Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C7ADA138F4C011EAA7B25986C4F9AE02.roa
File:                     C7ADA138F4C011EAA7B25986C4F9AE02.roa (raw, json)
Hash identifier:          ZkPeqkCK4GzWM6lROTZZvtSHrWSOnvfHR71wg6XscYk=
Subject key identifier:   56:23:EF:23:74:F3:E1:EC:F0:9F:99:BD:0C:E4:F3:37:BE:FD:BE:F2
Certificate issuer:       /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Certificate serial:       088E
Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C7ADA138F4C011EAA7B25986C4F9AE02.roa
Signing time:             Mon 30 Mar 2026 21:27:02 +0000
ROA not before:           Mon 30 Mar 2026 21:27:02 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138527
IP address blocks:        116.204.208.0/24 maxlen: 24
                          116.204.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
                          rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
        Validity
            Not Before: Mar 30 21:27:02 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69caeaa6-1bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:a3:63:fb:49:cb:38:6f:95:01:57:e4:61:
                    20:9f:ae:46:25:e2:6c:2c:fd:15:2c:69:4c:5f:14:
                    2e:98:7e:a8:b8:67:66:1f:68:9c:b5:28:1f:3f:31:
                    06:77:31:9b:44:fa:13:12:8a:7c:d9:a1:fb:b2:a8:
                    2c:9c:d0:ec:c0:bb:bd:5e:8b:bb:0c:cb:5e:62:9b:
                    50:29:36:98:e3:6b:68:0c:dd:6a:9b:21:f8:0d:ee:
                    09:71:cf:a2:c7:02:51:14:27:06:f7:57:d9:6a:51:
                    90:3b:1b:9f:44:b1:8d:a9:b9:4e:aa:d5:00:ea:4b:
                    73:ff:3e:b3:a8:8b:0c:cb:63:f4:5b:1b:fb:7a:45:
                    c8:dd:ae:9a:5b:86:a7:33:f2:27:49:74:65:b8:6d:
                    74:73:84:fd:f5:13:22:b8:6e:71:42:18:1a:d4:3c:
                    72:56:c2:b2:9c:76:aa:9e:04:ad:e1:02:e5:2e:45:
                    93:bf:d7:7c:e6:8c:73:9d:de:22:ba:00:99:2c:d4:
                    7c:4a:27:84:5c:b7:d7:5e:2d:67:41:0b:53:44:77:
                    85:39:63:3a:a4:00:cc:b8:54:98:2d:40:ef:c8:00:
                    0d:e5:af:e6:85:9b:7e:76:b3:6e:34:af:82:c1:fd:
                    be:10:1c:08:4f:9c:c8:85:21:2b:c7:72:35:ed:d9:
                    19:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:23:EF:23:74:F3:E1:EC:F0:9F:99:BD:0C:E4:F3:37:BE:FD:BE:F2
            X509v3 Authority Key Identifier:
                keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C7ADA138F4C011EAA7B25986C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:40:4b:89:51:06:9c:e4:06:5a:46:20:94:53:6d:9e:fb:c0:
         4e:6c:bc:87:b7:ff:79:dc:b4:42:bd:31:da:b3:04:0c:9f:8b:
         2c:7c:e3:f7:9c:fa:cd:cd:1e:30:ed:9f:b3:ba:83:53:a0:7c:
         52:38:d6:e5:fd:22:02:01:a6:06:4b:93:d0:f0:30:97:ef:71:
         34:60:26:3b:09:45:b8:33:4e:d3:c6:c7:41:e4:43:78:97:ed:
         a0:35:f4:c8:69:58:49:42:27:fd:2c:72:9a:03:e6:f7:f9:b5:
         6a:a1:25:d6:04:41:30:a5:79:ff:13:33:eb:0e:ca:d0:c3:b3:
         c2:68:57:24:b8:71:08:ca:14:43:91:88:0b:ee:ed:95:66:c2:
         95:08:4c:db:fb:2f:68:7e:b4:1a:90:e1:8d:c4:41:b7:9c:22:
         5e:ff:ab:e7:60:47:ae:72:00:67:6b:9c:28:82:f6:0a:3f:d2:
         39:b9:2f:b3:a0:61:83:d5:90:2c:87:b1:14:ff:d6:86:6e:09:
         7a:73:8a:fd:f9:73:99:72:07:fb:42:c5:84:b7:b6:a8:93:cc:
         be:8f:15:e9:87:e2:7d:7c:08:b8:80:7b:cd:d8:97:7a:cf:c1:
         59:aa:ad:b3:c3:95:6c:3a:d0:1e:95:53:15:a3:33:0d:6f:c2:
         29:6b:1a:96
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2
MkE2REU4RjEwHhcNMjYwMzMwMjEyNzAyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNhZWFhNi0xYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSujY/tJyzhvlQFX5GEgn65GJeJsLP0VLGlMXxQumH6ouGdmH2ictSgfPzEG
dzGbRPoTEop82aH7sqgsnNDswLu9Xou7DMteYptQKTaY42toDN1qmyH4De4Jcc+i
xwJRFCcG91fZalGQOxufRLGNqblOqtUA6ktz/z6zqIsMy2P0Wxv7ekXI3a6aW4an
M/InSXRluG10c4T99RMiuG5xQhga1DxyVsKynHaqngSt4QLlLkWTv9d85oxznd4i
ugCZLNR8SieEXLfXXi1nQQtTRHeFOWM6pADMuFSYLUDvyAAN5a/mhZt+drNuNK+C
wf2+EBwIT5zIhSErx3I17dkZaQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFYj7yN0
8+Hs8J+ZvQzk8ze+/b7yMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0
QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTVERTUvRTNFRDY1RDhGNEJFMTFFQTlDMzVGRTZBQzRGOUFFMDIvQzdBREExMzhG
NEMwMTFFQUE3QjI1OTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBdMzQMA0GCSqGSIb3DQEBCwUAA4IBAQBGQEuJUQac5AZaRiCUU22e
+8BObLyHt/953LRCvTHaswQMn4ssfOP3nPrNzR4w7Z+zuoNToHxSONbl/SICAaYG
S5PQ8DCX73E0YCY7CUW4M07TxsdB5EN4l+2gNfTIaVhJQif9LHKaA+b3+bVqoSXW
BEEwpXn/EzPrDsrQw7PCaFckuHEIyhRDkYgL7u2VZsKVCEzb+y9ofrQakOGNxEG3
nCJe/6vnYEeucgBna5wogvYKP9I5uS+zoGGD1ZAsh7EU/9aGbgl6c4r9+XOZcgf7
QsWEt7aok8y+jxXph+J9fAi4gHvN2Jd6z8FZqq2zw5VsOtAelVMVozMNb8IpaxqW
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:32:43 2026 by rpki-client