Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/37E179CC6F0011EEAFD97016C4F9AE02.roa
File:                     37E179CC6F0011EEAFD97016C4F9AE02.roa (raw, json)
Hash identifier:          M6AAsj/qsyc9cMRmg9WVLpvBjMHjZR+jBZMv5tgZYfo=
Subject key identifier:   4A:A1:9A:E9:A8:FC:78:41:41:89:F2:33:70:C4:65:D5:6F:E8:F2:43
Certificate issuer:       /CN=A91A1B9F/serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
Certificate serial:       0224
Authority key identifier: F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/37E179CC6F0011EEAFD97016C4F9AE02.roa
Signing time:             Mon 07 Sep 2026 02:52:49 +0000
ROA not before:           Mon 07 Sep 2026 02:52:49 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     10143
IP address blocks:        203.21.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1B9F, serialNumber=F53E56407698C1FAA75D25765513B507652C97AB
        Validity
            Not Before: Sep  7 02:52:49 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e2701-82e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:07:b1:de:94:af:8d:b7:03:86:a2:81:4b:
                    08:55:5f:eb:c6:21:15:31:2e:34:71:4b:35:0e:c1:
                    29:38:2b:b4:55:63:28:3b:e6:e8:68:39:4d:8c:29:
                    3e:93:8e:04:24:dc:ec:a0:be:d8:29:74:4b:5d:62:
                    6a:01:2e:23:1a:4c:13:74:fd:60:62:10:13:95:02:
                    26:69:3d:d3:c8:d3:ac:d3:ec:e6:41:72:9a:91:af:
                    95:39:98:4e:ef:85:0d:89:1e:3b:ef:99:0f:77:f7:
                    39:7e:b0:a6:ac:ca:ee:dd:54:8a:76:da:34:ad:8b:
                    34:4c:15:1e:14:2f:8a:2f:e4:d5:91:dd:e3:b9:ec:
                    d3:c4:45:20:2e:62:2e:f3:bb:28:92:55:87:46:6d:
                    c3:fa:c2:9c:80:ef:a1:23:81:c9:12:d0:03:9f:fe:
                    f9:80:90:30:5d:60:d8:b9:df:cf:41:8a:e7:65:cb:
                    a3:ac:f4:3a:99:e8:b0:5a:c7:36:ac:8b:2f:44:bb:
                    2e:45:fb:63:97:f9:4a:d3:88:34:ca:ca:e1:9b:02:
                    ea:0d:e3:6e:61:ee:b1:fe:09:92:4b:45:f0:84:7b:
                    ab:40:1b:a4:5d:d6:dc:8e:06:cd:d4:c5:66:c6:26:
                    6c:19:28:1f:4d:0e:6a:ac:ef:b2:7a:77:85:a9:c2:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:9A:E9:A8:FC:78:41:41:89:F2:33:70:C4:65:D5:6F:E8:F2:43
            X509v3 Authority Key Identifier:
                keyid:F5:3E:56:40:76:98:C1:FA:A7:5D:25:76:55:13:B5:07:65:2C:97:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/9T5WQHaYwfqnXSV2VRO1B2Usl6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9T5WQHaYwfqnXSV2VRO1B2Usl6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1B9F/569229026E1511EE8D6ED458C4F9AE02/37E179CC6F0011EEAFD97016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:38:d6:e4:12:55:96:eb:18:11:37:01:15:ed:17:1c:2e:b0:
         44:dd:3d:27:e3:4f:a2:2b:bb:40:eb:06:52:91:6d:b5:b7:72:
         cd:73:1f:d8:b2:ea:46:9e:b1:2a:27:dd:6f:b9:1d:99:1f:27:
         2b:06:d7:86:4b:27:66:ab:64:57:59:2b:c8:73:c4:76:0e:b4:
         b1:df:2e:01:32:a3:94:6c:6e:16:9e:96:bf:31:3a:f3:19:20:
         a6:cc:60:d4:c0:69:d1:3b:95:ca:94:b2:c5:07:18:47:58:25:
         27:54:ee:09:eb:c4:bc:33:6e:b4:25:f5:53:f2:a3:61:a0:6b:
         31:c6:fe:11:3d:94:c5:e8:44:a9:8e:14:43:d6:03:1b:6c:c3:
         09:dc:7d:54:5d:68:6d:b7:44:01:4e:ed:37:02:60:6e:44:0c:
         03:87:2a:58:8c:d1:81:91:e9:23:57:1a:35:28:bb:4a:3e:b8:
         ba:23:8a:b2:ad:f4:7a:3d:a5:30:8c:f6:20:47:34:30:73:aa:
         0f:ed:b0:f9:97:83:61:39:cd:46:27:37:72:a0:66:7b:11:fe:
         03:2a:a5:10:b2:6e:d6:b4:2a:a7:f2:f4:f0:ea:a4:a2:9b:64:
         f9:4e:da:4c:61:a4:37:0a:ac:3c:f6:39:bd:30:6d:f3:15:6e:
         79:32:36:bf
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFCOUYxMTAvBgNVBAUTKEY1M0U1NjQwNzY5OEMxRkFBNzVEMjU3NjU1MTNCNTA3
NjUyQzk3QUIwHhcNMjYwOTA3MDI1MjQ5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTllMjcwMS04MmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoBsHsd6Ur423A4aigUsIVV/rxiEVMS40cUs1DsEpOCu0VWMoO+boaDlNjCk+
k44EJNzsoL7YKXRLXWJqAS4jGkwTdP1gYhATlQImaT3TyNOs0+zmQXKaka+VOZhO
74UNiR4775kPd/c5frCmrMru3VSKdto0rYs0TBUeFC+KL+TVkd3juezTxEUgLmIu
87soklWHRm3D+sKcgO+hI4HJEtADn/75gJAwXWDYud/PQYrnZcujrPQ6meiwWsc2
rIsvRLsuRftjl/lK04g0ysrhmwLqDeNuYe6x/gmSS0XwhHurQBukXdbcjgbN1MVm
xiZsGSgfTQ5qrO+yeneFqcKLSQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEqhmumo
/HhBQYnyM3DEZdVv6PJDMB8GA1UdIwQYMBaAFPU+VkB2mMH6p10ldlUTtQdlLJer
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUI5Ri81NjkyMjkwMjZF
MTUxMUVFOEQ2RUQ0NThDNEY5QUUwMi85VDVXUUhhWXdmcW5YU1YyVlJPMUIyVXNs
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlUNVdRSGFZd2ZxblhTVjJWUk8xQjJVc2w2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTFCOUYvNTY5MjI5MDI2RTE1MTFFRThENkVENDU4QzRGOUFFMDIvMzdFMTc5Q0M2
RjAwMTFFRUFGRDk3MDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxUJMA0GCSqGSIb3DQEBCwUAA4IBAQB+ONbkElWW6xgRNwEV7Rcc
LrBE3T0n40+iK7tA6wZSkW21t3LNcx/YsupGnrEqJ91vuR2ZHycrBteGSydmq2RX
WSvIc8R2DrSx3y4BMqOUbG4Wnpa/MTrzGSCmzGDUwGnRO5XKlLLFBxhHWCUnVO4J
68S8M260JfVT8qNhoGsxxv4RPZTF6ESpjhRD1gMbbMMJ3H1UXWhtt0QBTu03AmBu
RAwDhypYjNGBkekjVxo1KLtKPri6I4qyrfR6PaUwjPYgRzQwc6oP7bD5l4NhOc1G
JzdyoGZ7Ef4DKqUQsm7WtCqn8vTw6qSim2T5TtpMYaQ3Cqw89jm9MG3zFW55Mja/
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:48:17 2026 by rpki-client