Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/8192DC9279D811F1ABEE2BAB62A30FBC.roa
File:                     8192DC9279D811F1ABEE2BAB62A30FBC.roa (raw, json)
Hash identifier:          lzRS46VNGCFR6mmK03gAm8rTcOnzGRW+6BC889P7ELo=
Subject key identifier:   4C:1C:38:0D:CA:91:8D:BC:A6:F9:76:C1:AB:79:8D:26:47:33:E8:74
Certificate issuer:       /CN=A91F5972/serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
Certificate serial:       066F
Authority key identifier: AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/8192DC9279D811F1ABEE2BAB62A30FBC.roa
Signing time:             Tue 07 Jul 2026 07:50:22 +0000
ROA not before:           Tue 07 Jul 2026 07:50:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     10031
IP address blocks:        202.170.72.0/24 maxlen: 24
                          202.170.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 07:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647 (0x66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5972, serialNumber=AF798743DAB647868AB66673AF7A136C2EA0EA5B
        Validity
            Not Before: Jul  7 07:50:22 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a4cafbe-4ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:38:74:49:5a:d1:b9:5d:1e:0a:d9:e7:d8:
                    ae:8f:67:4c:79:df:c4:18:55:76:2d:8b:5f:ad:b0:
                    61:dd:b2:9e:02:f5:4a:9e:3c:81:0d:71:42:46:12:
                    9e:d3:cc:95:b3:bf:39:4a:88:bb:d1:ed:5d:ea:13:
                    6f:9d:53:31:79:0c:80:bf:44:9d:45:35:be:81:6e:
                    ad:35:a8:3b:fe:94:de:7d:0c:23:54:f0:b4:28:fb:
                    90:f0:c9:69:d5:15:47:7f:1a:fc:bb:3f:63:f6:12:
                    34:9f:9d:fe:dc:18:ec:2b:49:1e:00:af:c3:9b:61:
                    81:e6:8a:46:3c:ed:55:b3:2e:ca:8a:81:e8:54:24:
                    24:de:2c:d1:bb:af:05:69:40:6a:96:c0:e8:ec:f1:
                    38:c8:a1:1c:e8:de:ef:27:91:7a:6c:9c:07:38:6a:
                    0e:c4:bb:10:a8:5a:35:40:04:be:6d:da:48:3c:ad:
                    ee:06:85:c6:ea:20:f0:69:f8:de:9d:b5:f3:e9:7b:
                    dc:5b:1e:08:46:f8:26:22:a5:63:16:14:bf:ea:4d:
                    de:f0:a2:d5:0b:09:99:7a:b2:e3:dc:15:1b:ba:2a:
                    02:ac:e1:73:11:b5:45:65:b1:35:03:73:91:39:35:
                    f5:e4:78:c0:20:88:2a:b6:14:af:1a:f5:91:3e:c1:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1C:38:0D:CA:91:8D:BC:A6:F9:76:C1:AB:79:8D:26:47:33:E8:74
            X509v3 Authority Key Identifier:
                keyid:AF:79:87:43:DA:B6:47:86:8A:B6:66:73:AF:7A:13:6C:2E:A0:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3mHQ9q2R4aKtmZzr3oTbC6g6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5972/9BF6C44EF03111EB95F76748C4F9AE02/8192DC9279D811F1ABEE2BAB62A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.170.72.0/24
                  202.170.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:2f:58:d7:ea:17:e7:b8:e4:1c:24:a6:c9:8b:bf:53:33:14:
         bd:7b:b3:79:e5:2a:b1:b4:b1:08:16:cc:90:5e:66:e9:23:ca:
         c2:df:98:7a:4a:b4:67:36:99:c2:ed:76:ce:44:59:c6:a8:13:
         d2:ec:d3:be:6b:e1:78:e7:f5:08:49:e2:b3:88:e7:e6:21:10:
         e7:62:c7:95:ca:c8:ef:cf:a5:09:b2:69:6f:d0:9c:b4:9c:83:
         3a:d1:6a:d8:74:e6:e8:24:e6:15:e4:51:a6:f0:e6:4b:62:64:
         99:9b:47:d8:87:0e:27:38:7d:cc:24:9c:ca:80:81:3a:bb:5a:
         26:35:21:8e:a4:c5:67:2c:95:21:a0:0c:9a:0c:7c:92:73:48:
         4b:d2:0b:9b:b9:e5:38:35:ae:6f:03:c4:60:d0:03:7f:76:06:
         a0:00:49:c2:11:84:87:49:ba:05:ce:27:c1:9d:92:1a:57:6b:
         67:44:75:28:ea:d4:3b:75:b4:c9:7a:17:80:82:12:d1:eb:26:
         a0:6e:ce:2a:f5:1c:44:71:20:4d:c5:e2:9d:57:9f:73:24:12:
         9b:32:2a:74:4d:ee:46:58:c4:e8:5e:ce:cc:fd:34:84:ef:19:
         12:e1:db:42:99:7b:c0:02:6b:01:97:bd:35:7f:6a:8c:c9:a9:
         d8:66:33:a6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5NzIxMTAvBgNVBAUTKEFGNzk4NzQzREFCNjQ3ODY4QUI2NjY3M0FGN0ExMzZD
MkVBMEVBNUIwHhcNMjYwNzA3MDc1MDIyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjYWZiZS00Y2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxw04dEla0bldHgrZ59iuj2dMed/EGFV2LYtfrbBh3bKeAvVKnjyBDXFCRhKe
08yVs785Soi70e1d6hNvnVMxeQyAv0SdRTW+gW6tNag7/pTefQwjVPC0KPuQ8Mlp
1RVHfxr8uz9j9hI0n53+3BjsK0keAK/Dm2GB5opGPO1Vsy7KioHoVCQk3izRu68F
aUBqlsDo7PE4yKEc6N7vJ5F6bJwHOGoOxLsQqFo1QAS+bdpIPK3uBoXG6iDwafje
nbXz6XvcWx4IRvgmIqVjFhS/6k3e8KLVCwmZerLj3BUbuioCrOFzEbVFZbE1A3OR
OTX15HjAIIgqthSvGvWRPsHbbQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEwcOA3K
kY28pvl2wat5jSZHM+h0MB8GA1UdIwQYMBaAFK95h0PatkeGirZmc696E2wuoOpb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTk3Mi85QkY2QzQ0RUYw
MzExMUVCOTVGNzY3NDhDNEY5QUUwMi9yM21IUTlxMlI0YUt0bVp6cjNvVGJDNmc2
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IzbUhROXEyUjRhS3RtWnpyM29UYkM2ZzZscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU5NzIvOUJGNkM0NEVGMDMxMTFFQjk1Rjc2NzQ4QzRGOUFFMDIvODE5MkRDOTI3
OUQ4MTFGMUFCRUUyQkFCNjJBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAyqpIAwQAyqpMMA0GCSqGSIb3DQEBCwUAA4IBAQAPL1jX6hfnuOQc
JKbJi79TMxS9e7N55SqxtLEIFsyQXmbpI8rC35h6SrRnNpnC7XbORFnGqBPS7NO+
a+F45/UISeKziOfmIRDnYseVysjvz6UJsmlv0Jy0nIM60WrYdOboJOYV5FGm8OZL
YmSZm0fYhw4nOH3MJJzKgIE6u1omNSGOpMVnLJUhoAyaDHySc0hL0gubueU4Na5v
A8Rg0AN/dgagAEnCEYSHSboFzifBnZIaV2tnRHUo6tQ7dbTJeheAghLR6yagbs4q
9RxEcSBNxeKdV59zJBKbMip0Te5GWMToXs7M/TSE7xkS4dtCmXvAAmsBl701f2qM
yanYZjOm
-----END CERTIFICATE-----
Generated at Wed Jul 8 06:29:11 2026 by rpki-client