Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/283AD1AEF15C11F092AE22215F6F56BC.roa
File:                     283AD1AEF15C11F092AE22215F6F56BC.roa (raw, json)
Hash identifier:          iQT1BpKJwTgvvQmF8C+Try08CeS6YRGE1ESciKhbwPE=
Subject key identifier:   E2:AA:93:51:48:A2:F3:F0:C6:3E:1D:D8:51:C5:80:D2:24:33:D4:4C
Certificate issuer:       /CN=A9192F5B/serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
Certificate serial:       B5
Authority key identifier: C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/283AD1AEF15C11F092AE22215F6F56BC.roa
Signing time:             Mon 21 Sep 2026 07:58:19 +0000
ROA not before:           Mon 21 Sep 2026 07:58:19 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     138640
IP address blocks:        138.252.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=C2D6C79A677C97EC7006313BE9167E0DE66CA452
        Validity
            Not Before: Sep 21 07:58:19 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ab0e39b-6c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:ea:a7:01:ca:c4:fa:84:5d:97:3c:db:2b:
                    07:64:d2:a1:d1:3a:ea:e2:21:8f:c1:84:e5:62:5b:
                    97:84:94:cf:82:87:17:43:f4:20:f0:f2:2f:51:b9:
                    94:b2:77:00:83:0f:1d:d3:16:93:b6:e3:72:ab:c4:
                    21:bf:8e:30:15:d9:24:61:8d:e5:9f:62:1a:b2:c5:
                    83:d7:db:01:50:6a:4c:4b:f0:e9:df:d1:ed:d4:d2:
                    c6:6e:19:4f:03:35:9a:57:9c:59:ff:e4:0d:16:da:
                    a3:fc:f6:ab:91:a7:1c:49:14:23:35:51:4c:65:db:
                    24:e9:ce:20:a2:0d:1b:33:0a:09:d5:71:e1:b6:a9:
                    18:6a:c8:74:4c:f5:6c:26:4d:a8:f4:dd:66:8b:9d:
                    da:1b:28:92:33:d5:1c:44:24:cc:8b:2d:92:dd:85:
                    32:c6:35:8f:17:f8:f6:55:1a:86:2f:48:7a:92:44:
                    01:69:27:5c:98:96:a5:a0:5a:05:7c:ee:8e:cf:a3:
                    e0:02:96:e3:8e:5e:86:12:60:1a:79:cc:2d:d1:6f:
                    58:ee:cd:44:38:81:77:f7:23:ea:b7:ec:a0:fa:83:
                    41:ff:fb:fa:19:ff:1e:12:0a:da:c8:a0:61:36:56:
                    e3:a8:82:57:d4:74:0c:73:20:14:d1:70:9a:fb:92:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AA:93:51:48:A2:F3:F0:C6:3E:1D:D8:51:C5:80:D2:24:33:D4:4C
            X509v3 Authority Key Identifier:
                keyid:C2:D6:C7:9A:67:7C:97:EC:70:06:31:3B:E9:16:7E:0D:E6:6C:A4:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/wtbHmmd8l-xwBjE76RZ-DeZspFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wtbHmmd8l-xwBjE76RZ-DeZspFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/CDABF182B4B111F0ADC2B11FC4F9AE02/283AD1AEF15C11F092AE22215F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e7:8c:80:a2:b2:06:e9:6d:2d:45:8e:7f:f8:a8:3c:72:94:
         52:1b:98:ae:b7:1a:16:c7:be:2f:16:2b:9f:cf:6c:28:5c:16:
         a9:10:3d:97:6b:0f:0a:e4:a0:05:4d:af:16:58:f1:b0:ee:76:
         ed:09:bc:53:79:7a:61:da:54:09:f9:87:bc:af:23:9a:b0:e5:
         61:fa:33:70:09:d9:db:7e:a3:b2:ce:4a:21:c6:d3:d6:ca:50:
         c9:ae:64:ad:8a:15:f6:51:6d:ab:10:84:0e:1c:c1:a4:b7:f6:
         7b:f1:18:2a:98:8d:b1:02:c7:e9:ee:a0:73:86:df:88:e8:47:
         c7:eb:3f:c0:a8:df:9d:1f:ee:02:62:55:06:d2:f7:9f:3d:12:
         61:c2:44:b5:ec:4f:da:73:46:d0:35:d9:cd:ff:71:f2:4a:07:
         db:b8:5d:e7:99:0f:be:b0:66:88:7f:80:79:25:13:9c:dd:b4:
         63:ea:c5:15:8f:4e:be:ac:e8:02:e5:71:1b:4f:dc:10:2b:e2:
         25:d7:dd:01:c2:23:cc:d6:c2:31:fd:7f:f9:cc:9e:2f:ed:4e:
         ff:75:d9:bd:07:77:7f:20:bf:96:ae:35:93:b5:e3:19:0b:0b:
         73:38:2e:59:58:b4:ed:c5:8d:a7:69:4b:56:27:71:ec:d1:1f:
         68:0a:ff:40
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJGNUIxMTAvBgNVBAUTKEMyRDZDNzlBNjc3Qzk3RUM3MDA2MzEzQkU5MTY3RTBE
RTY2Q0E0NTIwHhcNMjYwOTIxMDc1ODE5WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIwZTM5Yi02YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4nqpwHKxPqEXZc82ysHZNKh0Trq4iGPwYTlYluXhJTPgocXQ/Qg8PIvUbmU
sncAgw8d0xaTtuNyq8Qhv44wFdkkYY3ln2IassWD19sBUGpMS/Dp39Ht1NLGbhlP
AzWaV5xZ/+QNFtqj/ParkaccSRQjNVFMZdsk6c4gog0bMwoJ1XHhtqkYash0TPVs
Jk2o9N1mi53aGyiSM9UcRCTMiy2S3YUyxjWPF/j2VRqGL0h6kkQBaSdcmJaloFoF
fO6Oz6PgApbjjl6GEmAaecwt0W9Y7s1EOIF39yPqt+yg+oNB//v6Gf8eEgrayKBh
NlbjqIJX1HQMcyAU0XCa+5JT7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOKqk1FI
ovPwxj4d2FHFgNIkM9RMMB8GA1UdIwQYMBaAFMLWx5pnfJfscAYxO+kWfg3mbKRS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkY1Qi9DREFCRjE4MkI0
QjExMUYwQURDMkIxMUZDNEY5QUUwMi93dGJIbW1kOGwteHdCakU3NlJaLURlWnNw
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3d0YkhtbWQ4bC14d0JqRTc2UlotRGVac3BGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJGNUIvQ0RBQkYxODJCNEIxMTFGMEFEQzJCMTFGQzRGOUFFMDIvMjgzQUQxQUVG
MTVDMTFGMDkyQUUyMjIxNUY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAivxxMA0GCSqGSIb3DQEBCwUAA4IBAQAk54yAorIG6W0tRY5/+Kg8
cpRSG5iutxoWx74vFiufz2woXBapED2Xaw8K5KAFTa8WWPGw7nbtCbxTeXph2lQJ
+Ye8ryOasOVh+jNwCdnbfqOyzkohxtPWylDJrmStihX2UW2rEIQOHMGkt/Z78Rgq
mI2xAsfp7qBzht+I6EfH6z/AqN+dH+4CYlUG0vefPRJhwkS17E/ac0bQNdnN/3Hy
SgfbuF3nmQ++sGaIf4B5JROc3bRj6sUVj06+rOgC5XEbT9wQK+Il190BwiPM1sIx
/X/5zJ4v7U7/ddm9B3d/IL+WrjWTteMZCwtzOC5ZWLTtxY2naUtWJ3Hs0R9oCv9A
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:05:57 2026 by rpki-client