Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa
File:                     F17169E244A311E9AEF6F25AC4F9AE02.roa (raw, json)
Hash identifier:          H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=
Subject key identifier:   FF:71:EB:03:41:9D:34:97:77:E4:E1:33:72:0A:08:F8:DF:E8:BC:3F
Certificate issuer:       /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial:       2886
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa
Signing time:             Fri 24 Jul 2026 03:03:37 +0000
ROA not before:           Tue 26 May 2026 16:22:25 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     45622
IP address blocks:        111.68.56.0/24 maxlen: 24
                          114.108.205.0/24 maxlen: 24
                          114.108.216.0/24 maxlen: 24
                          114.108.236.0/24 maxlen: 24
                          182.18.200.0/24 maxlen: 24
                          182.18.201.0/24 maxlen: 24
                          182.18.238.0/24 maxlen: 24
                          182.18.246.0/24 maxlen: 24
                          182.18.247.0/24 maxlen: 24
                          182.18.248.0/24 maxlen: 24
                          182.18.249.0/24 maxlen: 24
                          182.18.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 07:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10374 (0x2886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
        Validity
            Not Before: May 26 16:22:25 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a62d609-626c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:9d:72:4b:09:3b:bd:d8:bf:5c:68:a4:88:
                    7a:df:1b:fb:d1:93:67:61:21:6e:85:45:37:ed:66:
                    61:36:ea:4f:b6:52:12:b8:52:09:34:8e:6a:ea:b1:
                    74:c0:36:ad:14:9e:60:af:06:0e:95:b1:59:b4:53:
                    80:5a:63:2e:3a:fe:5c:74:b5:8e:4e:da:ce:25:2d:
                    af:3d:39:3d:03:82:93:51:50:be:5a:02:c7:84:6b:
                    59:81:3c:b7:86:c4:87:cb:1f:dc:5e:3d:f5:52:63:
                    8e:3d:16:85:12:53:5c:ee:fe:40:62:e7:ee:1e:48:
                    a6:47:6a:c1:b4:3e:67:e6:75:c0:c2:7a:ef:0d:d5:
                    50:81:72:a0:7f:b8:b4:ec:80:08:35:48:e4:62:bb:
                    9d:e5:6b:c0:ae:6d:ba:8b:13:f7:d8:cb:da:ff:f0:
                    96:c2:61:f3:22:c1:75:90:13:ad:c6:a8:03:5e:8c:
                    68:35:1c:73:1f:a6:97:55:c4:d2:1c:74:ff:77:21:
                    8d:76:1b:4e:da:3f:66:64:f5:83:9c:83:ce:fa:51:
                    a4:d8:bb:1c:43:33:e6:99:6d:af:da:4a:30:16:ce:
                    2d:2f:13:7e:5a:a0:1e:91:ed:39:b5:88:57:33:87:
                    fe:5a:0a:6a:2a:1f:75:e3:cf:94:18:81:be:c2:12:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:EB:03:41:9D:34:97:77:E4:E1:33:72:0A:08:F8:DF:E8:BC:3F
            X509v3 Authority Key Identifier:
                keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.56.0/24
                  114.108.205.0/24
                  114.108.216.0/24
                  114.108.236.0/24
                  182.18.200.0/23
                  182.18.238.0/24
                  182.18.246.0-182.18.250.255

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:ca:1b:e5:bc:ad:67:42:41:0f:63:f4:7f:e7:4e:77:c6:
         0f:9f:14:2f:f8:43:5c:44:37:d5:f8:a5:58:b7:1a:97:db:77:
         94:38:46:67:76:b4:52:ed:bb:ae:5a:25:d0:e5:5f:2f:e4:12:
         b3:7b:c1:d8:4f:60:03:b9:7f:f4:26:b7:80:98:f2:34:5b:e2:
         28:42:b2:12:9b:a1:ef:85:d5:cb:a5:4d:fa:89:c0:34:d4:99:
         10:72:43:83:6a:42:08:6b:50:55:3c:f4:5c:7b:aa:f3:10:c1:
         ec:75:e4:36:e2:27:f2:55:9f:66:cf:25:16:01:84:e9:ff:4a:
         e4:95:2a:29:c2:68:d3:a9:16:32:54:88:13:fc:4b:6f:9f:3f:
         51:01:ae:52:3f:6d:a2:30:2f:3f:95:4e:22:31:a9:e3:1f:52:
         ea:0a:ac:5d:1e:7a:c4:48:8e:d4:e6:4f:4c:f3:34:e3:bc:6c:
         91:9e:79:e8:a8:b7:10:e7:65:96:f3:f1:b2:22:32:53:83:05:
         c4:4a:91:3c:9d:56:f8:b0:65:0b:e3:3c:2d:82:28:c0:f1:f5:
         54:b2:bb:d6:c3:36:a9:42:6d:d9:dd:b7:95:2b:d8:82:eb:95:
         76:dd:e1:f4:a8:4b:15:4c:1e:d1:05:f1:01:a0:50:b7:92:55:
         84:05:3c:22
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgICKIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjYwNTI2MTYyMjI1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyZDYwOS02MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDqdcksJO73Yv1xopIh63xv70ZNnYSFuhUU37WZhNupPtlISuFIJNI5q6rF0
wDatFJ5grwYOlbFZtFOAWmMuOv5cdLWOTtrOJS2vPTk9A4KTUVC+WgLHhGtZgTy3
hsSHyx/cXj31UmOOPRaFElNc7v5AYufuHkimR2rBtD5n5nXAwnrvDdVQgXKgf7i0
7IAINUjkYrud5WvArm26ixP32Mva//CWwmHzIsF1kBOtxqgDXoxoNRxzH6aXVcTS
HHT/dyGNdhtO2j9mZPWDnIPO+lGk2LscQzPmmW2v2kowFs4tLxN+WqAeke05tYhX
M4f+WgpqKh9148+UGIG+whJllQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFP9x6wNB
nTSXd+ThM3IKCPjf6Lw/MB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvRjE3MTY5RTI0
NEEzMTFFOUFFRjZGMjVBQzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjA4
BAIAATAyAwQAb0Q4AwQAcmzNAwQAcmzYAwQAcmzsAwQBthLIAwQAthLuMAwDBAG2
EvYDBAC2EvowDQYJKoZIhvcNAQELBQADggEBAHibyhvlvK1nQkEPY/R/5053xg+f
FC/4Q1xEN9X4pVi3Gpfbd5Q4Rmd2tFLtu65aJdDlXy/kErN7wdhPYAO5f/Qmt4CY
8jRb4ihCshKboe+F1culTfqJwDTUmRByQ4NqQghrUFU89Fx7qvMQwex15DbiJ/JV
n2bPJRYBhOn/SuSVKinCaNOpFjJUiBP8S2+fP1EBrlI/baIwLz+VTiIxqeMfUuoK
rF0eesRIjtTmT0zzNOO8bJGeeeiotxDnZZbz8bIiMlODBcRKkTydVviwZQvjPC2C
KMDx9VSyu9bDNqlCbdndt5Ur2ILrlXbd4fSoSxVMHtEF8QGgULeSVYQFPCI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:29 2026 by rpki-client