Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/111E53B6152811ECB2C0B70BC4F9AE02.roa
File:                     111E53B6152811ECB2C0B70BC4F9AE02.roa (raw, json)
Hash identifier:          y/9w6PkfJPP5x9xoypT09kJGazem+FcljWHoJZSxFMw=
Subject key identifier:   26:20:28:B7:60:9C:E5:8F:62:22:BB:CC:73:0F:55:B8:00:F4:24:39
Certificate issuer:       /CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
Certificate serial:       08BE
Authority key identifier: 1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/111E53B6152811ECB2C0B70BC4F9AE02.roa
Signing time:             Tue 14 Jul 2026 21:21:51 +0000
ROA not before:           Tue 14 Jul 2026 21:21:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     7473
IP address blocks:        202.83.192.0/19 maxlen: 19
                          202.83.192.0/20 maxlen: 20
                          202.83.194.0/24 maxlen: 24
                          202.83.195.0/24 maxlen: 24
                          202.83.196.0/24 maxlen: 24
                          202.83.203.0/24 maxlen: 24
                          202.83.204.0/24 maxlen: 24
                          202.83.205.0/24 maxlen: 24
                          202.83.206.0/24 maxlen: 24
                          202.83.208.0/24 maxlen: 24
                          202.83.209.0/24 maxlen: 24
                          202.83.210.0/24 maxlen: 24
                          202.83.211.0/24 maxlen: 24
                          202.83.214.0/24 maxlen: 24
                          202.83.216.0/24 maxlen: 24
                          202.83.218.0/24 maxlen: 24
                          202.83.220.0/24 maxlen: 24
                          202.83.222.0/24 maxlen: 24
                          2400:f000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl
                          rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A2D, serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
        Validity
            Not Before: Jul 14 21:21:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a56a86f-c7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:54:00:54:ce:bc:ca:e7:f5:56:e0:9a:e6:
                    cd:73:e1:0d:99:30:2b:a2:9d:8a:5c:ab:2e:e9:49:
                    f5:dd:ac:c5:86:35:f3:db:c7:1b:ba:fa:72:19:f0:
                    e6:b7:fa:22:e9:f0:2c:4a:14:ba:6e:e3:b8:8d:ed:
                    f5:64:52:dc:69:fc:34:9a:05:30:e8:d7:bd:52:70:
                    fe:de:37:78:7d:ad:79:02:b4:11:6e:14:7a:b0:93:
                    f9:1c:18:23:85:4d:e2:51:90:d9:b8:59:63:91:02:
                    66:7c:20:4d:08:ce:02:d3:0b:96:99:0e:59:c7:4d:
                    7a:a4:01:f1:b7:9b:ff:54:17:2c:c9:2c:4a:10:26:
                    a1:78:a3:e2:cc:19:02:a8:03:c8:be:0f:88:05:45:
                    c2:44:eb:de:ac:29:b8:1c:bb:6f:6c:fa:50:ae:a0:
                    1a:15:db:e3:3e:98:9d:9d:f6:a8:ba:f7:99:74:76:
                    2a:bc:56:2c:ce:92:ff:48:95:29:df:f4:f4:95:af:
                    7d:97:12:7b:ed:e5:6f:b5:28:e5:69:b0:22:cc:76:
                    96:46:9b:4c:26:8b:b1:b0:05:e3:18:6a:bd:6b:a1:
                    07:85:c7:14:d9:be:9d:f2:11:86:b0:2e:b6:da:9f:
                    bc:46:dd:9e:72:b1:36:eb:56:c6:d3:39:ca:38:df:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:20:28:B7:60:9C:E5:8F:62:22:BB:CC:73:0F:55:B8:00:F4:24:39
            X509v3 Authority Key Identifier:
                keyid:1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/111E53B6152811ECB2C0B70BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.192.0/19
                IPv6:
                  2400:f000::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:44:18:35:be:a3:28:99:6f:42:d6:08:ab:7d:81:27:26:7b:
         eb:29:92:3e:93:84:4f:aa:14:c2:4d:57:84:90:87:85:d6:5d:
         a2:a1:ca:6b:ef:38:fe:8a:53:72:f6:b6:9c:97:02:99:55:78:
         cd:4a:3b:3c:d8:54:a3:66:69:73:76:64:2f:e0:52:64:c9:03:
         e5:01:82:7a:9e:52:63:a4:4d:8a:37:c7:5b:c9:ec:cc:76:97:
         3b:f3:19:e9:c2:48:4f:e2:ad:3b:2a:91:6d:e7:88:9a:84:4f:
         16:35:c0:8d:ac:0b:fe:f3:27:46:38:d6:b5:f9:71:6f:b4:2e:
         c6:24:ba:d4:33:1e:fd:02:12:d1:12:fd:ff:4f:14:d5:6f:91:
         31:ad:2d:e4:60:39:a2:fd:1c:aa:d9:fc:79:77:b7:9e:de:3c:
         fe:2a:a4:96:6a:05:0b:47:c6:61:26:b6:0d:63:89:c9:8a:33:
         22:66:4f:0c:85:2e:c0:f3:d1:5d:3f:87:e7:24:8f:78:c8:12:
         c9:ff:5f:05:3f:b0:14:3a:3c:07:0b:e8:3a:6c:99:70:24:80:
         3a:ff:2d:a8:55:ed:ad:fe:45:1b:b3:57:64:30:f0:c1:e0:cd:
         3e:ef:6e:11:7f:bb:2d:5b:62:5c:a2:79:07:4e:2c:8b:18:e6:
         72:69:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:45 2026 by rpki-client