Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/1D2381425E5F11EC870D9676C4F9AE02.roa
File:                     1D2381425E5F11EC870D9676C4F9AE02.roa (raw, json)
Hash identifier:          MFQtPVZhIJZpzdDtsciv0riR2m9MF8WM481StFyw2ws=
Subject key identifier:   FC:95:5C:6D:9A:FB:B0:81:0C:42:6B:31:F4:F6:E8:7B:36:28:3B:66
Certificate issuer:       /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial:       0904
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/1D2381425E5F11EC870D9676C4F9AE02.roa
Signing time:             Wed 06 May 2026 20:25:54 +0000
ROA not before:           Wed 06 May 2026 20:25:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141367
IP address blocks:        149.234.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
        Validity
            Not Before: May  6 20:25:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fba3d2-a855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:8a:bf:76:8f:db:17:f4:6a:1b:e9:99:3f:
                    d8:52:1d:22:f7:b6:bd:c5:8b:fb:d2:d7:cb:9c:a5:
                    a6:c6:2f:be:0f:d9:da:fc:63:06:93:20:4a:8e:95:
                    75:f8:87:93:3d:94:59:bf:a1:89:d9:b3:c1:28:6e:
                    b3:33:63:73:de:30:56:90:5f:d0:de:e3:c6:54:9e:
                    d0:46:82:62:32:f0:6e:3e:d9:3a:f9:ee:59:62:b0:
                    4b:b8:c0:33:52:39:f9:af:ca:54:ca:be:99:e8:f9:
                    a1:64:af:31:c5:dd:0c:73:2b:79:ad:a4:25:34:82:
                    ca:ca:b6:a5:e1:ce:2f:b4:9d:a0:8a:2e:b9:99:10:
                    92:a0:5a:69:73:98:dc:a5:cf:a6:1f:4d:f4:39:a7:
                    86:59:26:a8:2e:aa:96:d0:17:47:d1:5c:64:bd:55:
                    3a:4f:a9:63:41:6d:52:60:6a:86:a8:bd:59:d3:d7:
                    d9:82:8e:19:70:37:9c:a3:97:75:54:cc:de:04:8b:
                    c8:88:26:3f:28:2a:d3:55:f4:46:6b:d3:34:24:79:
                    fe:28:89:05:22:0a:57:a4:37:7d:0f:91:b6:dc:f7:
                    54:ac:a9:ce:b0:cb:79:fa:b9:2d:c5:67:df:e7:db:
                    4c:57:e4:c8:8c:6e:d1:23:70:17:4d:8f:fc:a7:39:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:95:5C:6D:9A:FB:B0:81:0C:42:6B:31:F4:F6:E8:7B:36:28:3B:66
            X509v3 Authority Key Identifier:
                keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/1D2381425E5F11EC870D9676C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a4:7a:62:be:4b:ea:f8:03:2a:1e:80:06:65:5b:8a:d9:12:
         5f:4a:b4:32:05:65:1f:19:b5:0a:81:ba:d7:ec:b1:d8:fe:9b:
         56:87:18:d3:97:cb:fb:bd:60:79:bd:ea:22:dd:39:41:2a:3e:
         65:11:69:2b:f7:cc:83:b9:90:82:0e:1f:56:b8:cd:02:bb:f0:
         49:a8:3b:69:ad:89:6b:b8:54:e3:b2:46:72:ef:2d:4b:71:35:
         ea:46:ca:f5:8c:a9:34:c9:da:f8:78:c9:d8:f6:3e:b1:26:16:
         1e:e4:eb:ca:6a:5f:06:4b:91:4b:8c:93:0b:f7:2a:1b:77:1a:
         e7:a1:fd:5f:26:22:a5:43:ce:ce:da:fa:91:e9:33:f7:76:d7:
         14:51:b8:01:aa:b3:ae:9c:44:fb:d2:07:4a:d0:f7:be:20:05:
         84:87:9e:2f:59:b9:30:e9:cf:38:ca:66:f4:a6:55:26:ba:d4:
         d1:ca:af:ed:a2:27:cf:f5:0b:d9:bc:cd:72:de:25:4d:02:b9:
         e2:f5:12:61:9d:c2:8e:ad:58:dc:14:96:f3:63:86:50:55:24:
         55:a1:ae:e2:d2:01:97:ce:81:c1:09:fc:59:4b:d0:4e:0f:44:
         b8:2a:ae:92:97:38:78:57:56:70:7a:03:36:91:ec:ed:55:2b:
         65:7f:65:87
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjM4M0IxMTAvBgNVBAUTKDA3MjdBQUM1QjhDRjdGRTY4Q0NENkRFNzdGNkM4QjQ2
RDU3NEZBQTcwHhcNMjYwNTA2MjAyNTU0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZiYTNkMi1hODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3LyKv3aP2xf0ahvpmT/YUh0i97a9xYv70tfLnKWmxi++D9na/GMGkyBKjpV1
+IeTPZRZv6GJ2bPBKG6zM2Nz3jBWkF/Q3uPGVJ7QRoJiMvBuPtk6+e5ZYrBLuMAz
Ujn5r8pUyr6Z6PmhZK8xxd0Mcyt5raQlNILKyral4c4vtJ2gii65mRCSoFppc5jc
pc+mH030OaeGWSaoLqqW0BdH0VxkvVU6T6ljQW1SYGqGqL1Z09fZgo4ZcDeco5d1
VMzeBIvIiCY/KCrTVfRGa9M0JHn+KIkFIgpXpDd9D5G23PdUrKnOsMt5+rktxWff
59tMV+TIjG7RI3AXTY/8pzlUHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPyVXG2a
+7CBDEJrMfT26Hs2KDtmMB8GA1UdIwQYMBaAFAcnqsW4z3/mjM1t539si0bVdPqn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzgzQi9GNEJENTAwOEUw
MjMxMUVBOTkyMkRFNDJDNEY5QUUwMi9CeWVxeGJqUGYtYU16VzNuZjJ5TFJ0VjAt
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0J5ZXF4YmpQZi1hTXpXM25mMnlMUnRWMC1xYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjM4M0IvRjRCRDUwMDhFMDIzMTFFQTk5MjJERTQyQzRGOUFFMDIvMUQyMzgxNDI1
RTVGMTFFQzg3MEQ5Njc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAleq4MA0GCSqGSIb3DQEBCwUAA4IBAQBxpHpivkvq+AMqHoAGZVuK
2RJfSrQyBWUfGbUKgbrX7LHY/ptWhxjTl8v7vWB5veoi3TlBKj5lEWkr98yDuZCC
Dh9WuM0Cu/BJqDtprYlruFTjskZy7y1LcTXqRsr1jKk0ydr4eMnY9j6xJhYe5OvK
al8GS5FLjJML9yobdxrnof1fJiKlQ87O2vqR6TP3dtcUUbgBqrOunET70gdK0Pe+
IAWEh54vWbkw6c84ymb0plUmutTRyq/toifP9QvZvM1y3iVNArni9RJhncKOrVjc
FJbzY4ZQVSRVoa7i0gGXzoHBCfxZS9BOD0S4Kq6Slzh4V1ZwegM2keztVStlf2WH
-----END CERTIFICATE-----
Generated at Wed May 13 16:54:26 2026 by rpki-client