Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/78227BC8039911F1BC7C88883B3D8C67.roa
File:                     78227BC8039911F1BC7C88883B3D8C67.roa (raw, json)
Hash identifier:          iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=
Subject key identifier:   BE:0E:B3:19:01:15:20:55:6D:9F:A7:42:90:CC:28:F0:AB:A7:B8:85
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       0484
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/78227BC8039911F1BC7C88883B3D8C67.roa
Signing time:             Mon 25 May 2026 01:34:50 +0000
ROA not before:           Mon 25 May 2026 01:34:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        43.243.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: May 25 01:34:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a13a73a-fdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:35:74:3f:07:e6:cd:f9:60:8c:f9:ab:6d:
                    50:3a:28:e8:8c:c8:49:89:48:67:c6:80:de:98:03:
                    d9:ba:88:f0:38:d4:9a:7b:d1:9c:80:d6:ec:0f:e7:
                    ff:d1:66:35:59:ab:2a:48:7e:f4:bf:6b:65:c8:cf:
                    28:ed:b6:f7:16:61:62:04:58:7d:36:99:03:1a:1d:
                    b0:2c:3b:ce:5c:63:a2:c2:a9:df:51:59:96:14:36:
                    71:91:6e:08:9c:c8:28:1d:87:66:8b:65:00:f7:30:
                    74:3f:3d:d0:7c:49:30:7c:fe:84:0c:e1:00:62:47:
                    a8:28:f0:b0:31:7a:e4:dc:77:7a:a2:05:3d:21:60:
                    aa:2c:e8:c9:04:dd:de:35:42:97:90:6a:50:d2:f6:
                    8f:7a:f9:d0:c3:6b:c0:4c:b0:d6:35:9c:66:6c:63:
                    87:1f:29:c6:0e:e4:d0:cf:5a:4c:01:8e:a8:5c:32:
                    1b:33:42:04:2d:34:ba:e6:f0:fb:12:a0:1d:56:08:
                    8c:25:5c:18:c2:1c:1e:7e:f4:ad:15:b4:36:f6:27:
                    0f:68:f1:d4:01:fe:1d:d2:65:0c:ed:d0:93:3a:cf:
                    26:a3:c6:d9:70:8a:5a:2d:ae:b5:af:31:e2:70:c5:
                    54:52:1f:a0:ec:dd:c3:1d:f2:1e:2b:0e:bf:d9:2d:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:B3:19:01:15:20:55:6D:9F:A7:42:90:CC:28:F0:AB:A7:B8:85
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/78227BC8039911F1BC7C88883B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:90:e4:8d:a1:28:e5:3e:1b:60:a8:8e:ca:5b:9f:5a:7c:
         d1:b4:ff:1b:26:a7:ce:84:a9:46:25:8a:6e:53:20:8e:57:2b:
         56:23:a0:5d:be:8f:f7:66:1e:12:48:b2:49:d9:3c:da:f0:37:
         3c:4b:1a:10:ec:7b:8c:2e:db:04:f1:98:af:e3:fa:4a:7c:81:
         69:68:db:85:b6:32:27:1a:6f:1e:9a:07:11:9c:5f:b8:9a:5b:
         44:2f:44:f3:57:f9:72:96:8c:23:8b:33:d5:eb:80:59:f2:4f:
         fc:8f:ec:9e:b0:96:9b:a7:49:39:f7:07:6a:c6:1e:f1:bc:fe:
         b4:a2:6b:5d:2f:aa:9d:6f:21:7c:12:4f:3b:83:c5:89:ea:14:
         65:c6:72:b8:52:84:f2:e3:5a:ab:b5:e8:cb:d0:03:14:0b:e7:
         fc:49:4e:06:cc:73:7b:52:7a:12:41:23:dc:4b:39:cd:5d:fd:
         73:a6:6a:de:c7:b7:e8:a6:ec:08:74:77:32:29:f3:47:fd:dd:
         20:69:1d:b6:be:c3:12:97:07:c7:b2:2c:67:c7:f9:16:08:ae:
         ae:7b:7e:cf:46:32:e9:5b:8b:28:5a:52:5d:72:09:87:ff:95:
         ff:dd:1a:12:32:de:f4:85:bd:d1:81:0d:ae:66:44:7e:56:a3:
         58:fd:2a:a0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4
RjEzRTQxNzIwHhcNMjYwNTI1MDEzNDUwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEzYTczYS1mZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfU1dD8H5s35YIz5q21QOijojMhJiUhnxoDemAPZuojwONSae9GcgNbsD+f/
0WY1WasqSH70v2tlyM8o7bb3FmFiBFh9NpkDGh2wLDvOXGOiwqnfUVmWFDZxkW4I
nMgoHYdmi2UA9zB0Pz3QfEkwfP6EDOEAYkeoKPCwMXrk3Hd6ogU9IWCqLOjJBN3e
NUKXkGpQ0vaPevnQw2vATLDWNZxmbGOHHynGDuTQz1pMAY6oXDIbM0IELTS65vD7
EqAdVgiMJVwYwhwefvStFbQ29icPaPHUAf4d0mUM7dCTOs8mo8bZcIpaLa61rzHi
cMVUUh+g7N3DHfIeKw6/2S1+rwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL4OsxkB
FSBVbZ+nQpDMKPCrp7iFMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw
NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvNzgyMjdCQzgw
Mzk5MTFGMUJDN0M4ODg4M0IzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK/PBMA0GCSqGSIb3DQEBCwUAA4IBAQAe8ZDkjaEo5T4bYKiOyluf
WnzRtP8bJqfOhKlGJYpuUyCOVytWI6Bdvo/3Zh4SSLJJ2Tza8Dc8SxoQ7HuMLtsE
8Ziv4/pKfIFpaNuFtjInGm8emgcRnF+4mltEL0TzV/lylowjizPV64BZ8k/8j+ye
sJabp0k59wdqxh7xvP60omtdL6qdbyF8Ek87g8WJ6hRlxnK4UoTy41qrtejL0AMU
C+f8SU4GzHN7UnoSQSPcSznNXf1zpmrex7fopuwIdHcyKfNH/d0gaR22vsMSlwfH
sixnx/kWCK6ue37PRjLpW4soWlJdcgmH/5X/3RoSMt70hb3RgQ2uZkR+VqNY/Sqg
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:59:11 2026 by rpki-client