Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/9566944A8D4111EB81CBE475C4F9AE02.roa
File:                     9566944A8D4111EB81CBE475C4F9AE02.roa (raw, json)
Hash identifier:          Td8fpDl1muyggYTNSgp6i/pQqHmwkCCIVXTLbwgwDlA=
Subject key identifier:   7D:22:8D:D2:53:8B:CA:B9:C8:68:C0:A4:EF:92:A6:0B:5F:D8:CF:EB
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       365D
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/9566944A8D4111EB81CBE475C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:18:35 +0000
ROA not before:           Wed 04 Jun 2025 15:10:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140544
IP address blocks:        114.130.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13917 (0x365d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: Jun  4 15:10:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a474eb-e9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:60:2b:88:79:ff:cd:cc:07:26:2e:c3:18:
                    dc:db:81:5a:26:e6:86:44:08:03:a6:c6:83:11:00:
                    8a:c3:2a:85:df:05:54:c5:34:a7:bc:8c:40:42:35:
                    b5:09:d3:5e:c6:dd:ae:fa:6b:b0:80:fc:8e:60:e3:
                    4d:db:90:8f:4f:d7:fe:c1:b8:97:f8:1f:8a:aa:f1:
                    46:01:c7:54:bf:d1:d6:a1:d7:2b:50:79:4c:2b:28:
                    83:fc:7b:59:5c:cc:c4:2c:81:78:16:3f:fa:84:ac:
                    cd:cc:3e:18:36:89:52:67:9d:e5:47:e1:86:7a:66:
                    df:87:7b:0e:6b:3f:11:75:4f:74:5b:11:d9:ba:f2:
                    15:19:79:0b:f0:12:de:30:7d:af:4a:09:17:42:3a:
                    d0:9d:0b:4d:63:cc:c1:13:8f:7f:f0:97:be:d7:86:
                    cc:13:1d:07:ad:be:e5:af:46:c7:09:bd:1b:85:2a:
                    e9:5c:84:17:a2:52:0b:b2:00:43:c3:6a:6e:e7:15:
                    80:28:57:8e:94:19:ec:f4:a0:b2:eb:36:f3:89:da:
                    fe:8a:24:06:c7:6f:1b:00:20:30:37:6b:4e:5c:e4:
                    b0:7c:d8:2d:99:b2:51:1d:a6:0c:fb:51:7e:3d:4f:
                    54:0d:6d:01:b7:6e:a2:4f:be:c0:8b:6d:fd:10:c5:
                    3e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:22:8D:D2:53:8B:CA:B9:C8:68:C0:A4:EF:92:A6:0B:5F:D8:CF:EB
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/9566944A8D4111EB81CBE475C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:1f:db:71:f9:83:f3:16:06:36:2c:f0:e6:d0:8c:ac:5c:39:
         c4:08:c8:48:22:83:1c:64:34:b7:29:21:85:da:c3:5b:1e:30:
         55:01:eb:df:df:8c:5b:95:51:69:20:14:fe:88:59:b5:0c:55:
         4a:c0:61:35:8c:b0:30:8b:33:b8:65:82:a0:6a:7d:90:50:17:
         fc:c4:e0:19:c4:8b:ac:7e:ba:07:79:b1:e7:fd:50:b0:31:f1:
         e2:cf:d8:12:b8:2d:98:ac:cd:62:7e:25:bf:71:e6:60:40:f3:
         80:33:cf:d0:96:92:f5:9d:69:5f:c1:7f:81:c5:7f:f2:7b:9d:
         da:7f:c1:92:3d:aa:86:51:92:05:c0:dc:f5:7d:85:1f:cd:d8:
         31:db:6d:43:9c:2e:80:82:d7:62:4f:84:b1:f8:5c:6a:e0:dc:
         f9:74:d8:33:ca:a2:f0:52:fb:fc:b9:e2:d1:69:6d:17:ed:06:
         da:29:1f:60:b8:71:9c:8e:c6:1a:82:3b:3f:86:44:40:13:e3:
         c2:32:2f:25:98:5e:68:33:95:4d:28:23:24:4a:b5:60:9a:3b:
         71:34:47:0d:4c:2d:23:79:b6:eb:23:30:19:7a:4a:5a:36:49:
         2d:53:ca:9f:cd:84:8f:23:be:25:b4:d7:a6:11:19:50:a1:de:
         45:20:85:70
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB
RUE2RkY4MDYwHhcNMjUwNjA0MTUxMDUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzRlYi1lOWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMNgK4h5/83MByYuwxjc24FaJuaGRAgDpsaDEQCKwyqF3wVUxTSnvIxAQjW1
CdNext2u+muwgPyOYONN25CPT9f+wbiX+B+KqvFGAcdUv9HWodcrUHlMKyiD/HtZ
XMzELIF4Fj/6hKzNzD4YNolSZ53lR+GGembfh3sOaz8RdU90WxHZuvIVGXkL8BLe
MH2vSgkXQjrQnQtNY8zBE49/8Je+14bMEx0Hrb7lr0bHCb0bhSrpXIQXolILsgBD
w2pu5xWAKFeOlBns9KCy6zbzidr+iiQGx28bACAwN2tOXOSwfNgtmbJRHaYM+1F+
PU9UDW0Bt26iT77Ai239EMU+kwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH0ijdJT
i8q5yGjApO+Spgtf2M/rMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE
OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvOTU2Njk0NEE4
RDQxMTFFQjgxQ0JFNDc1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcoJNMA0GCSqGSIb3DQEBCwUAA4IBAQAtH9tx+YPzFgY2LPDm0Iys
XDnECMhIIoMcZDS3KSGF2sNbHjBVAevf34xblVFpIBT+iFm1DFVKwGE1jLAwizO4
ZYKgan2QUBf8xOAZxIusfroHebHn/VCwMfHiz9gSuC2YrM1ifiW/ceZgQPOAM8/Q
lpL1nWlfwX+BxX/ye53af8GSPaqGUZIFwNz1fYUfzdgx221DnC6AgtdiT4Sx+Fxq
4Nz5dNgzyqLwUvv8ueLRaW0X7QbaKR9guHGcjsYagjs/hkRAE+PCMi8lmF5oM5VN
KCMkSrVgmjtxNEcNTC0jebbrIzAZekpaNkktU8qfzYSPI74ltNemERlQod5FIIVw
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:25:02 2026 by rpki-client