Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
File:                     7BF6BA42E91A11EF804C4B57C4F9AE02.roa (raw, json)
Hash identifier:          2/iza+tOKX+mvuvzoKYK5cpZNJZbiTfX8wb7eiEARlI=
Subject key identifier:   C3:CE:9F:80:01:B4:60:0B:AC:35:A5:CC:C1:7E:2C:BB:5F:EB:51:48
Certificate issuer:       /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial:       0118
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 07:33:20 +0000
ROA not before:           Fri 03 Jul 2026 07:33:20 +0000
ROA not after:            Sun 01 Nov 2026 00:00:00 +0000
asID:                     153557
IP address blocks:        163.61.14.0/24 maxlen: 24
                          163.61.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
        Validity
            Not Before: Jul  3 07:33:20 2026 GMT
            Not After : Nov  1 00:00:00 2026 GMT
        Subject: CN=6a4765c0-ec68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:83:04:41:74:24:b8:8b:c7:6d:65:c5:3a:
                    7e:3e:47:a4:11:ff:4f:cd:df:c9:c1:75:f3:00:b1:
                    47:9e:6f:04:44:aa:3e:2e:8a:18:01:0b:b3:2a:04:
                    a1:d1:80:eb:4a:3a:87:64:b8:22:b5:9c:a5:ce:aa:
                    db:d5:b7:df:1d:28:05:58:27:1c:2b:f2:21:77:0f:
                    01:45:1d:56:f5:1a:fe:e1:6d:ec:0d:08:d8:19:fd:
                    b6:bc:bb:50:8c:ad:bf:a7:0c:48:c2:a5:f1:85:9d:
                    3f:ad:d1:ce:8a:49:36:89:56:3a:0e:9c:82:5b:b7:
                    18:f5:1c:e3:36:d2:0a:99:f0:0c:ea:30:ea:bd:64:
                    bb:8b:66:49:4f:4d:7e:58:1f:63:ff:b0:30:84:8b:
                    28:04:79:df:73:65:0d:c2:21:61:c6:48:dd:e3:01:
                    f7:09:40:17:b6:5b:d1:fb:6a:6c:be:45:43:64:e7:
                    63:d7:c5:82:fd:c5:6b:f9:83:aa:07:b5:16:cb:ef:
                    e0:c7:19:80:3d:b7:45:c8:65:d6:9f:ba:cc:27:43:
                    4c:db:5b:a2:a7:9b:38:b9:03:ad:9b:1f:ed:6c:25:
                    a4:2d:e3:d5:36:8d:ae:e9:94:da:03:c8:58:dd:17:
                    5b:20:05:0e:dd:80:52:24:e0:26:16:55:a2:11:d0:
                    dc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CE:9F:80:01:B4:60:0B:AC:35:A5:CC:C1:7E:2C:BB:5F:EB:51:48
            X509v3 Authority Key Identifier:
                keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:07:9e:e9:78:5b:f5:cd:7d:94:e9:09:ae:fc:6d:e7:80:b4:
         8a:58:57:8c:dc:fd:75:37:b4:fa:d6:69:81:87:2b:92:ef:4d:
         99:6a:23:36:0c:5c:e8:18:ca:e9:40:83:07:af:a5:49:78:1d:
         d3:d7:5b:d9:b0:c4:2b:36:a3:79:a5:b0:ee:1a:34:d3:e0:e7:
         82:2a:7c:ce:33:10:45:ea:8d:73:3a:a5:e9:a1:6b:48:e1:0d:
         c7:6c:a3:d5:cf:bc:05:3e:6c:95:4b:3f:3b:73:6f:26:c1:5d:
         b9:90:3a:7d:ec:5b:34:03:48:1c:e8:2c:5e:42:70:51:c5:2b:
         af:11:26:de:1b:30:ba:83:89:97:02:97:52:29:31:27:cc:f6:
         c1:d8:35:aa:5b:7a:6c:5f:a7:f3:7b:37:77:10:54:df:57:fe:
         05:26:5b:f0:08:13:0c:6c:84:46:9d:9b:2d:66:10:cd:45:b6:
         d1:3f:63:c8:11:88:e2:79:42:50:b3:0b:ea:8a:bb:2a:fe:c1:
         34:a3:0d:2a:35:88:8b:b8:80:b4:71:67:3e:ee:55:75:86:d8:
         3b:06:91:07:32:a2:4f:62:4b:af:e7:51:ca:93:8d:e0:6b:e9:
         05:7e:cd:b0:2b:81:2c:83:c0:b3:8e:34:b5:64:e0:2b:46:3f:
         1f:94:40:58
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFGRkQxMTAvBgNVBAUTKDEwNENGODcwNjNCNUVBQkYzNERFNEUyNUZFQ0U5QUI1
QUY3MzZDMTQwHhcNMjYwNzAzMDczMzIwWhcNMjYxMTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ3NjVjMC1lYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKCDBEF0JLiLx21lxTp+PkekEf9Pzd/JwXXzALFHnm8ERKo+LooYAQuzKgSh
0YDrSjqHZLgitZylzqrb1bffHSgFWCccK/Ihdw8BRR1W9Rr+4W3sDQjYGf22vLtQ
jK2/pwxIwqXxhZ0/rdHOikk2iVY6DpyCW7cY9RzjNtIKmfAM6jDqvWS7i2ZJT01+
WB9j/7AwhIsoBHnfc2UNwiFhxkjd4wH3CUAXtlvR+2psvkVDZOdj18WC/cVr+YOq
B7UWy+/gxxmAPbdFyGXWn7rMJ0NM21uip5s4uQOtmx/tbCWkLePVNo2u6ZTaA8hY
3RdbIAUO3YBSJOAmFlWiEdDcHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMPOn4AB
tGALrDWlzMF+LLtf61FIMB8GA1UdIwQYMBaAFBBM+HBjteq/NN5OJf7OmrWvc2wU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUZGRC80MkVCMDUzNERE
MzgxMUVGOUMzNDY3NDVDNEY5QUUwMi9FRXo0Y0dPMTZyODAzazRsX3M2YXRhOXpi
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFejRjR08xNnI4MDNrNGxfczZhdGE5emJCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTFGRkQvNDJFQjA1MzRERDM4MTFFRjlDMzQ2NzQ1QzRGOUFFMDIvN0JGNkJBNDJF
OTFBMTFFRjgwNEM0QjU3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoz0OMA0GCSqGSIb3DQEBCwUAA4IBAQA8B57peFv1zX2U6Qmu/G3n
gLSKWFeM3P11N7T61mmBhyuS702ZaiM2DFzoGMrpQIMHr6VJeB3T11vZsMQrNqN5
pbDuGjTT4OeCKnzOMxBF6o1zOqXpoWtI4Q3HbKPVz7wFPmyVSz87c28mwV25kDp9
7Fs0A0gc6CxeQnBRxSuvESbeGzC6g4mXApdSKTEnzPbB2DWqW3psX6fzezd3EFTf
V/4FJlvwCBMMbIRGnZstZhDNRbbRP2PIEYjieUJQswvqirsq/sE0ow0qNYiLuIC0
cWc+7lV1htg7BpEHMqJPYkuv51HKk43ga+kFfs2wK4Esg8CzjjS1ZOArRj8flEBY
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:03:22 2026 by rpki-client