Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
File:                     76C5842CC3DD11EDAAED714EC4F9AE02.roa (raw, json)
Hash identifier:          AksvgR3e+xXwbDovJAdap8RK4kJv79k9mUAmkMcDM9g=
Subject key identifier:   85:A8:C2:2F:38:69:5E:57:D8:FA:B0:9C:BB:AD:09:2E:5E:7F:A4:22
Certificate issuer:       /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Certificate serial:       06D2
Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
Signing time:             Thu 16 Jul 2026 23:23:57 +0000
ROA not before:           Thu 16 Jul 2026 23:23:57 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38829
IP address blocks:        118.127.168.0/21 maxlen: 24
                          118.127.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
                          rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
        Validity
            Not Before: Jul 16 23:23:57 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a59680d-4ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1f:e0:76:d4:cc:a0:48:cd:cc:47:8f:69:dd:
                    50:3a:81:02:9f:9f:83:f6:3d:57:d1:71:f8:01:1e:
                    cc:35:1f:ff:08:5c:c1:80:a0:fd:cf:9b:db:6e:28:
                    60:68:96:dd:6d:44:2b:98:ad:73:fc:cb:b6:aa:c9:
                    b6:0b:e6:01:a0:6e:d8:23:d8:8d:b8:50:46:c5:ec:
                    79:e3:8d:9e:33:7e:9c:e5:19:da:7d:f1:0e:c9:db:
                    37:f2:b6:44:3d:9e:56:76:22:ee:6a:63:c2:26:41:
                    5a:26:17:5c:80:4b:a1:82:f5:c7:e9:2a:9f:fa:e0:
                    aa:ad:f0:91:82:93:82:06:34:4e:91:5a:fd:bd:15:
                    78:ce:69:8b:82:a8:32:a4:87:bf:74:df:0c:2f:86:
                    a5:d2:4d:39:c5:74:fd:d6:c5:ab:43:f3:ff:be:d2:
                    15:ab:3a:f8:ca:98:84:fc:c4:35:0a:e0:b6:da:4a:
                    a4:66:a8:7a:ad:ad:fc:f5:53:8c:96:d1:68:01:6f:
                    07:5a:6b:c6:3f:da:f4:1a:79:bb:00:54:f4:44:32:
                    1d:fb:c7:63:49:be:5a:c3:87:63:b6:9e:e4:59:9d:
                    80:f9:5a:32:94:56:93:40:3e:a5:62:d3:47:a1:3c:
                    29:ae:98:5e:96:21:8a:6f:01:b4:3c:d1:82:99:f0:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A8:C2:2F:38:69:5E:57:D8:FA:B0:9C:BB:AD:09:2E:5E:7F:A4:22
            X509v3 Authority Key Identifier:
                keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.127.168.0-118.127.191.255

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:10:fd:11:0a:fc:ac:25:d3:c5:38:e2:03:da:54:af:d3:
         38:1e:3e:8b:3f:cd:51:5c:c5:69:04:25:d7:50:51:9d:8e:41:
         2a:bf:1d:96:77:f8:ff:4c:2f:94:f8:fb:a9:f9:41:6e:9e:b4:
         08:37:0a:6b:95:cc:9f:7b:59:0f:fc:58:1f:10:29:36:2a:eb:
         dd:a9:49:80:01:07:62:30:ed:e6:a9:69:41:1b:ee:03:a6:76:
         a8:0b:8a:1b:d5:2a:cd:92:fe:22:ef:41:ac:1c:9f:e2:72:d5:
         e5:22:de:74:04:b0:56:d7:69:b6:6e:e1:71:80:fe:bc:06:73:
         c0:3f:79:ff:cb:33:13:17:e6:65:22:90:55:2c:bc:c4:30:af:
         94:03:fa:88:a9:cc:f7:93:f1:33:78:19:2c:e3:e7:f4:14:b9:
         a5:c4:e9:b2:df:45:9a:0c:28:df:3b:00:e2:fe:b6:4f:9a:c8:
         89:0a:3f:d5:fe:e4:c7:8c:bc:d9:06:a7:85:e5:ea:41:ff:8b:
         09:ad:13:1d:d7:0e:40:11:17:38:74:03:1e:0a:d4:c5:7f:b1:
         72:4a:de:49:92:f8:86:38:72:9c:a4:e4:92:c3:95:b6:3f:a0:
         d0:db:f3:ae:bc:4a:ae:cd:31:89:8e:0f:c0:2d:15:cd:58:9d:
         df:09:e7:e5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4OTgxMTAvBgNVBAUTKEI0NzY3NDMxM0I5NDNFQzZDQkVGNzU2MkJEMTk3MEQ1
QzczM0VBNUIwHhcNMjYwNzE2MjMyMzU3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU5NjgwZC00YWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9x/gdtTMoEjNzEePad1QOoECn5+D9j1X0XH4AR7MNR//CFzBgKD9z5vbbihg
aJbdbUQrmK1z/Mu2qsm2C+YBoG7YI9iNuFBGxex5442eM36c5RnaffEOyds38rZE
PZ5WdiLuamPCJkFaJhdcgEuhgvXH6Sqf+uCqrfCRgpOCBjROkVr9vRV4zmmLgqgy
pIe/dN8ML4al0k05xXT91sWrQ/P/vtIVqzr4ypiE/MQ1CuC22kqkZqh6ra389VOM
ltFoAW8HWmvGP9r0Gnm7AFT0RDId+8djSb5aw4djtp7kWZ2A+VoylFaTQD6lYtNH
oTwprpheliGKbwG0PNGCmfDnXQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFIWowi84
aV5X2PqwnLutCS5ef6QiMB8GA1UdIwQYMBaAFLR2dDE7lD7Gy+91Yr0ZcNXHM+pb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg5OC8yMDkxQjAxQUI4
MzgxMUVCOUQ3RUEyNEZDNEY5QUUwMi90SFowTVR1VVBzYkw3M1ZpdlJsdzFjY3o2
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RIWjBNVHVVUHNiTDczVml2Umx3MWNjejZscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODM4OTgvMjA5MUIwMUFCODM4MTFFQjlEN0VBMjRGQzRGOUFFMDIvNzZDNTg0MkND
M0REMTFFREFBRUQ3MTRFQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAN2f6gDBAZ2f4AwDQYJKoZIhvcNAQELBQADggEBAE7jEP0RCvys
JdPFOOID2lSv0zgePos/zVFcxWkEJddQUZ2OQSq/HZZ3+P9ML5T4+6n5QW6etAg3
CmuVzJ97WQ/8WB8QKTYq692pSYABB2Iw7eapaUEb7gOmdqgLihvVKs2S/iLvQawc
n+Jy1eUi3nQEsFbXabZu4XGA/rwGc8A/ef/LMxMX5mUikFUsvMQwr5QD+oipzPeT
8TN4GSzj5/QUuaXE6bLfRZoMKN87AOL+tk+ayIkKP9X+5MeMvNkGp4Xl6kH/iwmt
Ex3XDkARFzh0Ax4K1MV/sXJK3kmS+IY4cpyk5JLDlbY/oNDb8668Sq7NMYmOD8At
Fc1Ynd8J5+U=
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:56 2026 by rpki-client