Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa
File:                     B7724DF64AEF11F18C019EA8CC833773.roa (raw, json)
Hash identifier:          u3ulsFEeFHl2wj5RkWcmZPuCwWxBbFCaWvt8xFzlFSk=
Subject key identifier:   06:6E:88:B4:26:1B:02:33:C8:4D:79:48:A3:84:A9:9B:57:4E:BA:76
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1970
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa
Signing time:             Fri 08 May 2026 15:08:06 +0000
ROA not before:           Fri 08 May 2026 15:08:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     46606
IP address blocks:        203.98.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6512 (0x1970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: May  8 15:08:06 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69fdfc56-1f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:92:ea:95:88:a3:48:c1:3a:82:d8:37:37:
                    aa:c1:a0:c7:51:e9:21:c9:f1:6e:54:22:56:28:9d:
                    e2:15:aa:80:d7:47:c5:99:ea:b9:ae:a5:d1:d6:31:
                    c6:e0:84:cd:54:10:2b:c5:a8:4c:95:c9:19:0b:98:
                    b6:3b:b1:f2:22:3c:03:d4:87:eb:f1:71:ed:8f:4d:
                    26:c2:ea:ee:da:84:b4:cb:d1:f9:c2:bb:75:4b:01:
                    68:13:14:6a:1d:2d:61:be:67:65:63:c4:95:fc:12:
                    15:63:18:86:16:80:fa:a1:53:fd:ab:62:f9:61:11:
                    59:af:21:8d:7b:e6:b9:e4:b8:80:9f:26:a0:66:c3:
                    bf:a7:09:c6:67:20:35:b5:5f:6c:9e:74:3c:61:b2:
                    e9:58:d1:2e:d6:6b:63:ca:82:53:01:c0:f1:fe:d0:
                    41:03:be:6a:ff:51:de:a3:d2:7c:51:e5:c1:70:b7:
                    ed:c5:c4:9c:07:fa:b9:55:e6:69:5a:59:57:d1:68:
                    35:38:7a:42:56:46:41:24:ab:9e:80:32:99:c0:b8:
                    f5:35:e3:f0:c8:59:36:d2:08:58:ec:a2:11:82:78:
                    01:ad:60:99:80:b5:60:1b:5f:91:47:2c:ab:6a:35:
                    2d:e5:54:b7:dc:11:57:65:54:d6:c2:ef:50:6d:d9:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6E:88:B4:26:1B:02:33:C8:4D:79:48:A3:84:A9:9B:57:4E:BA:76
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/B7724DF64AEF11F18C019EA8CC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.98.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:a6:55:1a:cb:76:d8:f8:9d:49:f5:5e:ed:8e:63:84:7d:
         f2:f5:e0:3a:37:50:77:b3:60:3e:55:27:42:32:4a:01:68:2b:
         54:c2:8f:a1:c3:6f:7f:83:5b:ab:40:fa:c9:8d:1d:ab:08:f8:
         0c:d9:75:1b:3b:43:c2:1b:f2:8c:83:8b:0f:5c:03:da:4c:87:
         2c:b4:5c:f7:5a:b8:66:5d:5b:ae:60:c1:4e:f5:2d:d6:aa:a1:
         30:cc:52:41:2a:11:b6:82:67:86:e7:35:1a:d1:e3:87:a2:24:
         c1:5b:52:2c:e3:de:d8:f5:3b:89:43:00:5e:13:c2:ed:97:8b:
         ec:6d:9c:2a:4d:cf:eb:af:71:cc:37:83:08:7e:54:0d:ba:30:
         0f:21:9a:5f:d3:40:e0:95:08:03:09:81:f9:be:98:09:83:6a:
         2d:c6:fe:8c:5c:47:57:8b:64:19:b5:b3:0d:9b:cf:55:41:a3:
         c7:2b:a8:b9:18:8a:3e:27:42:26:9e:74:a2:ce:8a:4b:e2:6b:
         1d:2c:6f:7b:66:5c:98:95:78:d6:15:d7:be:4e:58:cf:18:60:
         e2:70:d8:fe:6a:58:3b:f9:65:ad:cb:3d:88:6b:a4:c6:9b:ab:
         1c:1c:b5:ab:63:cf:2d:37:1c:b7:c1:b5:94:4a:b7:06:d9:34:
         cd:f2:c5:03
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzM0UxMTAvBgNVBAUTKEQwMDcyRURFQjY3RTE3NTJBQjc1MjI2M0E0RkQ5NDUw
REQzQTMzRUMwHhcNMjYwNTA4MTUwODA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZkZmM1Ni0xZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZSS6pWIo0jBOoLYNzeqwaDHUekhyfFuVCJWKJ3iFaqA10fFmeq5rqXR1jHG
4ITNVBArxahMlckZC5i2O7HyIjwD1Ifr8XHtj00mwuru2oS0y9H5wrt1SwFoExRq
HS1hvmdlY8SV/BIVYxiGFoD6oVP9q2L5YRFZryGNe+a55LiAnyagZsO/pwnGZyA1
tV9snnQ8YbLpWNEu1mtjyoJTAcDx/tBBA75q/1Heo9J8UeXBcLftxcScB/q5VeZp
WllX0Wg1OHpCVkZBJKuegDKZwLj1NePwyFk20ghY7KIRgngBrWCZgLVgG1+RRyyr
ajUt5VS33BFXZVTWwu9QbdnECwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAZuiLQm
GwIzyE15SKOEqZtXTrp2MB8GA1UdIwQYMBaAFNAHLt62fhdSq3UiY6T9lFDdOjPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMzRS8yRjY2QjU3QUI4
M0UxMUU3QTAxRDY2NTBDNEY5QUUwMi8wQWN1M3JaLUYxS3JkU0pqcFAyVVVOMDZN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBY3UzclotRjFLcmRTSmpwUDJVVU4wNk0tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIzM0UvMkY2NkI1N0FCODNFMTFFN0EwMUQ2NjUwQzRGOUFFMDIvQjc3MjRERjY0
QUVGMTFGMThDMDE5RUE4Q0M4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy2JQMA0GCSqGSIb3DQEBCwUAA4IBAQB8QqZVGst22PidSfVe7Y5j
hH3y9eA6N1B3s2A+VSdCMkoBaCtUwo+hw29/g1urQPrJjR2rCPgM2XUbO0PCG/KM
g4sPXAPaTIcstFz3WrhmXVuuYMFO9S3WqqEwzFJBKhG2gmeG5zUa0eOHoiTBW1Is
497Y9TuJQwBeE8Ltl4vsbZwqTc/rr3HMN4MIflQNujAPIZpf00DglQgDCYH5vpgJ
g2otxv6MXEdXi2QZtbMNm89VQaPHK6i5GIo+J0ImnnSizopL4msdLG97ZlyYlXjW
Fde+TljPGGDicNj+alg7+WWtyz2Ia6TGm6scHLWrY88tNxy3wbWUSrcG2TTN8sUD
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:25 2026 by rpki-client