Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/2D77EA64A62C11F18A5BF5FD5011F970.roa
File:                     2D77EA64A62C11F18A5BF5FD5011F970.roa (raw, json)
Hash identifier:          rZSyiS16bcZV60Wq1uiioXxuM8RMHRlnIuGWGNNG6+U=
Subject key identifier:   D2:7A:15:ED:CC:10:53:8B:FD:D0:41:A6:1E:42:F8:F8:42:86:20:7C
Certificate issuer:       /CN=A918E412/serialNumber=2782343BB2B867356A98ACA291562EAE344C781A
Certificate serial:       0D
Authority key identifier: 27:82:34:3B:B2:B8:67:35:6A:98:AC:A2:91:56:2E:AE:34:4C:78:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J4I0O7K4ZzVqmKyikVYurjRMeBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/2D77EA64A62C11F18A5BF5FD5011F970.roa
Signing time:             Tue 01 Sep 2026 17:40:10 +0000
ROA not before:           Tue 01 Sep 2026 17:40:10 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140992
IP address blocks:        163.52.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.crl
                          rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J4I0O7K4ZzVqmKyikVYurjRMeBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E412, serialNumber=2782343BB2B867356A98ACA291562EAE344C781A
        Validity
            Not Before: Sep  1 17:40:10 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a970dfa-b937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:40:5b:b2:a0:7c:06:8a:4f:f5:91:d9:22:f8:
                    ce:05:7d:20:f1:c5:3a:aa:99:e7:68:ce:1d:48:25:
                    00:ac:a8:ee:78:9f:fa:32:e7:64:eb:3e:06:d4:18:
                    75:ae:50:43:eb:4c:e4:eb:6b:e1:80:5a:27:bb:66:
                    39:19:64:6a:36:30:0e:e9:21:81:c6:2a:4d:96:97:
                    de:75:35:d0:35:ee:62:ec:b0:08:20:75:1f:60:07:
                    9f:2d:5b:c2:2f:88:f8:09:be:15:88:41:86:e2:3c:
                    16:fe:3c:64:c9:3a:40:48:cf:ce:f8:63:7e:1b:5e:
                    1c:8b:57:e6:80:ca:2b:76:20:9d:65:b7:27:a9:e5:
                    a0:cf:6c:05:e5:ee:94:8b:57:75:eb:71:b1:9c:1e:
                    0b:ae:d9:45:b0:ad:b8:f7:2b:a2:1b:bb:c1:26:80:
                    d6:92:57:99:53:0b:4d:26:6d:f7:21:fd:7a:a5:20:
                    45:27:f7:8f:93:2f:3b:e3:1c:92:b5:c3:0b:39:51:
                    bc:40:14:f7:c6:b3:25:46:bf:e2:ec:bc:ca:e8:bd:
                    82:30:8b:8d:5a:7b:aa:54:ae:01:c7:0e:62:76:fd:
                    7b:1c:6b:5e:f6:e1:7d:bf:cb:80:3c:b4:5b:3d:09:
                    07:d5:36:25:65:40:b8:8a:55:1c:8d:5e:2f:d9:9b:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7A:15:ED:CC:10:53:8B:FD:D0:41:A6:1E:42:F8:F8:42:86:20:7C
            X509v3 Authority Key Identifier:
                keyid:27:82:34:3B:B2:B8:67:35:6A:98:AC:A2:91:56:2E:AE:34:4C:78:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/J4I0O7K4ZzVqmKyikVYurjRMeBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J4I0O7K4ZzVqmKyikVYurjRMeBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E412/56F755389B8611F19A213E324511F970/2D77EA64A62C11F18A5BF5FD5011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:87:f6:f1:96:9e:0f:f5:32:9d:8a:d3:5b:17:1d:94:af:cd:
         cb:23:e3:3a:86:23:3e:62:ff:2f:fc:97:8a:58:52:81:8d:0a:
         ca:62:eb:27:f1:1f:12:b8:0e:d2:10:16:a1:3d:de:81:c1:b8:
         11:77:64:fe:99:e4:6c:cb:fc:f2:ac:73:93:ba:0f:1d:53:b9:
         68:55:bc:91:ee:89:6f:d6:fb:0e:1f:ba:e2:c1:49:a1:96:34:
         20:1c:a5:32:97:4a:36:90:e0:ff:10:63:ab:3c:78:d4:ba:7f:
         a8:63:6d:f3:22:63:3f:31:6c:02:13:e5:c2:d5:44:0f:40:14:
         2f:3b:57:e0:8c:28:d6:1e:23:95:4d:9e:d3:5f:34:6f:ff:cb:
         aa:d0:68:7e:4e:c9:53:0c:52:83:28:0a:8a:bf:1b:8b:74:5d:
         88:0a:e2:73:40:55:22:44:8a:b1:ae:16:2b:f5:e5:94:b7:4c:
         c3:af:b2:58:57:14:90:30:41:44:bb:0f:35:b1:b5:65:4d:ee:
         91:55:47:47:02:cc:83:89:31:41:08:34:4f:27:2a:25:e7:ba:
         dc:9c:44:14:88:93:11:fe:01:65:51:d5:4c:ff:b0:92:84:ed:
         05:d7:29:f1:ab:6a:a0:9f:8c:3f:b0:9d:b8:93:03:ed:ac:5b:
         5a:a6:ae:02
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RTQxMjExMC8GA1UEBRMoMjc4MjM0M0JCMkI4NjczNTZBOThBQ0EyOTE1NjJFQUUz
NDRDNzgxQTAeFw0yNjA5MDExNzQwMTBaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOTcwZGZhLWI5MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCQFuyoHwGik/1kdki+M4FfSDxxTqqmedozh1IJQCsqO54n/oy52TrPgbUGHWu
UEPrTOTra+GAWie7ZjkZZGo2MA7pIYHGKk2Wl951NdA17mLssAggdR9gB58tW8Iv
iPgJvhWIQYbiPBb+PGTJOkBIz874Y34bXhyLV+aAyit2IJ1ltyep5aDPbAXl7pSL
V3XrcbGcHguu2UWwrbj3K6Ibu8EmgNaSV5lTC00mbfch/XqlIEUn94+TLzvjHJK1
wws5UbxAFPfGsyVGv+LsvMrovYIwi41ae6pUrgHHDmJ2/Xsca1724X2/y4A8tFs9
CQfVNiVlQLiKVRyNXi/Zm0YxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU0noV7cwQ
U4v90EGmHkL4+EKGIHwwHwYDVR0jBBgwFoAUJ4I0O7K4ZzVqmKyikVYurjRMeBow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFNDEyLzU2Rjc1NTM4OUI4
NjExRjE5QTIxM0UzMjQ1MTFGOTcwL0o0STBPN0s0WnpWcW1LeWlrVll1cmpSTWVC
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSjRJME83SzRaelZxbUt5aWtWWXVyalJNZUJvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTQxMi81NkY3NTUzODlCODYxMUYxOUEyMTNFMzI0NTExRjk3MC8yRDc3RUE2NEE2
MkMxMUYxOEE1QkY1RkQ1MDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACjNBgwDQYJKoZIhvcNAQELBQADggEBADSH9vGWng/1Mp2K01sXHZSv
zcsj4zqGIz5i/y/8l4pYUoGNCspi6yfxHxK4DtIQFqE93oHBuBF3ZP6Z5GzL/PKs
c5O6Dx1TuWhVvJHuiW/W+w4fuuLBSaGWNCAcpTKXSjaQ4P8QY6s8eNS6f6hjbfMi
Yz8xbAIT5cLVRA9AFC87V+CMKNYeI5VNntNfNG//y6rQaH5OyVMMUoMoCoq/G4t0
XYgK4nNAVSJEirGuFiv15ZS3TMOvslhXFJAwQUS7DzWxtWVN7pFVR0cCzIOJMUEI
NE8nKiXnutycRBSIkxH+AWVR1Uz/sJKE7QXXKfGraqCfjD+wnbiTA+2sW1qmrgI=
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:00:16 2026 by rpki-client