Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa
File:                     927AA46C549211EFB6D69465C4F9AE02.roa (raw, json)
Hash identifier:          czE7NJl7/t7hwLc6wB3QFn+FdCDmuyeRfw1z4n513xg=
Subject key identifier:   59:F4:BA:02:94:CE:4B:4B:C3:ED:2A:E5:6A:53:20:F8:9A:9C:73:06
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       04F2
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa
Signing time:             Thu 24 Sep 2026 23:48:20 +0000
ROA not before:           Thu 24 Sep 2026 23:48:20 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        202.36.14.0/24 maxlen: 24
                          203.16.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Sep 24 23:48:20 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab5b6c4-8a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:c7:1f:d2:ef:52:24:d4:59:ed:b5:4c:99:
                    79:62:cf:81:b3:8c:11:0c:4c:7a:c6:9a:c0:4b:23:
                    42:d9:ac:47:b3:7e:19:2e:2a:79:8c:16:b8:79:cb:
                    8d:28:bc:d1:1a:a6:08:dd:36:0a:0b:3b:f0:12:fe:
                    28:5c:67:8e:87:17:bc:f4:8c:c9:31:e2:bb:69:92:
                    77:dc:95:a8:7d:15:dc:10:a0:d0:f0:72:10:e5:83:
                    33:b5:ce:40:7f:3a:e1:fc:41:98:5d:02:a8:da:0d:
                    92:10:a1:aa:90:3b:80:60:e6:6a:86:dc:78:e9:81:
                    a2:55:eb:84:ff:f1:e8:2f:d3:c3:3b:87:fa:d7:55:
                    d6:d0:fb:72:a9:c4:c4:c2:22:48:89:d5:8d:67:45:
                    c8:c1:99:5d:0c:3b:3d:b5:08:13:43:a8:61:68:82:
                    40:fc:a6:98:47:f6:40:9c:eb:2e:b4:21:d0:e2:a5:
                    5b:1d:9d:d2:54:c8:c7:f8:10:2c:e6:ba:c1:1c:79:
                    c1:5a:ad:ed:a0:be:bb:f4:5b:55:9f:91:08:df:3c:
                    e5:66:91:b2:d6:8e:ec:2b:01:d2:b9:d6:46:40:ff:
                    0a:4c:88:84:0c:97:2c:b4:40:0b:9f:ea:77:a6:ae:
                    8f:df:b0:e0:84:f9:4e:33:ca:3e:28:63:b2:a4:0d:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F4:BA:02:94:CE:4B:4B:C3:ED:2A:E5:6A:53:20:F8:9A:9C:73:06
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/927AA46C549211EFB6D69465C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.14.0/24
                  203.16.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d4:78:75:d9:07:c3:a2:f8:f5:47:98:85:00:b5:af:6c:b3:
         fa:d9:f5:8a:68:15:ac:ea:f6:d3:fb:19:79:e9:5a:ed:cf:06:
         fa:63:43:99:e8:3f:07:8f:b6:9a:0e:a3:b0:55:b8:5a:88:be:
         c9:38:cf:01:bf:e3:a8:f3:84:06:9d:ef:0c:4b:b9:1a:a3:00:
         2f:53:59:e5:59:b9:1d:e1:08:44:02:b4:5e:43:99:2a:fa:bf:
         6d:47:39:92:05:1e:f3:56:c5:bf:a0:6d:a7:0a:86:f9:0b:d7:
         e0:85:84:f6:dd:e4:7e:4a:b6:e6:00:58:c5:f7:7f:ae:eb:75:
         fb:dc:2a:60:7f:fe:c9:8f:3b:b7:d0:6d:41:4c:a4:fe:de:7e:
         5e:3d:40:1b:ae:9f:94:66:8c:c5:18:88:ad:84:68:ca:fd:17:
         95:b9:d6:ac:0d:cc:ea:86:43:00:90:47:26:58:ea:5b:28:9d:
         bb:bf:8d:6d:f3:54:d3:88:b2:af:e8:5f:0a:f7:d0:99:f3:5c:
         cc:05:7a:a5:96:82:53:74:21:13:8b:df:ac:c5:51:b9:3d:aa:
         eb:bd:76:f1:c6:01:0b:ca:82:41:0c:b8:74:b0:1e:18:40:df:
         f0:1e:3b:f1:9f:2d:77:cb:76:cf:dd:7d:a4:70:f4:f7:e7:66:
         60:39:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:47:34 2026 by rpki-client