Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/721E25FEDEEC11F19CB0640DF665CEF9.roa
File:                     721E25FEDEEC11F19CB0640DF665CEF9.roa (raw, json)
Hash identifier:          IEgCxKi0+0SBIMSCXR8hydx3CwoX0S1U6u6OMyGJ3q0=
Subject key identifier:   7F:E6:A4:3C:D6:B9:EA:29:0C:9A:9C:C5:32:64:96:20:A8:98:DE:AB
Certificate issuer:       /CN=A9110127/serialNumber=A12744B995C32AA4AC04C9E6F43E407FBB1B1A31
Certificate serial:       05
Authority key identifier: A1:27:44:B9:95:C3:2A:A4:AC:04:C9:E6:F4:3E:40:7F:BB:1B:1A:31
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSdEuZXDKqSsBMnm9D5Af7sbGjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/721E25FEDEEC11F19CB0640DF665CEF9.roa
Signing time:             Thu 12 Nov 2026 22:58:14 +0000
ROA not before:           Thu 12 Nov 2026 22:58:14 +0000
ROA not after:            Wed 01 Mar 2028 00:00:00 +0000
asID:                     207043
IP address blocks:        141.229.22.0/24 maxlen: 24
                          141.229.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/oSdEuZXDKqSsBMnm9D5Af7sbGjE.crl
                          rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/oSdEuZXDKqSsBMnm9D5Af7sbGjE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSdEuZXDKqSsBMnm9D5Af7sbGjE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 09:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110127, serialNumber=A12744B995C32AA4AC04C9E6F43E407FBB1B1A31
        Validity
            Not Before: Nov 12 22:58:14 2026 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=6af64486-33ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:37:a4:44:db:04:88:65:38:91:ed:20:e8:fd:
                    8b:d2:02:cf:13:34:9b:56:b3:cd:c2:12:cd:92:4d:
                    30:00:b3:bc:b3:86:1b:32:bb:65:59:d5:19:76:d6:
                    88:f5:bb:88:e3:c1:15:a7:60:d3:28:0c:4b:ca:73:
                    36:07:af:c9:20:91:00:78:82:73:26:a2:40:de:6c:
                    1c:27:54:19:5c:c4:e4:e6:94:85:20:c4:4d:a1:ef:
                    c7:7a:53:10:dc:21:3a:06:bb:00:fa:39:7a:2f:1b:
                    79:c0:d5:5d:8a:63:b4:c1:f9:c0:c0:4b:0d:44:0b:
                    14:34:ba:2b:98:9f:66:9a:cd:6b:b1:a6:6e:75:98:
                    34:2e:42:9a:86:bf:34:d6:7f:be:8a:87:f9:64:7e:
                    93:3b:47:ef:ae:8f:59:e2:2a:56:f7:ce:16:49:0d:
                    f9:22:09:5f:9e:32:7c:55:e1:89:63:36:ca:da:0c:
                    23:30:27:c2:51:0d:06:83:7b:a6:3f:7b:e8:ba:b9:
                    3a:1f:a0:9f:ea:cf:13:55:90:46:62:df:94:ae:09:
                    bc:7d:4d:11:91:c8:49:1a:06:ed:de:20:aa:3e:ec:
                    b2:05:02:8d:d8:b5:45:cd:e8:00:5f:28:a4:f6:e4:
                    88:0e:5f:d8:2d:1b:1e:04:82:48:0f:2e:7e:af:eb:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E6:A4:3C:D6:B9:EA:29:0C:9A:9C:C5:32:64:96:20:A8:98:DE:AB
            X509v3 Authority Key Identifier:
                keyid:A1:27:44:B9:95:C3:2A:A4:AC:04:C9:E6:F4:3E:40:7F:BB:1B:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/oSdEuZXDKqSsBMnm9D5Af7sbGjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/oSdEuZXDKqSsBMnm9D5Af7sbGjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110127/1C7EED4EDE6111F19E0AEE7E0B66CEF9/721E25FEDEEC11F19CB0640DF665CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.229.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:5b:af:3e:89:82:10:0f:ca:9a:61:86:ea:d2:01:10:b7:1d:
         a4:2b:48:a8:a5:71:81:a6:ed:9e:f1:56:2b:ce:26:42:3f:b7:
         bf:69:69:9e:0d:63:00:e6:b9:2e:c7:1f:3b:59:a2:da:0c:c3:
         11:3a:ef:9a:96:a6:64:65:a7:49:61:0b:5b:0d:67:e4:ee:7f:
         0b:5a:a4:ca:c5:d3:57:a6:b0:44:c0:94:87:2c:6a:54:f9:83:
         34:96:29:39:75:89:e4:cb:cd:49:55:15:fc:2b:8c:83:cb:27:
         cc:63:65:e2:e0:d5:90:96:0a:84:c6:21:52:17:71:c1:27:7f:
         be:f1:0e:13:0c:bb:d0:c1:7c:0f:32:b2:e1:9a:ec:fa:fe:da:
         93:0c:f7:0f:6a:32:46:33:a4:ef:18:1c:b5:11:d6:bc:38:ae:
         06:97:e8:cb:05:7f:45:d2:75:f3:c0:1a:1c:fc:71:15:9c:fe:
         de:3a:89:21:5d:c4:b6:4d:76:fc:ed:3c:32:25:22:ee:71:a0:
         5a:8f:f1:4b:c6:63:02:9c:b6:39:19:35:57:6e:fa:9d:45:19:
         f7:25:04:3c:4a:0d:5f:68:44:42:43:76:f1:5e:c0:2d:f2:50:
         82:93:8a:68:66:95:6c:76:e2:d1:d8:f8:b3:c7:10:9d:9b:38:
         20:d3:1f:8c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDEyNzExMC8GA1UEBRMoQTEyNzQ0Qjk5NUMzMkFBNEFDMDRDOUU2RjQzRTQwN0ZC
QjFCMUEzMTAeFw0yNjExMTIyMjU4MTRaFw0yODAzMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZjY0NDg2LTMzZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfN6RE2wSIZTiR7SDo/YvSAs8TNJtWs83CEs2STTAAs7yzhhsyu2VZ1Rl21oj1
u4jjwRWnYNMoDEvKczYHr8kgkQB4gnMmokDebBwnVBlcxOTmlIUgxE2h78d6UxDc
IToGuwD6OXovG3nA1V2KY7TB+cDASw1ECxQ0uiuYn2aazWuxpm51mDQuQpqGvzTW
f76Kh/lkfpM7R++uj1niKlb3zhZJDfkiCV+eMnxV4YljNsraDCMwJ8JRDQaDe6Y/
e+i6uTofoJ/qzxNVkEZi35SuCbx9TRGRyEkaBu3eIKo+7LIFAo3YtUXN6ABfKKT2
5IgOX9gtGx4EgkgPLn6v6xkDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUf+akPNa5
6ikMmpzFMmSWIKiY3qswHwYDVR0jBBgwFoAUoSdEuZXDKqSsBMnm9D5Af7sbGjEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwMTI3LzFDN0VFRDRFREU2
MTExRjE5RTBBRUU3RTBCNjZDRUY5L29TZEV1WlhES3FTc0JNbm05RDVBZjdzYkdq
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvb1NkRXVaWERLcVNzQk1ubTlENUFmN3NiR2pFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDEyNy8xQzdFRUQ0RURFNjExMUYxOUUwQUVFN0UwQjY2Q0VGOS83MjFFMjVGRURF
RUMxMUYxOUNCMDY0MERGNjY1Q0VGOS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGN5RYwDQYJKoZIhvcNAQELBQADggEBALFbrz6JghAPypphhurSARC3
HaQrSKilcYGm7Z7xVivOJkI/t79paZ4NYwDmuS7HHztZotoMwxE675qWpmRlp0lh
C1sNZ+TufwtapMrF01emsETAlIcsalT5gzSWKTl1ieTLzUlVFfwrjIPLJ8xjZeLg
1ZCWCoTGIVIXccEnf77xDhMMu9DBfA8ysuGa7Pr+2pMM9w9qMkYzpO8YHLUR1rw4
rgaX6MsFf0XSdfPAGhz8cRWc/t46iSFdxLZNdvztPDIlIu5xoFqP8UvGYwKctjkZ
NVdu+p1FGfclBDxKDV9oREJDdvFewC3yUIKTimhmlWx24tHY+LPHEJ2bOCDTH4w=
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:38 2026 by rpki-client