Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa
File:                     4B4B1D3EF7F111F0B599D7DF686F56BC.roa (raw, json)
Hash identifier:          hLW5Ld/ythvnpyMMIrOzrzg+WUx6y4Cc2MOtWvPoync=
Subject key identifier:   13:83:66:4E:ED:2B:FB:3D:3B:8B:D5:65:85:2E:4B:B3:92:13:05:8B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3CAB
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa
Signing time:             Mon 11 May 2026 00:23:52 +0000
ROA not before:           Mon 11 May 2026 00:23:52 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9318
IP address blocks:        49.128.200.0/24 maxlen: 24
                          49.128.211.0/24 maxlen: 24
                          101.53.89.0/24 maxlen: 24
                          101.55.35.0/24 maxlen: 24
                          103.6.73.0/24 maxlen: 24
                          103.6.75.0/24 maxlen: 24
                          103.7.32.0/24 maxlen: 24
                          112.196.211.0/24 maxlen: 24
                          124.66.217.0/24 maxlen: 24
                          124.66.219.0/24 maxlen: 24
                          175.176.143.0/24 maxlen: 24
                          182.237.58.0/24 maxlen: 24
                          203.173.110.0/24 maxlen: 24
                          203.173.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15531 (0x3cab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: May 11 00:23:52 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a012198-e5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:b2:86:25:ad:a4:3f:0d:d0:f8:ad:eb:d5:
                    2d:4f:55:ec:24:24:ff:d5:eb:0d:ef:d5:53:31:b5:
                    e4:7e:f9:f0:d5:ea:f7:73:a4:8b:75:8c:bd:5c:71:
                    d1:88:72:1f:ee:27:58:27:d6:ea:e6:f2:c7:fb:ea:
                    1a:96:80:19:26:54:40:2e:d4:d2:9c:83:e8:7b:ab:
                    f5:e1:c3:59:0a:6a:84:ab:b4:63:fd:58:31:d0:0b:
                    3d:af:76:06:4a:6f:3c:fd:ee:3e:77:fe:67:3d:cc:
                    30:34:77:db:d3:4f:f8:27:5a:51:24:30:b4:41:aa:
                    9f:7e:22:88:a8:7c:ed:d2:bf:0a:d3:a1:fb:37:54:
                    c4:00:48:04:d2:0d:35:93:0c:4d:95:25:45:54:b1:
                    3f:5a:c6:8e:54:18:47:7e:14:37:98:39:c3:1c:e8:
                    6b:09:a6:f6:9d:88:67:86:d2:be:ae:32:fe:be:b9:
                    0d:48:4e:0b:08:e7:b5:40:c4:b3:f3:f1:98:7c:3f:
                    bb:e7:b8:e4:ac:5f:ce:5c:2f:8d:44:bf:6b:a5:35:
                    36:67:64:55:07:0a:f8:e1:fa:62:3a:a0:b3:62:2c:
                    50:63:9b:76:3a:92:86:e5:56:89:0e:f7:3c:62:86:
                    8c:00:12:09:74:e5:c7:f5:35:3d:2d:bc:c7:ce:04:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:83:66:4E:ED:2B:FB:3D:3B:8B:D5:65:85:2E:4B:B3:92:13:05:8B
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4B4B1D3EF7F111F0B599D7DF686F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.200.0/24
                  49.128.211.0/24
                  101.53.89.0/24
                  101.55.35.0/24
                  103.6.73.0/24
                  103.6.75.0/24
                  103.7.32.0/24
                  112.196.211.0/24
                  124.66.217.0/24
                  124.66.219.0/24
                  175.176.143.0/24
                  182.237.58.0/24
                  203.173.110.0/24
                  203.173.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:9e:9b:7c:b3:ad:04:a2:3b:02:b1:c1:bb:09:6b:58:4f:
         e7:22:f2:0c:ba:9e:83:0a:7c:ce:05:86:fb:29:77:04:e4:5d:
         22:ea:3f:99:e2:bd:24:ed:f9:eb:52:5f:ed:1f:03:e6:3f:a3:
         f4:d3:49:ce:6c:4b:58:8a:88:30:51:6c:b0:aa:16:25:59:87:
         35:52:bf:8f:d9:da:88:52:e0:7a:c4:e7:df:ea:48:cd:b4:69:
         a9:4a:9c:43:50:5f:13:39:c9:85:65:b2:22:8d:20:1f:f2:3c:
         e4:28:09:cc:cb:ed:d9:98:9a:9c:a5:e0:4c:5d:44:6e:a7:53:
         7f:b6:f3:ff:c5:72:00:2e:b5:5a:49:8f:e5:4e:93:c1:03:c1:
         5d:01:ae:ea:18:42:d6:16:40:04:e6:44:68:ae:6a:0c:66:eb:
         1f:f3:5c:0b:5c:20:8d:43:85:66:d6:6f:af:26:84:9d:13:68:
         7d:5a:63:5e:e3:80:15:0b:34:bb:ce:8b:ae:20:6f:93:d9:7b:
         ce:fd:29:65:d6:82:35:d8:21:d3:37:cb:df:8e:95:19:9f:1c:
         ca:c0:aa:8d:e0:5d:62:00:1e:5f:45:08:9a:29:11:77:aa:6e:
         bc:b3:c2:ce:45:02:05:fc:6e:2f:7e:7f:16:dd:64:7d:a8:59:
         44:02:51:d3
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgICPKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjYwNTExMDAyMzUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAxMjE5OC1lNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZGyhiWtpD8N0Pit69UtT1XsJCT/1esN79VTMbXkfvnw1er3c6SLdYy9XHHR
iHIf7idYJ9bq5vLH++oaloAZJlRALtTSnIPoe6v14cNZCmqEq7Rj/Vgx0As9r3YG
Sm88/e4+d/5nPcwwNHfb00/4J1pRJDC0QaqffiKIqHzt0r8K06H7N1TEAEgE0g01
kwxNlSVFVLE/WsaOVBhHfhQ3mDnDHOhrCab2nYhnhtK+rjL+vrkNSE4LCOe1QMSz
8/GYfD+757jkrF/OXC+NRL9rpTU2Z2RVBwr44fpiOqCzYixQY5t2OpKG5VaJDvc8
YoaMABIJdOXH9TU9LbzHzgSJXQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFBODZk7t
K/s9O4vVZYUuS7OSEwWLMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNEI0QjFEM0VG
N0YxMTFGMEI1OTlEN0RGNjg2RjU2QkMucm9hMG0GCCsGAQUFBwEHAQH/BF4wXDBa
BAIAATBUAwQAMYDIAwQAMYDTAwQAZTVZAwQAZTcjAwQAZwZJAwQAZwZLAwQAZwcg
AwQAcMTTAwQAfELZAwQAfELbAwQAr7CPAwQAtu06AwQAy61uAwQAy616MA0GCSqG
SIb3DQEBCwUAA4IBAQB2O56bfLOtBKI7ArHBuwlrWE/nIvIMup6DCnzOBYb7KXcE
5F0i6j+Z4r0k7fnrUl/tHwPmP6P000nObEtYiogwUWywqhYlWYc1Ur+P2dqIUuB6
xOff6kjNtGmpSpxDUF8TOcmFZbIijSAf8jzkKAnMy+3ZmJqcpeBMXURup1N/tvP/
xXIALrVaSY/lTpPBA8FdAa7qGELWFkAE5kRormoMZusf81wLXCCNQ4Vm1m+vJoSd
E2h9WmNe44AVCzS7zouuIG+T2XvO/Sll1oI12CHTN8vfjpUZnxzKwKqN4F1iAB5f
RQiaKRF3qm68s8LORQIF/G4vfn8W3WR9qFlEAlHT
-----END CERTIFICATE-----
Generated at Wed May 13 00:22:42 2026 by rpki-client