Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/66EE9D94152511ECAD055780C4F9AE02.roa
File:                     66EE9D94152511ECAD055780C4F9AE02.roa (raw, json)
Hash identifier:          tHkWBsWt7zg/nHnhpSyeoXJLDbxfBsQ1sUqpG3dRgvY=
Subject key identifier:   A0:4D:9B:E9:4D:84:2C:1B:2F:57:55:ED:E4:EC:F0:7E:7C:5C:04:CE
Certificate issuer:       /CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
Certificate serial:       08BD
Authority key identifier: 1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/66EE9D94152511ECAD055780C4F9AE02.roa
Signing time:             Tue 14 Jul 2026 21:21:49 +0000
ROA not before:           Tue 14 Jul 2026 21:21:49 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     17888
IP address blocks:        202.83.192.0/19 maxlen: 19
                          202.83.192.0/20 maxlen: 20
                          202.83.192.0/24 maxlen: 24
                          202.83.194.0/24 maxlen: 24
                          202.83.195.0/24 maxlen: 24
                          202.83.196.0/24 maxlen: 24
                          202.83.203.0/24 maxlen: 24
                          202.83.204.0/24 maxlen: 24
                          202.83.205.0/24 maxlen: 24
                          202.83.206.0/24 maxlen: 24
                          202.83.208.0/24 maxlen: 24
                          202.83.209.0/24 maxlen: 24
                          202.83.210.0/24 maxlen: 24
                          202.83.211.0/24 maxlen: 24
                          202.83.214.0/24 maxlen: 24
                          202.83.216.0/24 maxlen: 24
                          202.83.220.0/24 maxlen: 24
                          202.83.222.0/24 maxlen: 24
                          2400:f000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl
                          rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237 (0x8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A2D, serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
        Validity
            Not Before: Jul 14 21:21:49 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a56a86d-1ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:b7:ea:35:2c:15:53:05:07:13:7e:d4:21:
                    4d:56:c0:4f:87:62:6c:80:90:e0:19:42:d6:eb:42:
                    32:84:5f:59:9f:9e:a8:c2:9f:34:72:24:12:3a:0c:
                    fb:8f:8f:11:17:77:d6:28:d5:06:a1:67:88:0b:60:
                    4f:ab:99:7a:e2:a6:14:89:d3:fe:95:0f:b2:e7:49:
                    50:f0:47:6d:26:36:72:92:01:83:83:80:4d:6b:92:
                    27:d9:9f:bf:b7:9b:23:06:28:d9:eb:10:6c:e4:20:
                    27:6c:b3:b8:a1:8e:97:64:5b:ca:64:43:a7:8e:2b:
                    92:fa:a3:f2:8e:fe:f0:e5:65:85:20:74:fb:9a:fa:
                    fd:cf:69:6e:f1:e7:45:7c:40:36:bb:37:e0:cb:b1:
                    63:f3:23:0c:9e:18:9f:43:f3:3d:a1:a2:b3:4b:15:
                    86:39:3c:45:ca:53:cb:08:b0:d8:20:72:b4:0c:9f:
                    7f:cc:17:cb:24:46:02:36:8c:30:58:03:a3:79:a5:
                    2a:84:e2:f7:bb:2e:f8:fe:9b:10:cc:bf:5b:fd:81:
                    25:1c:0a:ff:1c:08:99:b5:10:37:cd:62:fc:4d:a3:
                    3b:f1:d0:d6:db:94:fc:21:c0:ea:50:ae:d5:64:30:
                    f8:6b:36:48:69:65:ae:9c:f5:3a:c5:d2:56:40:30:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4D:9B:E9:4D:84:2C:1B:2F:57:55:ED:E4:EC:F0:7E:7C:5C:04:CE
            X509v3 Authority Key Identifier:
                keyid:1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/66EE9D94152511ECAD055780C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.192.0/19
                IPv6:
                  2400:f000::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:c0:ec:e3:35:8c:37:b5:bb:3e:6b:47:9b:e1:88:c6:27:89:
         7b:e9:47:d6:ee:d2:bb:0e:f4:1f:77:c9:d9:a6:e3:ca:88:56:
         5b:9a:0d:10:84:cc:00:04:51:fb:1e:04:b8:aa:20:a5:1c:9d:
         b8:d8:74:d9:4d:0d:34:d4:69:df:21:47:ff:62:5d:3e:b8:74:
         de:88:89:ca:ec:7d:c0:22:4c:14:21:cf:2c:18:c0:7f:05:be:
         58:fb:c9:e1:12:10:4c:d7:3b:7f:8d:3b:00:81:0d:1f:35:0b:
         6f:3e:ea:61:3d:99:bd:04:5e:b5:63:4a:0c:77:0d:0e:f3:2a:
         e7:64:15:71:b3:a3:b9:7b:10:79:46:1d:ca:a9:e0:bd:e1:20:
         e8:f5:18:b3:7a:1c:e8:d6:1b:90:81:e2:9a:19:0b:90:e3:a2:
         eb:0d:a4:08:7a:e3:22:0c:fa:1b:40:23:21:56:8b:88:88:fd:
         80:26:24:e7:05:d1:03:c1:19:6f:d6:d0:f1:dd:29:c0:4a:ad:
         03:5d:1e:c2:16:6e:8b:15:64:67:b8:3d:2d:1a:cd:dd:48:4e:
         f0:aa:5f:85:2b:06:1e:36:1c:87:dc:7c:0b:1f:cc:19:d9:bb:
         1c:e7:7b:88:69:02:59:5b:27:31:fd:24:16:2c:73:e0:24:20:
         4a:f6:90:37
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFBMkQxMTAvBgNVBAUTKDFEMDRBQzVEMDNEOEVGNkFDNDMxREUxQTdBQUU3QjY4
NzY4MUI2MzYwHhcNMjYwNzE0MjEyMTQ5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU2YTg2ZC0xYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsou36jUsFVMFBxN+1CFNVsBPh2JsgJDgGULW60IyhF9Zn56owp80ciQSOgz7
j48RF3fWKNUGoWeIC2BPq5l64qYUidP+lQ+y50lQ8EdtJjZykgGDg4BNa5In2Z+/
t5sjBijZ6xBs5CAnbLO4oY6XZFvKZEOnjiuS+qPyjv7w5WWFIHT7mvr9z2lu8edF
fEA2uzfgy7Fj8yMMnhifQ/M9oaKzSxWGOTxFylPLCLDYIHK0DJ9/zBfLJEYCNoww
WAOjeaUqhOL3uy74/psQzL9b/YElHAr/HAiZtRA3zWL8TaM78dDW25T8IcDqUK7V
ZDD4azZIaWWunPU6xdJWQDBY+QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKBNm+lN
hCwbL1dV7eTs8H58XATOMB8GA1UdIwQYMBaAFB0ErF0D2O9qxDHeGnque2h2gbY2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEyRC9EQTQ2NjA5QUY3
QzMxMUVBOUIyRUY3ODVDNEY5QUUwMi9IUVNzWFFQWTcyckVNZDRhZXE1N2FIYUJ0
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hRU3NYUVBZNzJyRU1kNGFlcTU3YUhhQnRqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFBMkQvREE0NjYwOUFGN0MzMTFFQTlCMkVGNzg1QzRGOUFFMDIvNjZFRTlEOTQx
NTI1MTFFQ0FEMDU1NzgwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQFylPAMA0EAgACMAcDBQAkAPAAMA0GCSqGSIb3DQEBCwUAA4IBAQAp
wOzjNYw3tbs+a0eb4YjGJ4l76UfW7tK7DvQfd8nZpuPKiFZbmg0QhMwABFH7HgS4
qiClHJ242HTZTQ001GnfIUf/Yl0+uHTeiInK7H3AIkwUIc8sGMB/Bb5Y+8nhEhBM
1zt/jTsAgQ0fNQtvPuphPZm9BF61Y0oMdw0O8yrnZBVxs6O5exB5Rh3KqeC94SDo
9Rizehzo1huQgeKaGQuQ46LrDaQIeuMiDPobQCMhVouIiP2AJiTnBdEDwRlv1tDx
3SnASq0DXR7CFm6LFWRnuD0tGs3dSE7wql+FKwYeNhyH3HwLH8wZ2bsc53uIaQJZ
Wycx/SQWLHPgJCBK9pA3
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:30 2026 by rpki-client