Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6C40D48C63D611ED863A4C1EC4F9AE02.roa
File:                     6C40D48C63D611ED863A4C1EC4F9AE02.roa (raw, json)
Hash identifier:          vCj/WhVHzjlB9d5v8nnRy9GVIXIhnewHCIMXbGSfU+g=
Subject key identifier:   CA:7F:74:3D:20:78:23:6A:B5:A9:7F:16:5E:77:6E:91:7C:12:28:99
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C28
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6C40D48C63D611ED863A4C1EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:13:14 +0000
ROA not before:           Mon 06 Jul 2026 15:13:14 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55545
IP address blocks:        58.97.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15400 (0x3c28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:13:14 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc609-220f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:3b:32:53:5b:e8:4b:17:13:35:21:53:4c:
                    21:c0:4c:2c:38:d6:14:45:20:40:1a:80:aa:1e:84:
                    a8:3d:87:02:d0:1a:e7:35:38:51:73:1e:c7:db:6b:
                    60:d6:12:d0:cd:e4:16:1c:04:e1:80:d1:a6:0e:51:
                    dd:1d:cd:bf:9e:8a:08:04:57:e6:3b:65:2e:61:e3:
                    23:72:c6:14:fb:eb:db:43:f6:3a:6f:38:e3:36:c2:
                    8f:79:3d:be:75:ba:93:97:10:c6:06:b4:2c:1e:e4:
                    d5:a4:92:83:94:87:87:dc:8e:dd:4c:be:00:fc:7d:
                    f3:86:f0:f7:52:32:70:d7:36:1a:28:f1:d9:76:d2:
                    0a:e7:6e:fa:bd:de:85:a1:b6:cf:db:c5:72:f4:23:
                    f4:e1:e6:e9:e0:a6:cd:44:ba:68:87:b0:a2:c8:bb:
                    7d:a8:f9:58:b4:55:6c:ca:35:31:2b:fd:1e:a2:1c:
                    39:f2:b6:89:0b:74:63:09:2b:a4:8d:ae:5f:9b:7e:
                    22:38:29:da:9f:f1:86:da:cf:74:4a:a0:83:5b:7b:
                    da:c1:06:23:26:dd:4b:f3:ce:27:f4:31:d5:2a:7b:
                    35:57:e0:9c:c5:17:79:4a:40:81:79:33:ae:2c:f4:
                    d1:35:11:b6:ae:b4:e6:03:88:2c:6b:e4:8a:1f:d3:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7F:74:3D:20:78:23:6A:B5:A9:7F:16:5E:77:6E:91:7C:12:28:99
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/6C40D48C63D611ED863A4C1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.97.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1b:e2:44:69:32:f2:c5:4e:aa:c5:a0:7c:d7:ff:a7:7e:59:
         57:33:79:8a:91:4d:f6:58:24:07:21:de:63:1d:4b:17:12:6e:
         8c:d6:9b:b4:1e:12:de:9e:51:40:15:6a:12:2c:d9:96:d9:65:
         01:7b:51:01:d5:2e:9f:bc:84:28:87:c8:4e:c7:f1:be:06:12:
         5b:fd:6c:98:34:eb:ff:15:cc:72:d4:0b:d2:17:7e:43:d2:ae:
         6b:ba:5e:57:cc:60:5a:0a:ac:a2:04:0f:af:33:00:a9:ce:e1:
         93:6a:59:bc:c7:ed:cc:e3:a5:bf:92:d3:94:d3:9f:b5:51:6b:
         8d:cd:61:15:7d:9f:ce:5b:c1:c4:e0:a2:fd:e2:70:7b:98:42:
         c7:b8:21:87:f2:4d:33:c2:a8:cb:1d:69:c3:19:52:02:ad:b6:
         4f:bd:c9:17:7c:1a:97:33:f1:6f:20:fd:70:a5:51:78:33:16:
         87:e9:d2:c6:ef:d5:82:a1:04:4f:1c:c2:cf:f4:40:47:27:3e:
         e3:6f:9c:f7:ca:86:9c:8d:13:3f:0c:59:8e:47:93:6d:79:c0:
         55:03:71:79:cb:09:9a:0e:3e:ba:cb:fb:09:19:50:67:86:da:
         a6:89:3e:f2:c3:73:63:08:de:a7:45:b7:b4:cb:7c:64:6b:5b:
         c8:c8:72:00
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMzE0WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzYwOS0yMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqxU7MlNb6EsXEzUhU0whwEwsONYURSBAGoCqHoSoPYcC0BrnNThRcx7H22tg
1hLQzeQWHAThgNGmDlHdHc2/nooIBFfmO2UuYeMjcsYU++vbQ/Y6bzjjNsKPeT2+
dbqTlxDGBrQsHuTVpJKDlIeH3I7dTL4A/H3zhvD3UjJw1zYaKPHZdtIK5276vd6F
obbP28Vy9CP04ebp4KbNRLpoh7CiyLt9qPlYtFVsyjUxK/0eohw58raJC3RjCSuk
ja5fm34iOCnan/GG2s90SqCDW3vawQYjJt1L884n9DHVKns1V+CcxRd5SkCBeTOu
LPTRNRG2rrTmA4gsa+SKH9PTqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMp/dD0g
eCNqtal/Fl53bpF8EiiZMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNkM0MEQ0OEM2
M0Q2MTFFRDg2M0E0QzFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAOmE9MA0GCSqGSIb3DQEBCwUAA4IBAQAVG+JEaTLyxU6qxaB81/+n
fllXM3mKkU32WCQHId5jHUsXEm6M1pu0HhLenlFAFWoSLNmW2WUBe1EB1S6fvIQo
h8hOx/G+BhJb/WyYNOv/Fcxy1AvSF35D0q5rul5XzGBaCqyiBA+vMwCpzuGTalm8
x+3M46W/ktOU05+1UWuNzWEVfZ/OW8HE4KL94nB7mELHuCGH8k0zwqjLHWnDGVIC
rbZPvckXfBqXM/FvIP1wpVF4MxaH6dLG79WCoQRPHMLP9EBHJz7jb5z3yoacjRM/
DFmOR5NtecBVA3F5ywmaDj66y/sJGVBnhtqmiT7yw3NjCN6nRbe0y3xka1vIyHIA
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:46 2026 by rpki-client