 Oct 2026 15:41:33 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     401783
IP address blocks:        101.0.21.0/24 maxlen: 24
                          101.0.22.0/24 maxlen: 24
                          101.0.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13819 (0x35fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Oct  2 15:41:33 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6abfd0ad-2c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:37:78:0a:58:40:33:0e:92:97:44:60:9c:
                    7f:83:8a:d8:45:e0:bd:3f:a8:b8:55:08:be:1f:2e:
                    ff:09:52:69:cd:d5:62:fe:57:74:47:5d:9d:f6:32:
                    c4:87:f8:ff:47:85:c5:62:b1:8c:c1:d1:94:9e:b4:
                    73:7d:6c:94:b0:11:82:19:df:b8:ff:43:87:22:8e:
                    e0:e8:ca:e5:30:b5:20:62:75:d6:39:04:d4:1c:62:
                    97:3e:17:9f:2b:a0:3f:54:35:11:75:af:0e:05:ae:
                    5e:db:12:e5:28:2e:da:68:59:92:b7:da:f3:97:84:
                    7e:48:dd:d7:a1:ed:bf:4e:66:b2:f2:05:b3:fa:9c:
                    bc:72:a5:c7:0d:79:e8:2f:79:7f:3c:ff:68:87:a1:
                    a0:e8:59:ec:52:b4:07:a5:82:0d:6f:fc:3c:87:20:
                    42:c0:f7:81:d9:d3:db:1c:e5:a5:6f:48:81:03:98:
                    67:55:2e:6d:f9:a6:d8:e1:a5:bc:5f:13:b5:c1:8c:
                    f4:35:88:d7:a0:a9:37:71:92:d7:d2:18:43:05:72:
                    a7:96:da:07:46:0a:3d:c2:1b:3f:22:ed:79:11:5f:
                    82:d2:22:a5:ba:a0:d9:4f:34:d8:84:d6:fd:a9:d0:
                    87:99:12:4e:b2:48:d8:6c:37:a1:1d:7f:11:64:52:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2A:BA:52:1C:08:14:7B:78:4D:A0:BF:4E:EF:9C:D2:3C:CB:20:71
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/E243CD9C227811F1B65A16B9A4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.21.0-101.0.23.255

    Signature Algorithm: sha256WithRSAEncryption
         03:fc:30:fe:95:0f:b0:d0:eb:26:86:99:c6:7b:2f:25:06:98:
         eb:ce:e2:ba:0f:cc:5f:0c:43:1b:07:85:65:f4:d1:bf:6c:3c:
         f8:68:c2:19:c7:c0:97:8c:a6:5f:fd:d3:5d:80:98:e9:2a:c7:
         84:ac:1d:3d:64:51:3b:a8:d2:f2:15:55:59:49:f8:dd:93:d4:
         2d:0b:de:17:6c:9d:74:17:a5:b2:4a:22:1a:04:e2:ca:f7:40:
         88:97:f7:e0:54:5b:b4:33:c8:f0:5a:55:36:8d:ff:c0:4e:a0:
         26:7c:f8:7c:d9:d5:51:51:02:ad:ad:95:71:05:38:22:8f:98:
         01:40:60:68:67:3d:db:65:35:25:df:b7:cc:8a:48:4f:c7:23:
         7b:c0:61:fb:fd:64:76:bb:23:10:45:36:b9:26:8e:fa:86:98:
         c8:ba:a7:d5:52:c1:1f:09:29:70:d6:5c:ae:ba:2a:6b:6d:9c:
         06:42:f2:8d:8d:11:cd:54:1f:79:21:62:26:81:a4:6c:6c:44:
         8f:c9:5e:a4:fa:88:ed:b3:f0:0f:b0:4e:19:c3:5e:83:37:19:
         e8:53:6b:ee:14:09:88:02:e7:46:d0:38:36:53:99:a0:80:eb:
         ea:bf:ac:74:5a:88:3a:12:30:19:5e:3d:de:89:14:45:c0:db:
         92:0c:69:51
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICNfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB
NUE4NTQ1MjEwHhcNMjYxMDAyMTU0MTMzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmZDBhZC0yYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmWI3eApYQDMOkpdEYJx/g4rYReC9P6i4VQi+Hy7/CVJpzdVi/ld0R12d9jLE
h/j/R4XFYrGMwdGUnrRzfWyUsBGCGd+4/0OHIo7g6MrlMLUgYnXWOQTUHGKXPhef
K6A/VDURda8OBa5e2xLlKC7aaFmSt9rzl4R+SN3Xoe2/Tmay8gWz+py8cqXHDXno
L3l/PP9oh6Gg6FnsUrQHpYINb/w8hyBCwPeB2dPbHOWlb0iBA5hnVS5t+abY4aW8
XxO1wYz0NYjXoKk3cZLX0hhDBXKnltoHRgo9whs/Iu15EV+C0iKluqDZTzTYhNb9
qdCHmRJOskjYbDehHX8RZFLaXwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFB4qulIc
CBR7eE2gv07vnNI8yyBxMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE
QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvRTI0M0NEOUMy
Mjc4MTFGMUI2NUExNkI5QTQ4MzM3NzMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABlABUDBANlABAwDQYJKoZIhvcNAQELBQADggEBAAP8MP6VD7DQ
6yaGmcZ7LyUGmOvO4roPzF8MQxsHhWX00b9sPPhowhnHwJeMpl/9012AmOkqx4Ss
HT1kUTuo0vIVVVlJ+N2T1C0L3hdsnXQXpbJKIhoE4sr3QIiX9+BUW7QzyPBaVTaN
/8BOoCZ8+HzZ1VFRAq2tlXEFOCKPmAFAYGhnPdtlNSXft8yKSE/HI3vAYfv9ZHa7
IxBFNrkmjvqGmMi6p9VSwR8JKXDWXK66KmttnAZC8o2NEc1UH3khYiaBpGxsRI/J
XqT6iO2z8A+wThnDXoM3GehTa+4UCYgC50bQODZTmaCA6+q/rHRaiDoSMBlePd6J
FEXA25IMaVE=
-----END CERTIFICATE-----
Generated at Sat Oct 10 03:12:08 2026 by rpki-client