Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa
File:                     35C008E818C811F0BF9E881FC4F9AE02.roa (raw, json)
Hash identifier:          EwTXYjhkuYmnK5REc5ttyfrL9ha6tGMNAAZThk/k3Bo=
Subject key identifier:   08:88:18:DA:E5:13:9B:7B:D8:7F:95:83:4C:B0:0D:A2:74:55:42:7B
Certificate issuer:       /CN=A919D3F9/serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
Certificate serial:       F5
Authority key identifier: 33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa
Signing time:             Sat 25 Jul 2026 08:56:58 +0000
ROA not before:           Sat 25 Jul 2026 08:56:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149872
IP address blocks:        203.4.164.0/22 maxlen: 22
                          203.4.164.0/24 maxlen: 24
                          203.4.165.0/24 maxlen: 24
                          203.4.166.0/24 maxlen: 24
                          203.4.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl
                          rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D3F9, serialNumber=3362AC58EDB189CF25783C27D90A7D2FA32977C5
        Validity
            Not Before: Jul 25 08:56:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a647a5a-4062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c1:85:24:73:d9:1f:4b:54:6f:66:27:38:4a:
                    a7:37:05:8a:61:55:62:0e:e3:6c:31:2a:c8:8c:c4:
                    64:e9:f8:95:1d:8d:8b:ca:5b:eb:79:ba:61:cc:9b:
                    57:c3:1b:d7:5d:16:81:18:21:99:05:a6:55:5f:0d:
                    a6:32:6a:4f:8a:9d:91:09:c5:e0:9f:03:0b:66:0a:
                    43:66:37:12:00:30:f8:bc:92:c0:25:87:59:6d:8d:
                    c8:77:a1:42:40:71:6c:17:64:99:bb:80:c6:88:ef:
                    f1:51:24:f3:93:77:94:35:07:ba:eb:fc:ab:75:98:
                    0c:54:24:f0:22:e7:0e:50:bf:01:44:4d:49:a6:a6:
                    d0:9f:d2:75:b4:a0:5f:a4:11:b9:49:66:c2:71:6e:
                    16:c1:27:6f:21:6e:f3:cf:ec:88:1f:af:10:ec:51:
                    b6:2a:fd:fb:e9:7c:e0:14:e5:6d:52:5a:37:4e:1f:
                    c4:77:7e:c8:9b:14:8c:30:78:b9:d2:86:e7:9c:51:
                    2f:7b:ff:67:92:27:35:c7:1d:8b:fd:3d:ee:4f:87:
                    e9:3a:94:98:eb:18:b6:1a:7b:38:30:f1:35:54:b5:
                    2d:d6:3d:e6:d9:c8:7b:ee:9c:25:1d:6d:a4:0f:21:
                    b9:26:da:6a:74:1e:fd:2f:a1:7f:72:c5:19:1e:f6:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:88:18:DA:E5:13:9B:7B:D8:7F:95:83:4C:B0:0D:A2:74:55:42:7B
            X509v3 Authority Key Identifier:
                keyid:33:62:AC:58:ED:B1:89:CF:25:78:3C:27:D9:0A:7D:2F:A3:29:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/M2KsWO2xic8leDwn2Qp9L6Mpd8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2KsWO2xic8leDwn2Qp9L6Mpd8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3F9/122236E618C711F08054177EC4F9AE02/35C008E818C811F0BF9E881FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.4.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:6b:11:30:d9:2d:df:71:83:52:0c:ad:4c:1c:72:b5:ce:d0:
         67:b8:8c:ff:55:92:cf:64:85:47:12:c2:6b:e0:f2:3e:1a:f8:
         cc:b1:13:75:7a:04:75:52:f5:f9:69:7e:f6:76:8a:53:8e:e2:
         74:bf:5b:6b:9f:23:f4:ea:73:9b:ff:95:33:cc:26:aa:20:71:
         a9:00:94:7d:58:42:56:9c:04:a8:be:3e:71:e8:22:62:bb:d0:
         dc:5e:b2:2e:1a:8d:f5:aa:95:93:b4:86:9f:7d:32:67:5a:fb:
         16:b9:fc:ac:ed:46:c3:05:6e:e0:9e:c6:53:7c:f9:6f:16:54:
         73:57:0c:4d:9a:83:41:a4:80:41:8b:e4:cc:66:ac:ec:20:ed:
         25:47:ee:07:04:f1:56:46:61:6f:a5:99:c2:64:6e:e2:85:97:
         cd:db:72:ec:84:66:78:e5:c9:79:70:d8:48:1a:29:0d:d5:0e:
         2d:62:2a:02:f0:65:b2:9d:54:40:ba:24:3d:ef:d4:03:01:a6:
         72:bc:84:27:3d:cb:fd:0e:26:6d:9e:54:36:c9:0f:e2:53:df:
         54:ed:36:a6:02:e7:80:0b:22:44:f3:d9:40:32:78:60:61:0e:
         cc:10:27:cd:1e:fc:d1:93:36:ad:92:d7:e9:44:a4:1b:62:d0:
         f8:a6:1d:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQzRjkxMTAvBgNVBAUTKDMzNjJBQzU4RURCMTg5Q0YyNTc4M0MyN0Q5MEE3RDJG
QTMyOTc3QzUwHhcNMjYwNzI1MDg1NjU4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY0N2E1YS00MDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7cGFJHPZH0tUb2YnOEqnNwWKYVViDuNsMSrIjMRk6fiVHY2LylvrebphzJtX
wxvXXRaBGCGZBaZVXw2mMmpPip2RCcXgnwMLZgpDZjcSADD4vJLAJYdZbY3Id6FC
QHFsF2SZu4DGiO/xUSTzk3eUNQe66/yrdZgMVCTwIucOUL8BRE1JpqbQn9J1tKBf
pBG5SWbCcW4WwSdvIW7zz+yIH68Q7FG2Kv376XzgFOVtUlo3Th/Ed37ImxSMMHi5
0obnnFEve/9nkic1xx2L/T3uT4fpOpSY6xi2Gns4MPE1VLUt1j3m2ch77pwlHW2k
DyG5JtpqdB79L6F/csUZHvZs1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAiIGNrl
E5t72H+Vg0ywDaJ0VUJ7MB8GA1UdIwQYMBaAFDNirFjtsYnPJXg8J9kKfS+jKXfF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDNGOS8xMjIyMzZFNjE4
QzcxMUYwODA1NDE3N0VDNEY5QUUwMi9NMktzV08yeGljOGxlRHduMlFwOUw2TXBk
OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yS3NXTzJ4aWM4bGVEd24yUXA5TDZNcGQ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQzRjkvMTIyMjM2RTYxOEM3MTFGMDgwNTQxNzdFQzRGOUFFMDIvMzVDMDA4RTgx
OEM4MTFGMEJGOUU4ODFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCywSkMA0GCSqGSIb3DQEBCwUAA4IBAQCBaxEw2S3fcYNSDK1MHHK1
ztBnuIz/VZLPZIVHEsJr4PI+GvjMsRN1egR1UvX5aX72dopTjuJ0v1trnyP06nOb
/5UzzCaqIHGpAJR9WEJWnASovj5x6CJiu9DcXrIuGo31qpWTtIaffTJnWvsWufys
7UbDBW7gnsZTfPlvFlRzVwxNmoNBpIBBi+TMZqzsIO0lR+4HBPFWRmFvpZnCZG7i
hZfN23LshGZ45cl5cNhIGikN1Q4tYioC8GWynVRAuiQ979QDAaZyvIQnPcv9DiZt
nlQ2yQ/iU99U7TamAueACyJE89lAMnhgYQ7MECfNHvzRkzatktfpRKQbYtD4ph37
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:28:38 2026 by rpki-client