Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa
File:                     613CF60638D211EF88A7B370C4F9AE02.roa (raw, json)
Hash identifier:          w1qtw8pmG5p6Y8wtfVj5xGwswTu9Tez4FzWsylopCUU=
Subject key identifier:   30:7F:64:C5:91:BA:EE:A6:51:C9:11:3D:F1:C4:07:85:27:7B:11:36
Certificate issuer:       /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial:       073A
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa
Signing time:             Mon 21 Sep 2026 23:42:20 +0000
ROA not before:           Mon 21 Sep 2026 23:42:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150127
IP address blocks:        203.10.6.0/24 maxlen: 24
                          203.10.7.0/24 maxlen: 24
                          203.10.8.0/24 maxlen: 24
                          203.10.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
                          rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850 (0x73a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
        Validity
            Not Before: Sep 21 23:42:20 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ab1c0dc-bb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:06:37:16:bc:f6:19:40:1e:0d:ce:e3:28:9d:
                    e7:28:30:cb:cf:3a:b9:a3:13:d7:d7:48:b9:03:5d:
                    2f:0c:18:7b:bb:62:98:cd:23:9b:fa:fb:a3:9b:c2:
                    a3:d1:ca:a5:e4:ad:d7:28:79:15:db:4d:9d:e9:7d:
                    f8:d0:b1:0f:e1:c7:4d:c2:9f:f2:ae:1d:be:3e:03:
                    33:70:ce:29:4b:7f:52:03:ce:d3:5b:c9:60:63:e1:
                    91:c0:91:03:31:33:80:22:89:35:83:25:6a:f6:65:
                    2b:a9:8c:2d:ea:97:c7:86:43:e3:ae:12:d3:f1:91:
                    75:fb:90:39:50:82:54:e1:c9:90:dc:4a:a6:40:6b:
                    33:80:03:af:d4:47:fa:be:d5:e3:a9:21:2b:87:8c:
                    bb:b1:af:d1:15:2c:96:67:9e:94:09:4c:57:a8:82:
                    58:c9:33:3f:91:65:06:49:26:df:34:2f:c8:54:29:
                    ac:49:48:b6:15:5d:93:af:3d:01:b3:ee:90:1c:29:
                    47:88:0c:7d:0f:4b:2a:8d:21:6e:12:07:df:48:4b:
                    97:c5:51:5a:19:9c:3c:9e:b2:6b:60:42:14:33:1f:
                    8d:80:21:6e:68:de:71:f0:58:a3:66:cd:a3:2c:18:
                    a3:95:a0:9f:70:26:fa:2b:ea:77:42:61:5f:b3:02:
                    98:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7F:64:C5:91:BA:EE:A6:51:C9:11:3D:F1:C4:07:85:27:7B:11:36
            X509v3 Authority Key Identifier:
                keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/613CF60638D211EF88A7B370C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.6.0-203.10.9.255

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:03:ab:26:e0:6b:2b:32:57:51:09:19:88:f6:ec:19:a3:
         c7:a8:0c:0f:5c:49:7e:ae:a5:bf:94:3b:96:d5:c8:0c:07:c8:
         e9:f2:34:02:8d:08:1f:c1:91:86:62:c0:99:04:93:39:c9:98:
         45:0d:88:93:98:77:88:d2:bf:57:e0:4f:43:5d:97:f0:b8:cc:
         b7:05:a9:ad:03:75:48:c7:3c:6e:77:72:5d:a0:29:44:86:8c:
         e1:e2:08:2f:29:8b:c7:dd:ae:07:90:5c:2f:ce:18:4b:4d:6b:
         b0:54:b5:6a:2a:56:ec:0a:2d:9f:08:52:27:d6:2f:51:b4:8d:
         aa:61:fc:b5:a2:99:2d:9d:cd:96:79:fc:93:d5:9d:45:5b:66:
         5e:bc:f3:fd:bb:9b:1b:05:21:61:22:cd:78:d7:f3:f4:37:72:
         de:61:66:6e:03:03:2b:95:0f:0e:10:4b:62:6e:c5:53:ba:af:
         24:15:37:e9:45:9d:e7:17:5e:ce:ef:60:ce:28:4a:68:c7:f0:
         09:00:36:5c:2f:4c:e2:21:57:7a:16:84:4c:c1:92:35:e9:b5:
         2f:c4:ed:2f:1d:49:69:b5:33:ca:63:f8:88:cb:73:f9:80:9e:
         e9:94:3a:7f:13:80:95:3c:42:19:e6:0e:53:ba:f0:e3:7a:d0:
         9e:00:6d:e5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICBzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlCRkIxMTAvBgNVBAUTKEY2RTcxMkZDNUM2OUU3MkY2OTM5NkU1RTExNDJDQzdG
NzhDNjhGRDEwHhcNMjYwOTIxMjM0MjIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIxYzBkYy1iYjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0wY3Frz2GUAeDc7jKJ3nKDDLzzq5oxPX10i5A10vDBh7u2KYzSOb+vujm8Kj
0cql5K3XKHkV202d6X340LEP4cdNwp/yrh2+PgMzcM4pS39SA87TW8lgY+GRwJED
MTOAIok1gyVq9mUrqYwt6pfHhkPjrhLT8ZF1+5A5UIJU4cmQ3EqmQGszgAOv1Ef6
vtXjqSErh4y7sa/RFSyWZ56UCUxXqIJYyTM/kWUGSSbfNC/IVCmsSUi2FV2Trz0B
s+6QHClHiAx9D0sqjSFuEgffSEuXxVFaGZw8nrJrYEIUMx+NgCFuaN5x8FijZs2j
LBijlaCfcCb6K+p3QmFfswKYjwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFDB/ZMWR
uu6mUckRPfHEB4UnexE2MB8GA1UdIwQYMBaAFPbnEvxcaecvaTluXhFCzH94xo/R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUJGQi9ERTJERTY0Njk4
MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5OXBPVzVlRVVMTWYzakdq
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl1Y1NfRnhwNXk5cE9XNWVFVUxNZjNqR2o5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlCRkIvREUyREU2NDY5ODAwMTFFQjgwNzFERDY4QzRGOUFFMDIvNjEzQ0Y2MDYz
OEQyMTFFRjg4QTdCMzcwQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAHLCgYDBAHLCggwDQYJKoZIhvcNAQELBQADggEBADZ8A6sm4Gsr
MldRCRmI9uwZo8eoDA9cSX6upb+UO5bVyAwHyOnyNAKNCB/BkYZiwJkEkznJmEUN
iJOYd4jSv1fgT0Ndl/C4zLcFqa0DdUjHPG53cl2gKUSGjOHiCC8pi8fdrgeQXC/O
GEtNa7BUtWoqVuwKLZ8IUifWL1G0japh/LWimS2dzZZ5/JPVnUVbZl688/27mxsF
IWEizXjX8/Q3ct5hZm4DAyuVDw4QS2JuxVO6ryQVN+lFnecXXs7vYM4oSmjH8AkA
NlwvTOIhV3oWhEzBkjXptS/E7S8dSWm1M8pj+IjLc/mAnumUOn8TgJU8QhnmDlO6
8ON60J4AbeU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:15:42 2026 by rpki-client