Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa
File:                     4409B8649D1011F0B28FB758C4F9AE02.roa (raw, json)
Hash identifier:          CIf5GGGC1TVACvwyThVDydbe+OfzvDk5DC5kiBIMJsY=
Subject key identifier:   44:23:F0:D2:AD:23:8B:0D:3C:8C:41:E7:CF:3D:D8:4B:64:EC:DF:E4
Certificate issuer:       /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial:       1928
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:08:31 +0000
ROA not before:           Thu 04 Dec 2025 16:15:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153356
IP address blocks:        113.19.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
                          rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6440 (0x1928)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
        Validity
            Not Before: Dec  4 16:15:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4809f-a3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:13:4f:00:2e:52:55:57:c8:0b:90:ee:bd:
                    99:27:6c:3e:68:c3:0c:4a:d2:2d:65:4b:f8:55:b3:
                    71:46:7b:f8:e9:29:30:a0:b0:d6:43:47:2b:98:c0:
                    51:e3:42:63:f7:e2:df:1c:98:5b:f2:43:f3:3a:22:
                    1a:07:45:36:20:4a:f3:e5:60:97:64:f4:49:51:6d:
                    21:87:10:71:f2:5b:68:e6:94:ca:c2:55:53:18:ec:
                    fe:66:f9:1f:07:8a:e0:e5:c5:ee:61:db:d7:f6:62:
                    f6:82:1d:8e:41:30:ff:d3:60:65:cb:eb:25:dd:2b:
                    53:ff:14:a1:8c:a3:27:c8:e3:3f:7f:14:c4:79:3c:
                    0d:51:67:5b:90:c1:51:5a:82:23:af:5c:40:82:c1:
                    73:09:78:ef:4a:d1:e8:57:cd:6a:44:5c:06:15:f6:
                    f3:f4:4a:90:3d:c1:72:a7:0a:64:2c:f5:12:ef:50:
                    a4:d8:28:30:e4:68:84:d8:d3:3d:0c:10:b7:3b:b8:
                    9d:1c:37:f8:37:3b:cb:b6:67:30:80:de:79:16:83:
                    1c:0b:e1:5a:e9:4d:fc:05:14:80:80:99:d0:de:35:
                    46:26:a2:54:a4:9b:2d:87:35:e9:37:e9:48:16:aa:
                    32:1b:19:45:42:e7:68:b3:34:7d:34:f7:97:e2:a4:
                    dd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:23:F0:D2:AD:23:8B:0D:3C:8C:41:E7:CF:3D:D8:4B:64:EC:DF:E4
            X509v3 Authority Key Identifier:
                keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/4409B8649D1011F0B28FB758C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.19.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:76:eb:1b:05:bf:f7:6f:15:3f:25:d1:21:47:43:81:79:a3:
         00:59:75:e7:bf:7f:7e:a3:86:07:a4:11:bb:64:7e:c9:31:dc:
         8e:7f:c5:65:d2:9d:06:da:48:1d:3a:66:47:5c:f4:ad:8c:24:
         55:3b:89:12:13:17:30:79:ff:7f:ff:3d:5f:62:fa:16:e4:eb:
         80:04:ac:61:f0:33:aa:0a:7b:f3:d2:76:bd:23:1d:61:53:10:
         52:6c:9c:78:93:18:7e:50:6a:1a:f6:bd:7c:80:3f:3c:bc:58:
         c0:d8:6d:cc:b6:73:19:89:5e:0d:42:59:c0:4a:0d:9d:79:cf:
         f2:4d:85:72:d6:d7:2a:2e:a8:0e:b4:45:4e:32:1c:c3:a8:f3:
         8f:57:1b:fe:3c:c6:22:0a:08:18:cb:70:fa:2f:32:5b:e8:12:
         78:6f:6b:c8:a8:e6:91:8c:3d:93:0f:83:de:f8:07:4a:fb:8d:
         36:c7:95:8d:06:91:5b:8c:43:0b:0d:0c:c3:7d:23:d3:5a:dc:
         5d:16:04:4a:91:08:c8:01:11:f1:9f:9a:16:a0:74:00:ee:70:
         23:81:5f:56:f0:57:8d:e4:8b:ca:2a:63:ed:91:78:ad:0d:a6:
         6e:bf:0e:0f:e7:ad:d7:ad:9f:56:18:d9:34:b6:1f:7d:1e:43:
         4b:a4:c0:c6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIxOEIxMTAvBgNVBAUTKEZERTM2QjZFOTQ5Mzk4RTUyRDk1RTg5RDQwQkRGNjBC
MjVEQjY5QjkwHhcNMjUxMjA0MTYxNTUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODA5Zi1hM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0XQTTwAuUlVXyAuQ7r2ZJ2w+aMMMStItZUv4VbNxRnv46SkwoLDWQ0crmMBR
40Jj9+LfHJhb8kPzOiIaB0U2IErz5WCXZPRJUW0hhxBx8lto5pTKwlVTGOz+Zvkf
B4rg5cXuYdvX9mL2gh2OQTD/02Bly+sl3StT/xShjKMnyOM/fxTEeTwNUWdbkMFR
WoIjr1xAgsFzCXjvStHoV81qRFwGFfbz9EqQPcFypwpkLPUS71Ck2Cgw5GiE2NM9
DBC3O7idHDf4NzvLtmcwgN55FoMcC+Fa6U38BRSAgJnQ3jVGJqJUpJsthzXpN+lI
FqoyGxlFQudoszR9NPeX4qTdRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEQj8NKt
I4sNPIxB58892Etk7N/kMB8GA1UdIwQYMBaAFP3ja26Uk5jlLZXonUC99gsl22m5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi82MjhERTUwMkRG
MjMxMUU3OTcyMjVEMkVDNEY5QUUwMi9fZU5yYnBTVG1PVXRsZWlkUUwzMkN5WGJh
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19lTnJicFNUbU9VdGxlaWRRTDMyQ3lYYmFiay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIxOEIvNjI4REU1MDJERjIzMTFFNzk3MjI1RDJFQzRGOUFFMDIvNDQwOUI4NjQ5
RDEwMTFGMEIyOEZCNzU4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcRN2MA0GCSqGSIb3DQEBCwUAA4IBAQCXdusbBb/3bxU/JdEhR0OB
eaMAWXXnv39+o4YHpBG7ZH7JMdyOf8Vl0p0G2kgdOmZHXPStjCRVO4kSExcwef9/
/z1fYvoW5OuABKxh8DOqCnvz0na9Ix1hUxBSbJx4kxh+UGoa9r18gD88vFjA2G3M
tnMZiV4NQlnASg2dec/yTYVy1tcqLqgOtEVOMhzDqPOPVxv+PMYiCggYy3D6LzJb
6BJ4b2vIqOaRjD2TD4Pe+AdK+402x5WNBpFbjEMLDQzDfSPTWtxdFgRKkQjIARHx
n5oWoHQA7nAjgV9W8FeN5IvKKmPtkXitDaZuvw4P563XrZ9WGNk0th99HkNLpMDG
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:55 2026 by rpki-client