Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C14670EE323811F09C91DE2FC4F9AE02.roa
File:                     C14670EE323811F09C91DE2FC4F9AE02.roa (raw, json)
Hash identifier:          hCfgHx3D3/JbgVOrzp8me4jGJi6fR8N8xzDPSQIMBx0=
Subject key identifier:   1C:5A:82:6D:8C:E1:3A:8A:4D:5E:CD:D7:CB:D0:16:C7:13:F4:03:BB
Certificate issuer:       /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial:       0B6C
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C14670EE323811F09C91DE2FC4F9AE02.roa
Signing time:             Fri 08 May 2026 20:24:45 +0000
ROA not before:           Fri 08 May 2026 20:24:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24462
IP address blocks:        101.78.204.0/22 maxlen: 24
                          116.92.130.0/24 maxlen: 24
                          203.174.32.0/24 maxlen: 24
                          220.232.228.0/24 maxlen: 24
                          220.232.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
                          rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2924 (0xb6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
        Validity
            Not Before: May  8 20:24:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe468d-afc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:2d:85:5f:19:c3:99:70:73:2a:94:6b:0d:
                    04:f9:9d:ea:9f:f4:28:26:87:b6:7f:ec:dc:0c:fc:
                    8e:a2:c1:fb:07:b9:4c:09:0b:6e:c4:f8:cf:59:a7:
                    48:7c:33:1e:e7:ea:ce:1a:70:fc:96:6d:05:3d:5b:
                    5f:57:cd:17:dd:47:05:69:69:5a:f2:15:5a:35:bc:
                    e4:d0:69:d2:99:7c:2b:4e:da:f1:26:aa:33:1f:66:
                    aa:96:fb:04:3b:a9:aa:29:c8:72:a4:41:27:0f:36:
                    ba:4f:8e:4a:64:27:7b:6a:9d:32:8f:44:59:dc:13:
                    cd:e8:82:5b:fa:53:b5:42:43:5e:79:33:93:76:a9:
                    77:65:6f:78:1a:f6:94:f5:4d:5e:9d:b8:0a:de:f8:
                    dd:2d:b5:02:fb:52:24:6e:e2:fc:61:da:0c:03:0b:
                    e5:2b:c7:fc:3a:f0:51:72:50:67:e3:03:3f:44:64:
                    78:95:cd:9c:ad:73:aa:9d:b6:a8:6c:bc:fd:21:35:
                    eb:e1:a0:74:80:1f:8f:1d:c5:7f:d0:f3:ed:61:ef:
                    3c:e2:dc:9a:89:3b:19:da:e5:f1:99:c1:0d:7f:69:
                    16:58:47:4f:0e:a2:a8:97:87:d5:ae:be:7e:3c:de:
                    b8:a2:fb:a0:3d:56:ef:29:35:a8:98:90:aa:94:b3:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:5A:82:6D:8C:E1:3A:8A:4D:5E:CD:D7:CB:D0:16:C7:13:F4:03:BB
            X509v3 Authority Key Identifier:
                keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C14670EE323811F09C91DE2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.204.0/22
                  116.92.130.0/24
                  203.174.32.0/24
                  220.232.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:2a:87:b1:c8:d7:1e:fd:e6:fe:4b:12:c4:bb:f4:b6:6a:
         a9:db:42:fe:06:45:b0:22:40:6f:fa:92:fd:ae:ae:94:72:b2:
         8f:0e:4a:33:c8:5a:2a:25:1b:af:39:8c:c5:bb:68:c8:f1:b1:
         03:d2:e9:e2:7e:3e:cb:d7:16:d7:2f:1a:69:c6:7c:ca:ea:fd:
         da:be:23:6a:d7:61:db:a1:cc:69:01:23:21:43:1e:ce:fb:e3:
         54:c3:aa:4b:15:88:2f:c3:51:00:f7:d7:c7:57:b6:c9:87:be:
         3c:7a:dd:c4:87:21:42:58:9e:32:e8:ec:fe:a4:1c:44:ef:85:
         e4:b2:65:9c:c9:54:0c:fd:c0:5f:fa:14:73:55:f0:76:bb:a1:
         eb:8b:47:0d:af:75:e2:99:52:db:f0:af:6d:1f:89:61:93:3e:
         49:1c:07:54:5e:46:ba:6a:6c:60:10:f4:42:23:fe:fe:a4:13:
         8d:de:0a:b5:70:87:9d:68:ff:4f:17:ec:5f:24:5f:c6:5c:ba:
         61:cf:3e:c4:2b:74:98:62:3d:68:e6:ef:50:d8:bb:25:3b:b4:
         e2:62:75:7c:f0:ad:a9:6a:5c:46:82:f1:51:f0:fd:2c:14:21:
         64:d9:c6:60:6a:22:1c:06:32:b2:a8:34:bf:04:ea:a1:44:4c:
         9c:6a:49:c4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4
RThDRUI3NUYwHhcNMjYwNTA4MjAyNDQ1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZlNDY4ZC1hZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsXcthV8Zw5lwcyqUaw0E+Z3qn/QoJoe2f+zcDPyOosH7B7lMCQtuxPjPWadI
fDMe5+rOGnD8lm0FPVtfV80X3UcFaWla8hVaNbzk0GnSmXwrTtrxJqozH2aqlvsE
O6mqKchypEEnDza6T45KZCd7ap0yj0RZ3BPN6IJb+lO1QkNeeTOTdql3ZW94GvaU
9U1enbgK3vjdLbUC+1IkbuL8YdoMAwvlK8f8OvBRclBn4wM/RGR4lc2crXOqnbao
bLz9ITXr4aB0gB+PHcV/0PPtYe884tyaiTsZ2uXxmcENf2kWWEdPDqKol4fVrr5+
PN64ovugPVbvKTWomJCqlLNlxwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFBxagm2M
4TqKTV7N18vQFscT9AO7MB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4
MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJCMUUvODkzNkNDMDQ4ODMyMTFFQTg0ODYxQjcwQzRGOUFFMDIvQzE0NjcwRUUz
MjM4MTFGMDlDOTFERTJGQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQCZU7MAwQAdFyCAwQAy64gAwQB3OjkMA0GCSqGSIb3DQEBCwUAA4IB
AQCLUSqHscjXHv3m/ksSxLv0tmqp20L+BkWwIkBv+pL9rq6UcrKPDkozyFoqJRuv
OYzFu2jI8bED0unifj7L1xbXLxppxnzK6v3aviNq12HbocxpASMhQx7O++NUw6pL
FYgvw1EA99fHV7bJh748et3EhyFCWJ4y6Oz+pBxE74XksmWcyVQM/cBf+hRzVfB2
u6Hri0cNr3XimVLb8K9tH4lhkz5JHAdUXka6amxgEPRCI/7+pBON3gq1cIedaP9P
F+xfJF/GXLphzz7EK3SYYj1o5u9Q2LslO7TiYnV88K2palxGgvFR8P0sFCFk2cZg
aiIcBjKyqDS/BOqhREycaknE
-----END CERTIFICATE-----
Generated at Wed May 13 12:19:58 2026 by rpki-client