Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62258D42C93A11EEA1A4CA4FC4F9AE02.roa
File:                     62258D42C93A11EEA1A4CA4FC4F9AE02.roa (raw, json)
Hash identifier:          Pn3t7Q2xH1MHU013jHPh+VPRQQXIgRH1a2aFUOJ0g9I=
Subject key identifier:   0D:D6:CF:E9:36:FB:72:E7:4C:BB:31:A3:27:9B:B8:D9:37:D3:51:7B
Certificate issuer:       /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial:       021E
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62258D42C93A11EEA1A4CA4FC4F9AE02.roa
Signing time:             Wed 15 Jul 2026 04:29:55 +0000
ROA not before:           Wed 15 Jul 2026 04:29:55 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     201755
IP address blocks:        43.245.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
                          rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
        Validity
            Not Before: Jul 15 04:29:55 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a570cc3-9430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:54:25:16:69:92:c7:33:49:c2:85:89:04:
                    88:c7:6f:9a:ba:92:00:1f:ae:ab:5e:cc:ce:dd:1f:
                    05:69:34:43:f5:12:a0:7a:ba:34:95:b7:45:62:9d:
                    a2:4b:89:3d:dc:56:ed:36:43:94:60:0b:eb:8a:14:
                    b4:77:46:b6:c4:95:c3:c4:a7:c0:40:e9:62:26:aa:
                    cc:4b:76:09:0e:25:3e:25:10:e8:c8:a3:a2:51:34:
                    35:fa:e6:12:16:f6:a2:87:2d:95:3d:26:f8:ec:d7:
                    18:6f:19:3d:03:e2:e7:9f:fb:60:c8:be:79:e2:a9:
                    93:9e:64:c3:a1:7f:ee:98:d3:69:5c:f5:de:35:51:
                    27:38:f3:ff:f7:46:18:db:56:d5:62:70:23:ca:fc:
                    9b:b7:1d:fc:be:0b:c3:77:86:41:49:e7:02:61:a3:
                    5e:69:30:c5:4f:89:29:61:94:9a:71:c5:71:a4:81:
                    74:e9:8f:e2:96:58:61:be:22:6d:19:9c:55:9e:4a:
                    fd:f4:7f:03:55:99:b0:58:17:9a:88:95:15:24:3b:
                    1b:59:69:ac:a8:27:3a:0b:7b:ea:2e:0e:ff:39:71:
                    13:3d:4d:4e:99:9f:ce:74:3c:90:98:3d:5f:11:f9:
                    e0:38:aa:7f:c3:da:97:3b:64:e3:09:a2:c0:e4:63:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:CF:E9:36:FB:72:E7:4C:BB:31:A3:27:9B:B8:D9:37:D3:51:7B
            X509v3 Authority Key Identifier:
                keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/62258D42C93A11EEA1A4CA4FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:ae:51:1b:1c:32:1a:00:34:ab:90:94:b5:52:ef:97:8f:
         78:b1:b2:01:58:9f:db:30:4c:08:88:2c:92:6e:64:58:c9:54:
         60:3f:7c:75:8c:99:3b:e2:81:e2:56:da:0a:c1:5f:16:34:dd:
         bb:31:1f:ad:94:6f:70:36:b7:ee:42:fa:fb:7e:3a:d1:a7:12:
         2a:7c:c7:96:b3:42:80:02:9a:35:94:9b:ba:83:a6:1a:52:91:
         72:d4:98:8b:b8:e6:c0:ce:0f:98:e8:35:40:46:b8:2a:cf:c3:
         86:59:55:4e:b3:70:62:d0:99:e3:82:c2:cb:96:34:ed:88:ba:
         eb:2f:09:a1:00:da:1e:07:0a:ca:86:a7:6e:68:c7:87:a1:58:
         cf:85:fd:c0:74:11:d1:9a:f0:d3:dd:ad:10:64:d2:88:ea:77:
         21:b4:d9:67:d0:3c:74:03:9b:1b:d1:77:59:1a:6f:30:7e:e8:
         85:74:cc:95:2d:3b:94:92:4b:d3:51:e1:9f:00:4b:4a:32:d7:
         68:ec:83:11:49:a1:a0:00:70:81:47:b6:6a:c8:4c:95:1c:26:
         4d:46:ca:03:84:fe:e3:83:f0:ef:97:5e:b9:11:c1:9e:03:1a:
         0d:c6:69:a4:3a:d3:c0:26:75:c8:5b:15:b6:43:9c:d2:c3:6c:
         fc:01:88:72
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg2MjAxMTAvBgNVBAUTKEE0MDhBQzk0QTBEMzM2RjQ3MzI0OTA1QTkxOEFGMjQ5
MDJGMERFOEIwHhcNMjYwNzE1MDQyOTU1WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU3MGNjMy05NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnYZUJRZpksczScKFiQSIx2+aupIAH66rXszO3R8FaTRD9RKgero0lbdFYp2i
S4k93FbtNkOUYAvrihS0d0a2xJXDxKfAQOliJqrMS3YJDiU+JRDoyKOiUTQ1+uYS
Fvaihy2VPSb47NcYbxk9A+Lnn/tgyL554qmTnmTDoX/umNNpXPXeNVEnOPP/90YY
21bVYnAjyvybtx38vgvDd4ZBSecCYaNeaTDFT4kpYZSaccVxpIF06Y/illhhviJt
GZxVnkr99H8DVZmwWBeaiJUVJDsbWWmsqCc6C3vqLg7/OXETPU1OmZ/OdDyQmD1f
EfngOKp/w9qXO2TjCaLA5GNyTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA3Wz+k2
+3LnTLsxoyebuNk301F7MB8GA1UdIwQYMBaAFKQIrJSg0zb0cySQWpGK8kkC8N6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYyMC8wRTkxOTkzNDg4
NDIxMUVFQTdEOEM4MTRDNEY5QUUwMi9wQWlzbEtEVE52UnpKSkJha1lyeVNRTHcz
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BBaXNsS0RUTnZSekpKQmFrWXJ5U1FMdzNvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTg2MjAvMEU5MTk5MzQ4ODQyMTFFRUE3RDhDODE0QzRGOUFFMDIvNjIyNThENDJD
OTNBMTFFRUExQTRDQTRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK/UrMA0GCSqGSIb3DQEBCwUAA4IBAQB+I65RGxwyGgA0q5CUtVLv
l494sbIBWJ/bMEwIiCySbmRYyVRgP3x1jJk74oHiVtoKwV8WNN27MR+tlG9wNrfu
Qvr7fjrRpxIqfMeWs0KAApo1lJu6g6YaUpFy1JiLuObAzg+Y6DVARrgqz8OGWVVO
s3Bi0JnjgsLLljTtiLrrLwmhANoeBwrKhqduaMeHoVjPhf3AdBHRmvDT3a0QZNKI
6nchtNln0Dx0A5sb0XdZGm8wfuiFdMyVLTuUkkvTUeGfAEtKMtdo7IMRSaGgAHCB
R7ZqyEyVHCZNRsoDhP7jg/Dvl165EcGeAxoNxmmkOtPAJnXIWxW2Q5zSw2z8AYhy
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:26 2026 by rpki-client