Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa
File:                     932FE94E6BB911ED97343873C4F9AE02.roa (raw, json)
Hash identifier:          GdVtXHJdH4jIbp9hVVrgdQOKKJfAbWGF3eFgrBsJxvA=
Subject key identifier:   05:D8:F6:EE:32:0E:76:DA:6C:73:A0:B0:A3:0B:8D:D1:3D:9B:59:90
Certificate issuer:       /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial:       035A
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa
Signing time:             Wed 27 May 2026 01:32:12 +0000
ROA not before:           Wed 27 May 2026 01:32:12 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     136961
IP address blocks:        165.220.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
                          rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
        Validity
            Not Before: May 27 01:32:12 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a16499c-6747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0d:cd:4b:84:db:c6:fa:0d:42:b5:cc:4c:22:
                    4d:ac:58:1a:6a:d9:d5:d0:4f:4e:68:e0:f8:45:dd:
                    0d:9f:fc:23:9a:43:ef:57:69:ae:0e:ed:96:b7:31:
                    cf:61:d3:52:3b:4c:2f:71:d4:a4:08:47:44:71:af:
                    f6:b3:ff:b1:91:e0:ca:13:54:4e:a6:7c:a2:7f:50:
                    c1:ae:73:b7:88:5a:fe:2b:4f:a9:e6:9b:6b:e0:e9:
                    43:60:61:b4:59:f7:01:57:ba:00:a4:d8:84:6f:01:
                    31:ee:61:10:35:fd:4c:2e:a5:a4:9c:14:3f:64:b1:
                    a8:46:40:bd:be:fe:75:21:71:7f:e1:77:af:6a:59:
                    42:27:47:5d:ed:56:47:8c:f8:08:1b:9d:c1:7c:9a:
                    a9:ee:9e:34:1d:3c:e5:27:e5:ea:22:8e:94:96:be:
                    cf:1a:26:6d:ac:97:44:c9:3a:e5:85:c1:d3:2c:cb:
                    d3:43:16:57:1b:39:c3:70:05:26:23:b9:34:62:6f:
                    f8:af:f8:27:5d:fa:2d:6c:f5:ed:07:1f:ef:39:2c:
                    07:a5:45:74:87:c5:4a:8f:ce:5b:5d:84:9f:79:1d:
                    b8:4c:4b:7a:4c:9c:67:2d:ce:57:14:bb:62:91:89:
                    a4:1c:09:f7:32:17:08:02:51:e6:9f:d7:87:3a:f9:
                    a0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D8:F6:EE:32:0E:76:DA:6C:73:A0:B0:A3:0B:8D:D1:3D:9B:59:90
            X509v3 Authority Key Identifier:
                keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/932FE94E6BB911ED97343873C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.220.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:cd:68:72:69:91:f8:f3:98:98:c3:3e:0c:2b:d6:93:49:80:
         d9:c5:d2:64:3a:bd:d7:a6:69:76:2a:ec:50:e4:1e:f9:ae:8d:
         0b:63:7b:25:91:6e:e7:97:57:dc:69:2d:2a:c3:34:26:59:11:
         29:de:f8:0b:da:63:d7:a9:9c:a0:ed:92:87:dd:11:fc:4b:a0:
         1f:80:fe:10:64:fe:5a:ed:f1:a4:b6:50:bf:03:4d:b9:d3:07:
         a2:2d:31:bd:7c:02:00:b7:87:cd:dc:04:c0:53:d9:82:a5:46:
         17:20:36:c7:06:97:a4:8b:58:c2:37:6b:03:ab:a6:2f:15:17:
         bf:e7:aa:0b:d2:1d:b3:e7:64:84:fe:f1:3d:62:f9:d6:e0:88:
         4e:72:85:16:c8:c1:87:87:ce:46:07:8e:b4:c2:a9:f0:5b:77:
         76:d2:f8:fb:45:72:c0:cd:97:8d:87:8b:34:da:41:72:0e:1a:
         69:8b:b8:90:e1:5b:37:b7:08:c7:23:9c:97:a5:4f:df:a2:a7:
         ac:94:10:f6:2c:73:d0:43:ce:d9:ee:dd:77:a6:02:42:aa:b5:
         4f:08:89:47:fc:32:6d:b4:8b:17:95:12:e1:7e:8e:f8:ae:30:
         37:72:33:ed:bc:1f:08:95:35:e6:a9:f3:82:18:8a:f2:c6:62:
         d0:30:37:96
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw
RjdBOTc3ODkwHhcNMjYwNTI3MDEzMjEyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE2NDk5Yy02NzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhA3NS4TbxvoNQrXMTCJNrFgaatnV0E9OaOD4Rd0Nn/wjmkPvV2muDu2WtzHP
YdNSO0wvcdSkCEdEca/2s/+xkeDKE1ROpnyif1DBrnO3iFr+K0+p5ptr4OlDYGG0
WfcBV7oApNiEbwEx7mEQNf1MLqWknBQ/ZLGoRkC9vv51IXF/4XevallCJ0dd7VZH
jPgIG53BfJqp7p40HTzlJ+XqIo6Ulr7PGiZtrJdEyTrlhcHTLMvTQxZXGznDcAUm
I7k0Ym/4r/gnXfotbPXtBx/vOSwHpUV0h8VKj85bXYSfeR24TEt6TJxnLc5XFLti
kYmkHAn3MhcIAlHmn9eHOvmgUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAXY9u4y
DnbabHOgsKMLjdE9m1mQMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5
OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg0OTQvMzFCODI2M0MwOTkzMTFFREIyMUM5QjRCQzRGOUFFMDIvOTMyRkU5NEU2
QkI5MTFFRDk3MzQzODczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDpdwIMA0GCSqGSIb3DQEBCwUAA4IBAQCAzWhyaZH485iYwz4MK9aT
SYDZxdJkOr3Xpml2KuxQ5B75ro0LY3slkW7nl1fcaS0qwzQmWREp3vgL2mPXqZyg
7ZKH3RH8S6AfgP4QZP5a7fGktlC/A0250weiLTG9fAIAt4fN3ATAU9mCpUYXIDbH
Bpeki1jCN2sDq6YvFRe/56oL0h2z52SE/vE9YvnW4IhOcoUWyMGHh85GB460wqnw
W3d20vj7RXLAzZeNh4s02kFyDhppi7iQ4Vs3twjHI5yXpU/foqeslBD2LHPQQ87Z
7t13pgJCqrVPCIlH/DJttIsXlRLhfo74rjA3cjPtvB8IlTXmqfOCGIryxmLQMDeW
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:30 2026 by rpki-client