Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/84D37FC6AFFF11F18E4DACF96311F970.roa
File:                     84D37FC6AFFF11F18E4DACF96311F970.roa (raw, json)
Hash identifier:          crArvlb+Ze86ihALqTtqfNZ24fabeO5GjETbQL/fyLw=
Subject key identifier:   69:5E:30:77:F3:80:A6:4D:85:9E:1D:1E:63:AE:CD:F2:44:0A:78:AB
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       0566
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/84D37FC6AFFF11F18E4DACF96311F970.roa
Signing time:             Mon 14 Sep 2026 05:45:41 +0000
ROA not before:           Mon 14 Sep 2026 05:45:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     36680
IP address blocks:        43.228.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: Sep 14 05:45:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6aa78a04-e756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:89:7b:ad:95:7d:02:8d:aa:01:10:00:70:
                    3d:ee:09:8d:9c:47:f2:e8:cf:7b:60:c5:b8:b6:3a:
                    40:13:8d:d8:9f:1b:af:0b:12:5c:f9:c3:5b:94:13:
                    54:35:6e:71:27:53:c9:be:79:13:9b:1f:b3:d8:3c:
                    39:85:30:90:78:58:06:2c:05:f5:38:be:a8:50:ad:
                    1d:d9:3e:12:64:e5:23:2f:2f:3e:6a:87:21:57:4d:
                    b1:3e:bd:fe:9a:06:db:28:2f:e2:ad:9a:cb:16:e6:
                    01:53:55:6a:5c:37:23:63:fd:19:0e:fa:b7:07:27:
                    bf:af:1e:ad:ad:3c:b9:c9:8b:38:7f:a3:eb:ea:3c:
                    51:8d:8c:50:b3:d4:c1:8b:a7:72:33:47:8c:81:0c:
                    1c:06:82:ae:7d:45:fe:b1:b2:f8:8f:be:58:da:08:
                    ef:f4:cc:17:fb:5e:da:62:67:0a:48:05:c6:d6:73:
                    10:61:ca:83:1a:88:94:f3:ca:d1:8a:67:87:ab:30:
                    1c:b1:fb:a9:22:09:6e:f8:a1:1a:9b:8a:83:4e:0e:
                    95:8c:01:df:52:b5:0f:42:f4:86:2c:45:75:7f:96:
                    71:6d:ad:60:1f:9d:41:82:77:89:d0:7f:fc:0a:e7:
                    85:13:cc:28:d8:dc:fa:81:0d:14:ee:8f:78:bd:bd:
                    fc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5E:30:77:F3:80:A6:4D:85:9E:1D:1E:63:AE:CD:F2:44:0A:78:AB
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/84D37FC6AFFF11F18E4DACF96311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:3d:ab:2e:fa:16:47:2c:78:c3:54:d2:90:62:c9:17:f6:
         7b:e1:76:0c:36:43:57:3d:4c:02:fe:9d:1c:95:42:07:0e:21:
         9b:fc:97:87:f0:24:6f:58:12:e0:29:70:3c:a2:4d:16:c9:7c:
         4c:54:fa:db:6e:19:31:ae:bc:78:14:1c:bc:db:e8:83:bc:dd:
         64:86:ee:dd:bb:e8:02:2c:73:4d:b4:d9:6c:a7:1f:7d:07:55:
         3b:af:99:4a:9b:5b:14:a3:d2:78:d9:ad:3f:9d:3c:a9:7a:18:
         7e:5b:f5:4d:9a:f7:b2:db:28:3f:c3:a7:3e:9b:f0:a5:ad:9e:
         35:e7:d0:6c:d0:b4:c8:d9:87:a7:b2:54:70:ec:2f:4e:d6:55:
         71:11:6a:1e:dd:77:dd:e2:64:8a:36:67:0f:6d:95:c4:7e:7c:
         3c:f9:0e:94:eb:f0:28:43:c8:cc:6c:16:3b:ec:b7:ed:2e:13:
         9f:ff:92:d0:36:7d:6d:42:49:f5:eb:22:7a:e8:89:e9:6c:ac:
         a7:2c:43:2c:be:6f:56:96:60:10:29:91:24:94:80:27:ca:f3:
         a7:64:3d:d1:85:ea:d1:f6:ef:c8:7c:cd:3a:25:28:48:1e:b2:
         98:ba:53:93:6e:e8:f3:14:3c:fe:48:ac:9d:1a:c9:5d:9c:40:
         0c:de:ac:38
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCOTUxMTAvBgNVBAUTKEZBRDdFQ0M5QzA1Q0Q4RUIyMDU2OTA5RDZDNjE0NzE1
RTJDNTEzM0UwHhcNMjYwOTE0MDU0NTQwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE3OGEwNC1lNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1FaJe62VfQKNqgEQAHA97gmNnEfy6M97YMW4tjpAE43YnxuvCxJc+cNblBNU
NW5xJ1PJvnkTmx+z2Dw5hTCQeFgGLAX1OL6oUK0d2T4SZOUjLy8+aochV02xPr3+
mgbbKC/irZrLFuYBU1VqXDcjY/0ZDvq3Bye/rx6trTy5yYs4f6Pr6jxRjYxQs9TB
i6dyM0eMgQwcBoKufUX+sbL4j75Y2gjv9MwX+17aYmcKSAXG1nMQYcqDGoiU88rR
imeHqzAcsfupIglu+KEam4qDTg6VjAHfUrUPQvSGLEV1f5Zxba1gH51BgneJ0H/8
CueFE8wo2Nz6gQ0U7o94vb38KwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGleMHfz
gKZNhZ4dHmOuzfJECnirMB8GA1UdIwQYMBaAFPrX7MnAXNjrIFaQnWxhRxXixRM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0I5NS9CNTRBM0MzNDgw
MzUxMUVDOUFEREE1NEZDNEY5QUUwMi8tdGZzeWNCYzJPc2dWcENkYkdGSEZlTEZF
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10ZnN5Y0JjMk9zZ1ZwQ2RiR0ZIRmVMRkV6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCOTUvQjU0QTNDMzQ4MDM1MTFFQzlBRERBNTRGQzRGOUFFMDIvODREMzdGQzZB
RkZGMTFGMThFNERBQ0Y5NjMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK+SdMA0GCSqGSIb3DQEBCwUAA4IBAQCKsT2rLvoWRyx4w1TSkGLJ
F/Z74XYMNkNXPUwC/p0clUIHDiGb/JeH8CRvWBLgKXA8ok0WyXxMVPrbbhkxrrx4
FBy82+iDvN1khu7du+gCLHNNtNlspx99B1U7r5lKm1sUo9J42a0/nTypehh+W/VN
mvey2yg/w6c+m/ClrZ4159Bs0LTI2YenslRw7C9O1lVxEWoe3Xfd4mSKNmcPbZXE
fnw8+Q6U6/AoQ8jMbBY77LftLhOf/5LQNn1tQkn16yJ66InpbKynLEMsvm9WlmAQ
KZEklIAnyvOnZD3RherR9u/IfM06JShIHrKYulOTbujzFDz+SKydGsldnEAM3qw4
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:44 2026 by rpki-client