Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8A7AA864C00A11EA9DF31048C4F9AE02.roa
File:                     8A7AA864C00A11EA9DF31048C4F9AE02.roa (raw, json)
Hash identifier:          EO4InAc/9J2qfivKt4/3yy60FNvDcSXVwJp8eAAJsys=
Subject key identifier:   08:B3:5C:A4:1A:47:99:A2:A7:38:A0:69:AF:B0:0D:1C:E6:69:92:94
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B62
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8A7AA864C00A11EA9DF31048C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:44 +0000
ROA not before:           Mon 14 Jul 2025 14:51:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     45581
IP address blocks:        119.46.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15202 (0x3b62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:51:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4936c-3a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e7:a2:1b:65:7d:0f:67:b0:0e:9f:12:46:11:
                    d7:c1:83:96:f5:de:8b:67:f0:d3:ba:16:17:77:86:
                    b9:2e:e2:ba:8f:cf:a1:b9:b4:4b:2f:5d:01:85:a9:
                    71:fd:4e:a5:4f:33:d5:65:08:10:cb:d5:93:4a:99:
                    20:5c:a1:67:61:11:c7:02:84:28:d2:e7:b1:1e:2f:
                    59:2d:3c:10:3a:ed:42:2f:31:dc:1c:eb:11:9f:fe:
                    bf:a5:5d:69:59:d5:ee:76:33:5d:f6:3f:18:21:d1:
                    9f:63:5d:03:aa:c3:43:7d:e7:5e:61:bf:82:a5:81:
                    56:22:bd:3f:27:91:7e:ce:52:f4:f1:74:3f:5b:ee:
                    52:05:38:0a:71:0a:7e:ff:3e:3a:78:86:fd:d9:ce:
                    3c:5c:28:6c:6c:8a:a8:de:6b:db:72:40:b7:0b:55:
                    fd:58:8c:d3:7f:75:99:00:db:57:30:6e:e8:de:f5:
                    c2:d6:eb:c2:1a:1b:79:df:3d:b3:86:8b:61:79:bc:
                    77:31:cd:2c:36:80:a5:ab:fa:00:5c:55:10:85:91:
                    e4:7c:03:93:34:18:fd:30:a8:57:27:fa:d4:dc:8c:
                    8b:ee:3e:8f:6b:7c:e8:13:17:fb:33:5c:84:8d:7a:
                    24:16:a3:5c:71:28:97:1d:2a:23:88:e7:03:4e:1b:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B3:5C:A4:1A:47:99:A2:A7:38:A0:69:AF:B0:0D:1C:E6:69:92:94
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/8A7AA864C00A11EA9DF31048C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.46.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:31:c5:db:84:0d:7f:2c:94:f6:c2:9f:3b:a5:86:84:53:fc:
         2a:08:1e:b7:46:f1:e0:20:1c:5a:cb:cf:87:59:9f:1b:b7:8b:
         8e:5c:ae:5c:3e:0e:0a:5c:ce:75:1a:bf:29:9c:ac:e6:49:ca:
         a1:ef:e9:b7:56:e5:2e:b1:16:08:00:e1:69:87:82:da:f8:70:
         9d:8c:c8:a6:14:ec:6c:d4:23:37:59:f1:71:6e:66:59:ff:9f:
         7f:0e:bf:57:e1:20:1b:f6:b4:5b:56:c0:25:0d:93:59:25:ba:
         06:52:c3:0d:86:90:84:6c:64:60:98:9f:59:04:86:d2:0f:da:
         1a:9b:ab:eb:3f:a8:6d:d5:45:39:e9:bf:59:07:22:af:09:2a:
         5a:1d:4c:34:85:26:e4:f1:c3:90:b2:dd:86:02:b1:77:d9:0c:
         cb:2e:d5:1a:a6:16:21:64:67:89:bd:70:3c:60:d7:4f:28:72:
         d0:3e:ea:09:4a:d6:d0:14:04:b9:8f:bd:c2:18:4d:30:2a:1c:
         73:14:53:43:eb:89:89:14:a1:36:97:0e:bc:60:c5:e7:2d:7e:
         18:95:da:99:be:79:bf:e2:b2:0a:9a:8f:09:3c:46:56:90:fa:
         d7:16:cb:85:9e:9e:87:bc:8a:b4:75:e4:b9:12:1a:a6:11:ab:
         0f:ac:e0:b8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICO2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTE2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM2Yy0zYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+ueiG2V9D2ewDp8SRhHXwYOW9d6LZ/DTuhYXd4a5LuK6j8+hubRLL10Bhalx
/U6lTzPVZQgQy9WTSpkgXKFnYRHHAoQo0uexHi9ZLTwQOu1CLzHcHOsRn/6/pV1p
WdXudjNd9j8YIdGfY10DqsNDfedeYb+CpYFWIr0/J5F+zlL08XQ/W+5SBTgKcQp+
/z46eIb92c48XChsbIqo3mvbckC3C1X9WIzTf3WZANtXMG7o3vXC1uvCGht53z2z
hothebx3Mc0sNoClq/oAXFUQhZHkfAOTNBj9MKhXJ/rU3IyL7j6Pa3zoExf7M1yE
jXokFqNccSiXHSojiOcDThvSPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAizXKQa
R5mipzigaa+wDRzmaZKUMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvOEE3QUE4NjRD
MDBBMTFFQTlERjMxMDQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAdy62MA0GCSqGSIb3DQEBCwUAA4IBAQANMcXbhA1/LJT2wp87pYaE
U/wqCB63RvHgIBxay8+HWZ8bt4uOXK5cPg4KXM51Gr8pnKzmScqh7+m3VuUusRYI
AOFph4La+HCdjMimFOxs1CM3WfFxbmZZ/59/Dr9X4SAb9rRbVsAlDZNZJboGUsMN
hpCEbGRgmJ9ZBIbSD9oam6vrP6ht1UU56b9ZByKvCSpaHUw0hSbk8cOQst2GArF3
2QzLLtUaphYhZGeJvXA8YNdPKHLQPuoJStbQFAS5j73CGE0wKhxzFFND64mJFKE2
lw68YMXnLX4YldqZvnm/4rIKmo8JPEZWkPrXFsuFnp6HvIq0deS5EhqmEasPrOC4
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:10 2026 by rpki-client