Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/7D7B467CE06011EDBB10FD53C4F9AE02.roa
File:                     7D7B467CE06011EDBB10FD53C4F9AE02.roa (raw, json)
Hash identifier:          tFjfeFvirq4K21vPq+LIVuacIhGqj3/ek6525SEORBM=
Subject key identifier:   28:D6:FE:F9:DE:8E:AD:97:33:70:6A:23:A6:01:59:AC:EB:3A:B6:0D
Certificate issuer:       /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124
Certificate serial:       081B
Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/7D7B467CE06011EDBB10FD53C4F9AE02.roa
Signing time:             Tue 02 Jun 2026 21:25:37 +0000
ROA not before:           Tue 02 Jun 2026 21:25:37 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45250
IP address blocks:        114.199.64.0/24 maxlen: 24
                          114.199.66.0/24 maxlen: 24
                          114.199.72.0/24 maxlen: 24
                          114.199.76.0/24 maxlen: 24
                          114.199.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl
                          rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124
        Validity
            Not Before: Jun  2 21:25:37 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1f4a50-b65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:ba:5f:63:d8:1b:b7:f7:73:4d:3d:e9:d7:
                    47:30:88:1e:bb:7c:f1:f5:56:8f:85:56:51:de:b8:
                    47:0a:b7:41:5e:02:f9:c3:80:8a:7e:69:b3:3a:40:
                    21:2f:ec:68:fd:fa:77:15:90:73:b2:38:76:09:39:
                    8f:0c:4f:26:a2:40:6b:64:5d:0f:ec:df:06:d2:a7:
                    10:86:70:e9:19:46:aa:68:cd:02:f8:26:c1:ac:c6:
                    b7:9c:42:75:34:57:8f:ec:37:c1:1d:64:98:cf:61:
                    e1:0b:e1:49:f0:65:8c:ab:20:f3:1d:ea:a2:ed:49:
                    3c:67:52:92:f6:af:37:43:68:c7:89:9f:93:6a:ef:
                    5a:79:da:2b:2a:30:26:e7:7e:96:24:59:5f:ed:27:
                    5f:69:d8:28:3a:2c:54:ac:06:a9:ef:68:31:ca:aa:
                    4a:37:15:9d:94:81:6f:07:98:c6:d8:7e:46:b6:8e:
                    8b:de:c8:07:d4:1d:96:cd:dd:1f:ae:6d:82:72:e9:
                    27:2a:c9:03:0f:53:16:c3:85:b7:5b:73:48:bc:ba:
                    8a:66:a5:45:de:e2:08:07:ad:9a:80:dc:13:c1:4f:
                    42:38:3b:32:fb:f7:b2:56:92:05:3e:95:97:37:61:
                    92:ee:9b:29:80:ba:38:c5:fa:ac:15:5d:4a:b4:c4:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D6:FE:F9:DE:8E:AD:97:33:70:6A:23:A6:01:59:AC:EB:3A:B6:0D
            X509v3 Authority Key Identifier:
                keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/7D7B467CE06011EDBB10FD53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.199.64.0/24
                  114.199.66.0/24
                  114.199.72.0/24
                  114.199.76.0/24
                  114.199.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:fb:ed:e0:ca:71:1c:10:e0:80:56:38:62:b6:17:12:1f:38:
         4e:9f:87:52:00:86:be:bd:bd:4b:9d:98:b6:30:73:a7:75:13:
         df:3e:52:18:a0:d2:4f:71:a4:ad:c1:66:bc:16:46:9c:cd:10:
         5e:34:18:46:67:99:2a:a3:a2:c3:6d:43:94:14:1d:77:90:1f:
         2d:b9:ad:0d:6c:4f:59:a7:2d:02:b6:11:41:16:9c:25:25:df:
         0e:e1:75:70:95:48:0a:6d:18:ed:a4:57:3c:67:34:49:6c:9a:
         3a:f1:aa:e4:14:92:fe:27:c1:8f:f2:4d:72:a4:89:28:03:68:
         69:60:fd:ff:69:db:e5:2c:fd:8f:7b:d7:6a:09:e0:57:79:4e:
         a7:e3:16:90:a1:d6:ad:18:55:8f:40:13:86:10:13:81:92:dc:
         54:59:42:3a:45:82:1c:b0:df:f7:ee:99:d9:42:16:b2:95:db:
         69:a1:b1:3e:34:6f:7b:6f:e9:ab:c0:b3:c9:c6:64:76:55:dc:
         04:23:aa:97:06:a9:00:55:71:4f:e0:b5:8d:a4:36:ac:43:c7:
         ae:d0:6c:40:4a:ad:05:83:b5:42:cf:f3:b1:a9:48:85:cb:89:
         2a:d1:79:af:86:f4:39:b2:10:10:a9:9c:7c:93:96:32:9b:94:
         39:6c:5c:c0
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1
NzRFOTExMjQwHhcNMjYwNjAyMjEyNTM3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFmNGE1MC1iNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Xm6X2PYG7f3c0096ddHMIgeu3zx9VaPhVZR3rhHCrdBXgL5w4CKfmmzOkAh
L+xo/fp3FZBzsjh2CTmPDE8mokBrZF0P7N8G0qcQhnDpGUaqaM0C+CbBrMa3nEJ1
NFeP7DfBHWSYz2HhC+FJ8GWMqyDzHeqi7Uk8Z1KS9q83Q2jHiZ+Tau9aedorKjAm
536WJFlf7SdfadgoOixUrAap72gxyqpKNxWdlIFvB5jG2H5Gto6L3sgH1B2Wzd0f
rm2CcuknKskDD1MWw4W3W3NIvLqKZqVF3uIIB62agNwTwU9CODsy+/eyVpIFPpWX
N2GS7pspgLo4xfqsFV1KtMQ2LwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFCjW/vne
jq2XM3BqI6YBWazrOrYNMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4
OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjA5NkMvMUQzMUMxODQyODkyMTFFQkFDOENDRTEzQzRGOUFFMDIvN0Q3QjQ2N0NF
MDYwMTFFREJCMTBGRDUzQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk
BAIAATAeAwQAcsdAAwQAcsdCAwQAcsdIAwQAcsdMAwQAcsdPMA0GCSqGSIb3DQEB
CwUAA4IBAQBn++3gynEcEOCAVjhithcSHzhOn4dSAIa+vb1LnZi2MHOndRPfPlIY
oNJPcaStwWa8FkaczRBeNBhGZ5kqo6LDbUOUFB13kB8tua0NbE9Zpy0CthFBFpwl
Jd8O4XVwlUgKbRjtpFc8ZzRJbJo68arkFJL+J8GP8k1ypIkoA2hpYP3/advlLP2P
e9dqCeBXeU6n4xaQodatGFWPQBOGEBOBktxUWUI6RYIcsN/37pnZQhayldtpobE+
NG97b+mrwLPJxmR2VdwEI6qXBqkAVXFP4LWNpDasQ8eu0GxASq0Fg7VCz/OxqUiF
y4kq0XmvhvQ5shAQqZx8k5Yym5Q5bFzA
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:34 2026 by rpki-client