Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/2B4C31BEAC1C11F188F54D123411F970.roa
File:                     2B4C31BEAC1C11F188F54D123411F970.roa (raw, json)
Hash identifier:          gwwobKaEiehWlvo2lzNMzGg+0baEAyvc96ounKXLUf8=
Subject key identifier:   C8:92:3F:0A:A3:17:05:67:AF:13:78:13:9F:D5:8D:37:76:19:FB:39
Certificate issuer:       /CN=A9150291/serialNumber=3CEC01A23A68B865267785BB6087C09DADC95A42
Certificate serial:       06
Authority key identifier: 3C:EC:01:A2:3A:68:B8:65:26:77:85:BB:60:87:C0:9D:AD:C9:5A:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/2B4C31BEAC1C11F188F54D123411F970.roa
Signing time:             Wed 09 Sep 2026 07:00:42 +0000
ROA not before:           Wed 09 Sep 2026 07:00:42 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     136568
IP address blocks:        163.52.118.0/24 maxlen: 24
                          163.52.119.0/24 maxlen: 24
                          2001:df7:7340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.crl
                          rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150291, serialNumber=3CEC01A23A68B865267785BB6087C09DADC95A42
        Validity
            Not Before: Sep  9 07:00:42 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa10419-04d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:5a:b0:ff:84:c2:24:a8:2b:0f:aa:1b:50:
                    16:f6:e6:68:57:18:32:a7:28:84:c0:ad:0a:99:b9:
                    ed:90:84:74:e5:fb:0e:94:b5:f3:3a:dc:f1:1a:a2:
                    e4:9c:1f:d7:63:da:d6:e4:a8:4f:fb:28:f8:04:79:
                    22:9e:f4:50:10:51:b7:53:69:fb:b7:4c:00:77:bd:
                    92:a6:10:00:09:46:24:37:cf:a6:dd:f6:0d:fa:ba:
                    bb:11:22:27:ef:b4:26:0a:a5:93:02:33:31:11:b7:
                    11:31:cd:5d:7a:94:fd:31:c2:fe:f6:83:ac:63:2b:
                    f7:8f:12:c0:cf:8f:72:c5:0d:9c:e4:93:fa:7d:be:
                    8f:7d:1f:5e:98:71:1d:f6:1c:06:72:9c:f7:3c:9e:
                    58:ef:8d:83:7d:de:75:b7:7a:1b:25:0c:bf:a9:31:
                    ec:0f:7f:92:36:a3:98:0a:e6:fd:df:e7:64:ad:4f:
                    b0:fc:6d:e7:6b:ed:1c:67:ba:bf:e9:6e:71:4d:4d:
                    65:56:8d:e0:47:17:61:93:c1:9a:37:f2:1f:86:b7:
                    79:1a:05:f0:cb:dd:d0:0a:8c:8a:77:81:51:5a:c1:
                    10:1a:93:8a:3c:0a:11:55:17:24:6b:0b:91:75:2e:
                    aa:2d:3d:89:8d:62:1f:c0:b4:da:8b:51:b2:17:d1:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:92:3F:0A:A3:17:05:67:AF:13:78:13:9F:D5:8D:37:76:19:FB:39
            X509v3 Authority Key Identifier:
                keyid:3C:EC:01:A2:3A:68:B8:65:26:77:85:BB:60:87:C0:9D:AD:C9:5A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/POwBojpouGUmd4W7YIfAna3JWkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/POwBojpouGUmd4W7YIfAna3JWkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150291/F50F69F0AC1A11F19A997CB13311F970/2B4C31BEAC1C11F188F54D123411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.118.0/23
                IPv6:
                  2001:df7:7340::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:72:dd:68:2e:24:e8:c3:87:e9:55:f0:78:fe:ee:a2:a0:64:
         5b:6e:0c:51:c5:08:0a:37:cf:e9:00:91:a2:e6:04:4b:d9:52:
         56:a0:74:b7:01:d2:7f:0f:27:dc:26:25:64:6c:e7:c0:97:51:
         83:74:aa:61:f4:b9:9c:0d:00:4f:99:0a:20:3b:85:ad:46:61:
         62:a6:70:71:db:5d:3d:ba:d7:bd:b6:1f:b4:b7:c0:9c:0b:af:
         43:04:86:c8:9b:da:10:0c:ee:01:68:9b:c9:92:90:58:54:9e:
         9a:a4:f5:d3:47:47:1a:d4:33:20:b4:fe:61:78:58:bc:dd:fc:
         e2:be:29:7e:77:3e:dc:f8:dd:06:1c:ba:8e:f1:e0:e3:32:aa:
         a7:07:42:92:6c:6d:c5:bf:d5:d1:f6:ce:76:96:4a:84:55:01:
         27:26:84:8a:f5:3c:4a:c9:e1:6e:12:1f:bd:cc:46:2a:fb:e1:
         e5:d1:9f:ad:08:e0:ce:1f:2d:37:4e:9d:60:62:fe:74:fa:b5:
         80:c2:c2:21:d0:f9:48:3e:f2:e8:6e:07:58:e1:e6:18:00:de:
         99:b2:3a:5f:a8:b9:b0:41:6b:87:f5:0b:af:11:2f:bf:59:30:
         30:cf:4e:3e:fe:dd:b0:ba:af:5d:b0:f8:9a:8f:5b:81:e5:3a:
         6a:e3:ca:42
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MDI5MTExMC8GA1UEBRMoM0NFQzAxQTIzQTY4Qjg2NTI2Nzc4NUJCNjA4N0MwOURB
REM5NUE0MjAeFw0yNjA5MDkwNzAwNDJaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTEwNDE5LTA0ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ+1qw/4TCJKgrD6obUBb25mhXGDKnKITArQqZue2QhHTl+w6UtfM63PEaouSc
H9dj2tbkqE/7KPgEeSKe9FAQUbdTafu3TAB3vZKmEAAJRiQ3z6bd9g36ursRIifv
tCYKpZMCMzERtxExzV16lP0xwv72g6xjK/ePEsDPj3LFDZzkk/p9vo99H16YcR32
HAZynPc8nljvjYN93nW3ehslDL+pMewPf5I2o5gK5v3f52StT7D8bedr7Rxnur/p
bnFNTWVWjeBHF2GTwZo38h+Gt3kaBfDL3dAKjIp3gVFawRAak4o8ChFVFyRrC5F1
LqotPYmNYh/AtNqLUbIX0TBbAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUyJI/CqMX
BWevE3gTn9WNN3YZ+zkwHwYDVR0jBBgwFoAUPOwBojpouGUmd4W7YIfAna3JWkIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUwMjkxL0Y1MEY2OUYwQUMx
QTExRjE5QTk5N0NCMTMzMTFGOTcwL1BPd0JvanBvdUdVbWQ0VzdZSWZBbmEzSldr
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUE93Qm9qcG91R1VtZDRXN1lJZkFuYTNKV2tJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDI5MS9GNTBGNjlGMEFDMUExMUYxOUE5OTdDQjEzMzExRjk3MC8yQjRDMzFCRUFD
MUMxMUYxODhGNTREMTIzNDExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBAGjNHYwDwQCAAIwCQMHACABDfdzQDANBgkqhkiG9w0BAQsFAAOCAQEA
PHLdaC4k6MOH6VXweP7uoqBkW24MUcUICjfP6QCRouYES9lSVqB0twHSfw8n3CYl
ZGznwJdRg3SqYfS5nA0AT5kKIDuFrUZhYqZwcdtdPbrXvbYftLfAnAuvQwSGyJva
EAzuAWibyZKQWFSemqT100dHGtQzILT+YXhYvN384r4pfnc+3PjdBhy6jvHg4zKq
pwdCkmxtxb/V0fbOdpZKhFUBJyaEivU8SsnhbhIfvcxGKvvh5dGfrQjgzh8tN06d
YGL+dPq1gMLCIdD5SD7y6G4HWOHmGADembI6X6i5sEFrh/ULrxEvv1kwMM9OPv7d
sLqvXbD4mo9bgeU6auPKQg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:55:17 2026 by rpki-client