Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/C55CBAE27F6011EB8EE64E7EC4F9AE02.roa
File:                     C55CBAE27F6011EB8EE64E7EC4F9AE02.roa (raw, json)
Hash identifier:          cyn7lHVsbkOtK4HLjE3mszTApTg1vJAEZ5l9JNZ2zgE=
Subject key identifier:   CA:02:81:D6:F0:29:64:07:DF:93:F3:A6:A5:7C:47:74:59:A8:8C:AA
Certificate issuer:       /CN=A9124CE5/serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
Certificate serial:       0756
Authority key identifier: 48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/C55CBAE27F6011EB8EE64E7EC4F9AE02.roa
Signing time:             Tue 28 Jul 2026 22:44:30 +0000
ROA not before:           Tue 28 Jul 2026 22:44:30 +0000
ROA not after:            Sat 28 Nov 2026 00:00:00 +0000
asID:                     134076
IP address blocks:        103.51.68.0/22 maxlen: 22
                          2402:1180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl
                          rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124CE5, serialNumber=485095F1A24E4CF1B2AC725521E4D980E28D5A44
        Validity
            Not Before: Jul 28 22:44:30 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=6a6930ce-9a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ab:b9:9e:e9:06:6d:b9:ee:43:97:df:27:65:
                    41:73:34:8e:20:83:77:73:e8:04:fc:b2:98:e2:95:
                    4e:d9:fc:1e:2a:22:27:8b:5d:b1:f9:65:b3:ea:d9:
                    50:9d:17:3f:0b:be:41:c3:41:27:9f:3a:7f:08:6d:
                    e6:f6:7c:da:b0:9c:44:95:bc:d9:9f:7d:6a:0f:72:
                    ca:a1:90:37:a4:0f:20:b0:7e:29:63:6e:64:c7:1e:
                    45:a9:40:e8:2e:71:d2:09:74:4d:d1:af:5c:c8:09:
                    94:21:ab:80:25:65:81:67:64:e9:43:9c:ae:ed:ee:
                    d7:87:7c:9c:05:e9:6c:a6:7d:dc:cb:ca:1c:15:76:
                    fd:21:16:bd:72:3a:70:2a:a4:20:6f:44:ba:d4:4b:
                    a1:76:8d:af:71:f9:d3:cd:fe:8e:ca:a8:6a:44:56:
                    46:c3:be:5f:8e:6b:49:64:88:0f:7e:51:5e:6b:ad:
                    c4:8f:b3:f2:d0:b9:c7:50:7a:bf:91:ac:3c:f3:20:
                    64:c3:0f:43:a8:b0:0b:8b:15:40:36:70:5b:80:76:
                    f4:06:18:f8:6f:59:1c:4e:ad:4a:66:fe:49:e8:35:
                    7a:f6:54:fe:8c:44:98:44:8a:46:3a:3d:a6:12:0b:
                    82:1d:c0:be:cf:4f:0c:b7:ad:be:10:2c:1b:9c:eb:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:02:81:D6:F0:29:64:07:DF:93:F3:A6:A5:7C:47:74:59:A8:8C:AA
            X509v3 Authority Key Identifier:
                keyid:48:50:95:F1:A2:4E:4C:F1:B2:AC:72:55:21:E4:D9:80:E2:8D:5A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFCV8aJOTPGyrHJVIeTZgOKNWkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124CE5/669989C87F5F11EBA750C47DC4F9AE02/C55CBAE27F6011EB8EE64E7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.68.0/22
                IPv6:
                  2402:1180::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:02:66:1c:bd:6d:68:df:71:49:8a:67:93:3c:3d:48:72:2e:
         f0:5e:ef:b2:25:5c:ef:39:b9:ca:78:75:b3:42:bf:8d:0f:8b:
         07:07:fb:89:8d:69:c3:1c:65:6a:57:b3:dc:f9:2f:60:8c:1b:
         b6:1c:72:06:08:57:ac:f6:76:f4:8c:6d:57:44:99:0e:aa:2f:
         db:f4:41:b6:0f:e2:d4:00:40:79:38:6d:a2:09:6e:36:c4:3f:
         5d:7b:b2:7e:4b:7c:14:40:3c:d4:47:3d:d0:4a:73:92:d6:36:
         9d:7b:03:0e:bb:80:54:0d:5a:40:36:37:af:02:1e:fa:3b:46:
         76:ec:8e:0c:47:67:8a:0b:7b:25:c6:96:c3:3c:9e:6f:79:49:
         22:37:ca:38:6d:0f:34:f3:fd:07:e2:a7:ca:cb:be:f6:83:50:
         67:e0:c4:81:75:07:29:29:96:e1:c7:67:d5:67:56:ef:df:ae:
         d3:3d:42:73:f3:22:25:8f:49:00:3a:f9:01:7f:9d:32:c1:03:
         f1:9e:19:b2:47:61:57:42:f2:49:67:38:54:53:57:04:b4:e3:
         ea:b2:fb:f7:6c:3d:ce:b8:ee:38:ab:f3:f6:48:b9:3c:fa:5c:
         67:7e:73:fa:3b:36:35:84:23:42:21:8c:81:b1:08:93:2e:c5:
         66:b5:30:e3
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjRDRTUxMTAvBgNVBAUTKDQ4NTA5NUYxQTI0RTRDRjFCMkFDNzI1NTIxRTREOTgw
RTI4RDVBNDQwHhcNMjYwNzI4MjI0NDMwWhcNMjYxMTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MzBjZS05YTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhKu5nukGbbnuQ5ffJ2VBczSOIIN3c+gE/LKY4pVO2fweKiIni12x+WWz6tlQ
nRc/C75Bw0Ennzp/CG3m9nzasJxElbzZn31qD3LKoZA3pA8gsH4pY25kxx5FqUDo
LnHSCXRN0a9cyAmUIauAJWWBZ2TpQ5yu7e7Xh3ycBelspn3cy8ocFXb9IRa9cjpw
KqQgb0S61Euhdo2vcfnTzf6OyqhqRFZGw75fjmtJZIgPflFea63Ej7Py0LnHUHq/
kaw88yBkww9DqLALixVANnBbgHb0Bhj4b1kcTq1KZv5J6DV69lT+jESYRIpGOj2m
EguCHcC+z08Mt62+ECwbnOshRQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMoCgdbw
KWQH35PzpqV8R3RZqIyqMB8GA1UdIwQYMBaAFEhQlfGiTkzxsqxyVSHk2YDijVpE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNENFNS82Njk5ODlDODdG
NUYxMUVCQTc1MEM0N0RDNEY5QUUwMi9TRkNWOGFKT1RQR3lySEpWSWVUWmdPS05X
a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NGQ1Y4YUpPVFBHeXJISlZJZVRaZ09LTldrUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjRDRTUvNjY5OTg5Qzg3RjVGMTFFQkE3NTBDNDdEQzRGOUFFMDIvQzU1Q0JBRTI3
RjYwMTFFQjhFRTY0RTdFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZzNEMA0EAgACMAcDBQAkAhGAMA0GCSqGSIb3DQEBCwUAA4IBAQBh
AmYcvW1o33FJimeTPD1Ici7wXu+yJVzvObnKeHWzQr+ND4sHB/uJjWnDHGVqV7Pc
+S9gjBu2HHIGCFes9nb0jG1XRJkOqi/b9EG2D+LUAEB5OG2iCW42xD9de7J+S3wU
QDzURz3QSnOS1jadewMOu4BUDVpANjevAh76O0Z27I4MR2eKC3slxpbDPJ5veUki
N8o4bQ808/0H4qfKy772g1Bn4MSBdQcpKZbhx2fVZ1bv367TPUJz8yIlj0kAOvkB
f50ywQPxnhmyR2FXQvJJZzhUU1cEtOPqsvv3bD3OuO44q/P2SLk8+lxnfnP6OzY1
hCNCIYyBsQiTLsVmtTDj
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:28 2026 by rpki-client