Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa
File:                     66425D7E2B1311EB89CBB164C4F9AE02.roa (raw, json)
Hash identifier:          vsbMMm0tX7oQPTtDdBLrO3G0fbHEKxHcy+EakKZCXvk=
Subject key identifier:   BD:31:B9:7E:67:0A:F9:E0:86:6E:BF:2F:FE:80:66:CA:3B:24:73:E2
Certificate issuer:       /CN=A9183798/serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
Certificate serial:       10BE
Authority key identifier: 3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:37:20 +0000
ROA not before:           Thu 24 Apr 2025 17:46:13 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141362
IP address blocks:        203.159.77.0/24 maxlen: 24
                          2405:3340:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl
                          rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4286 (0x10be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183798, serialNumber=3A02EFF7CC9C8BAA12D7C852B6FFC69FB060989B
        Validity
            Not Before: Apr 24 17:46:13 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a44f20-4cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:27:7c:52:37:35:a0:96:7e:60:f4:e1:ae:
                    df:e3:42:9d:27:f6:1d:81:28:6d:3e:b7:e2:52:31:
                    17:82:f9:79:e9:5e:72:8c:ee:d1:73:dc:c5:6b:66:
                    a9:7e:de:46:27:75:17:4a:06:bb:99:3f:34:f7:65:
                    3a:20:d4:0a:a8:91:11:3b:7b:37:b2:bf:cb:0f:19:
                    60:a0:cb:ab:df:15:ce:8f:3e:3d:b7:5f:70:1a:eb:
                    39:6e:a4:dd:42:59:1f:a2:ba:5a:e5:2f:2e:07:9d:
                    8a:be:c0:6a:b3:b8:c5:06:35:44:73:c4:95:e1:5b:
                    43:c0:8b:2d:e6:66:6a:40:97:aa:9e:9e:4e:a5:c5:
                    a6:0f:d9:13:35:d0:c3:4a:16:4b:5e:ab:8b:34:f5:
                    c5:d9:31:89:ac:e3:a9:8e:f9:a8:12:90:9b:bd:92:
                    0d:f5:6e:e1:a9:ec:ca:17:6e:f7:1e:a6:3b:f4:fc:
                    aa:e5:d1:ec:a7:18:5e:83:5a:fe:14:aa:ac:ea:52:
                    c0:e0:89:dd:58:73:19:6e:1b:2a:80:83:82:2a:55:
                    26:67:46:a7:74:31:ee:ec:86:80:1f:87:c3:61:91:
                    99:d9:f9:0b:e3:fb:87:be:69:1c:f2:1d:3f:32:4a:
                    b6:24:8d:fc:61:b5:b1:af:f7:40:7d:96:21:63:61:
                    5c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:31:B9:7E:67:0A:F9:E0:86:6E:BF:2F:FE:80:66:CA:3B:24:73:E2
            X509v3 Authority Key Identifier:
                keyid:3A:02:EF:F7:CC:9C:8B:AA:12:D7:C8:52:B6:FF:C6:9F:B0:60:98:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/OgLv98yci6oS18hStv_Gn7BgmJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OgLv98yci6oS18hStv_Gn7BgmJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183798/9017B50A4A2711E9ACF17C26C4F9AE02/66425D7E2B1311EB89CBB164C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.159.77.0/24
                IPv6:
                  2405:3340:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:75:99:94:db:ec:00:91:cc:b1:59:d4:8d:62:36:1b:df:00:
         dd:cc:02:da:90:10:65:e2:5a:f6:f6:36:c1:78:21:30:ff:09:
         57:79:72:5a:60:ed:e3:98:33:f6:7d:6f:e6:fc:2e:08:e4:5c:
         39:c8:aa:e7:cd:09:91:bb:86:91:60:3c:d7:38:f0:af:7a:fa:
         d8:90:1a:a4:0e:c4:7d:d0:63:0a:97:2c:0f:93:a8:ba:71:b3:
         4d:15:bb:f1:25:e5:f1:07:ab:bd:ee:aa:8d:95:bf:f5:46:50:
         f9:02:a5:5b:5f:a8:41:b2:e4:fa:11:4d:9a:0c:af:5e:37:1a:
         ca:f6:b5:a4:97:ee:12:20:4e:19:66:7f:ef:37:0f:7a:8a:43:
         f9:e3:80:e1:28:02:39:21:b8:74:74:f2:2f:71:89:86:8f:03:
         5d:9b:35:8b:cc:5f:da:f6:4d:b3:dd:54:8b:23:41:44:88:f1:
         53:2e:70:b3:ad:20:ae:1b:2c:88:95:89:30:d5:59:16:a3:ef:
         87:3a:4f:c4:b5:08:bd:f7:1f:4c:61:c4:c3:fc:96:26:fe:c8:
         05:0f:e1:b5:93:16:56:44:ef:b1:97:be:56:cc:99:fb:73:bd:
         b8:b3:33:9c:df:89:85:67:29:a8:5c:44:51:d0:bd:ab:08:34:
         3e:48:60:b2
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICEL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM3OTgxMTAvBgNVBAUTKDNBMDJFRkY3Q0M5QzhCQUExMkQ3Qzg1MkI2RkZDNjlG
QjA2MDk4OUIwHhcNMjUwNDI0MTc0NjEzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGYyMC00Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsa8nfFI3NaCWfmD04a7f40KdJ/YdgShtPrfiUjEXgvl56V5yjO7Rc9zFa2ap
ft5GJ3UXSga7mT8092U6INQKqJERO3s3sr/LDxlgoMur3xXOjz49t19wGus5bqTd
Qlkforpa5S8uB52KvsBqs7jFBjVEc8SV4VtDwIst5mZqQJeqnp5OpcWmD9kTNdDD
ShZLXquLNPXF2TGJrOOpjvmoEpCbvZIN9W7hqezKF273HqY79Pyq5dHspxheg1r+
FKqs6lLA4IndWHMZbhsqgIOCKlUmZ0andDHu7IaAH4fDYZGZ2fkL4/uHvmkc8h0/
Mkq2JI38YbWxr/dAfZYhY2Fc/wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFL0xuX5n
Cvnghm6/L/6AZso7JHPiMB8GA1UdIwQYMBaAFDoC7/fMnIuqEtfIUrb/xp+wYJib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzc5OC85MDE3QjUwQTRB
MjcxMUU5QUNGMTdDMjZDNEY5QUUwMi9PZ0x2OTh5Y2k2b1MxOGhTdHZfR243Qmdt
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09nTHY5OHljaTZvUzE4aFN0dl9HbjdCZ21Kcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODM3OTgvOTAxN0I1MEE0QTI3MTFFOUFDRjE3QzI2QzRGOUFFMDIvNjY0MjVEN0Uy
QjEzMTFFQjg5Q0JCMTY0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAy59NMA8EAgACMAkDBwAkBTNA4AAwDQYJKoZIhvcNAQELBQADggEB
AE91mZTb7ACRzLFZ1I1iNhvfAN3MAtqQEGXiWvb2NsF4ITD/CVd5clpg7eOYM/Z9
b+b8LgjkXDnIqufNCZG7hpFgPNc48K96+tiQGqQOxH3QYwqXLA+TqLpxs00Vu/El
5fEHq73uqo2Vv/VGUPkCpVtfqEGy5PoRTZoMr143Gsr2taSX7hIgThlmf+83D3qK
Q/njgOEoAjkhuHR08i9xiYaPA12bNYvMX9r2TbPdVIsjQUSI8VMucLOtIK4bLIiV
iTDVWRaj74c6T8S1CL33H0xhxMP8lib+yAUP4bWTFlZE77GXvlbMmftzvbizM5zf
iYVnKahcRFHQvasIND5IYLI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:45 2026 by rpki-client