Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/D53D5082734F11F1A0D3C3585CA30FBC.roa
File:                     D53D5082734F11F1A0D3C3585CA30FBC.roa (raw, json)
Hash identifier:          aHBK07RgGYjTbXTQK7kUe4OH996ijV7bylVi2HCpbpE=
Subject key identifier:   E5:52:FC:D0:5E:7D:7C:2B:B0:25:EA:14:60:1A:05:FF:49:EA:D3:AD
Certificate issuer:       /CN=A91A4DBF/serialNumber=0CA3162124EE64629643FF29EB311072D9128533
Certificate serial:       BC
Authority key identifier: 0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/D53D5082734F11F1A0D3C3585CA30FBC.roa
Signing time:             Thu 09 Jul 2026 12:20:57 +0000
ROA not before:           Thu 09 Jul 2026 12:20:57 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135682
IP address blocks:        203.174.22.0/23 maxlen: 23
                          203.174.22.0/24 maxlen: 24
                          203.174.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl
                          rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4DBF, serialNumber=0CA3162124EE64629643FF29EB311072D9128533
        Validity
            Not Before: Jul  9 12:20:57 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a4f9229-43fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:2f:90:b1:de:fb:35:1f:9c:7a:6c:e2:cb:
                    e5:71:3c:0d:a2:10:08:1a:af:1a:81:a2:55:69:9e:
                    ed:c0:3c:8b:8d:f6:9a:a9:b1:7d:f4:6b:77:60:76:
                    49:95:9e:42:7c:62:94:9f:46:8c:94:e4:da:cc:52:
                    1d:b5:9f:4a:4d:26:50:05:b8:25:b6:45:7d:de:7e:
                    10:5f:4c:fd:2e:a6:ef:e6:f1:84:4e:13:cd:d5:67:
                    18:97:c7:7a:11:3d:9b:78:a9:a1:da:79:99:64:ad:
                    85:c5:74:48:1b:1a:bd:df:c8:d1:f3:3f:26:4b:fa:
                    c6:a0:fa:2b:99:1e:e2:f5:d3:3c:e8:25:ef:1d:0f:
                    fe:8e:f2:fc:59:4c:ae:3e:48:6f:f2:32:69:db:bf:
                    5d:c5:b3:07:06:c2:2c:1d:f9:cc:8f:ad:42:65:7a:
                    18:68:72:0a:62:4e:2e:a4:11:11:a8:20:94:27:e0:
                    b0:6c:6e:37:7b:1d:4a:ad:c9:c9:79:77:03:6f:58:
                    e7:33:4f:f8:2f:1c:8a:43:84:bf:39:67:4f:c4:5d:
                    92:46:95:5a:a9:c2:8f:38:95:49:46:db:57:6e:4c:
                    e9:3c:3d:ca:87:32:58:55:9c:09:41:c4:7d:96:56:
                    ee:03:19:07:2b:79:1e:43:c6:e2:c5:b0:a8:92:4b:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:52:FC:D0:5E:7D:7C:2B:B0:25:EA:14:60:1A:05:FF:49:EA:D3:AD
            X509v3 Authority Key Identifier:
                keyid:0C:A3:16:21:24:EE:64:62:96:43:FF:29:EB:31:10:72:D9:12:85:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/DKMWISTuZGKWQ_8p6zEQctkShTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKMWISTuZGKWQ_8p6zEQctkShTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DBF/C1456050844011F0A570BC49C4F9AE02/D53D5082734F11F1A0D3C3585CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:ea:a8:88:0e:4f:03:2f:a8:9c:09:a1:e9:40:ec:27:50:68:
         9b:92:12:96:26:af:67:45:5e:a1:98:3a:c8:0f:81:c4:f1:6c:
         bc:22:71:d5:b0:d6:3c:4b:d8:a2:e4:48:ce:62:d5:34:57:9e:
         9a:32:4d:73:60:8b:af:e0:1a:de:81:08:66:a8:19:86:cd:8f:
         45:15:a4:85:ad:2c:4c:cd:9f:d4:4c:fa:b5:55:09:86:75:bd:
         93:d8:03:28:95:8f:f3:f5:93:37:2b:ec:ef:3c:a1:aa:b3:08:
         5c:25:34:5a:68:8f:46:1a:df:53:b9:ff:1c:98:59:9b:fc:17:
         e1:89:54:c7:f4:47:54:29:d8:e9:b5:b8:b2:05:fc:53:96:2d:
         b3:9e:c7:ca:b9:43:2b:a8:3a:22:f5:b6:da:30:10:79:64:05:
         d7:70:1b:7f:b0:ab:fe:f7:92:ed:0f:12:ad:0b:92:c4:3e:27:
         a0:b8:82:9e:59:f1:18:a0:45:bc:39:d5:88:18:f1:e2:fc:0a:
         1f:34:36:f6:c5:0a:15:f3:83:df:f7:7e:e7:e9:d4:25:16:5a:
         14:cf:13:11:6f:de:0b:dd:8d:40:83:16:5b:a8:37:75:af:d5:
         8c:73:6d:00:05:91:9f:65:f5:dc:6d:ad:94:0d:4e:4b:f6:d1:
         a4:bc:6d:10
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTREQkYxMTAvBgNVBAUTKDBDQTMxNjIxMjRFRTY0NjI5NjQzRkYyOUVCMzExMDcy
RDkxMjg1MzMwHhcNMjYwNzA5MTIyMDU3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmOTIyOS00M2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZsvkLHe+zUfnHps4svlcTwNohAIGq8agaJVaZ7twDyLjfaaqbF99Gt3YHZJ
lZ5CfGKUn0aMlOTazFIdtZ9KTSZQBbgltkV93n4QX0z9Lqbv5vGEThPN1WcYl8d6
ET2beKmh2nmZZK2FxXRIGxq938jR8z8mS/rGoPormR7i9dM86CXvHQ/+jvL8WUyu
Pkhv8jJp279dxbMHBsIsHfnMj61CZXoYaHIKYk4upBERqCCUJ+CwbG43ex1KrcnJ
eXcDb1jnM0/4LxyKQ4S/OWdPxF2SRpVaqcKPOJVJRttXbkzpPD3KhzJYVZwJQcR9
llbuAxkHK3keQ8bixbCokkt/GQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOVS/NBe
fXwrsCXqFGAaBf9J6tOtMB8GA1UdIwQYMBaAFAyjFiEk7mRilkP/KesxEHLZEoUz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERCRi9DMTQ1NjA1MDg0
NDAxMUYwQTU3MEJDNDlDNEY5QUUwMi9ES01XSVNUdVpHS1dRXzhwNnpFUWN0a1No
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RLTVdJU1R1WkdLV1FfOHA2ekVRY3RrU2hUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTREQkYvQzE0NTYwNTA4NDQwMTFGMEE1NzBCQzQ5QzRGOUFFMDIvRDUzRDUwODI3
MzRGMTFGMUEwRDNDMzU4NUNBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBy64WMA0GCSqGSIb3DQEBCwUAA4IBAQB06qiIDk8DL6icCaHpQOwn
UGibkhKWJq9nRV6hmDrID4HE8Wy8InHVsNY8S9ii5EjOYtU0V56aMk1zYIuv4Bre
gQhmqBmGzY9FFaSFrSxMzZ/UTPq1VQmGdb2T2AMolY/z9ZM3K+zvPKGqswhcJTRa
aI9GGt9Tuf8cmFmb/BfhiVTH9EdUKdjptbiyBfxTli2znsfKuUMrqDoi9bbaMBB5
ZAXXcBt/sKv+95LtDxKtC5LEPieguIKeWfEYoEW8OdWIGPHi/AofNDb2xQoV84Pf
937n6dQlFloUzxMRb94L3Y1AgxZbqDd1r9WMc20ABZGfZfXcba2UDU5L9tGkvG0Q
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:33 2026 by rpki-client