Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1A1E4A7A6A6911F18287CF148C47A888.roa
File:                     1A1E4A7A6A6911F18287CF148C47A888.roa (raw, json)
Hash identifier:          PFvhmpVV6scs/whQYid+4y3ffoZY6BXEcRXZF/STKOc=
Subject key identifier:   27:3D:D0:86:8E:41:20:28:77:B2:77:76:6E:31:90:BC:6D:A8:BB:ED
Certificate issuer:       /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial:       3584
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1A1E4A7A6A6911F18287CF148C47A888.roa
Signing time:             Mon 06 Jul 2026 20:07:05 +0000
ROA not before:           Mon 06 Jul 2026 20:07:05 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     31898
IP address blocks:        45.113.120.0/22 maxlen: 24
                          103.53.40.0/22 maxlen: 24
                          111.118.212.0/22 maxlen: 24
                          119.18.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
                          rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13700 (0x3584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
        Validity
            Not Before: Jul  6 20:07:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a4c0ae9-d084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:4e:8e:ef:50:7c:be:59:7d:b8:fe:7b:77:
                    9f:41:0a:4f:25:d4:b1:ec:6b:cd:fe:09:46:46:ff:
                    4f:d0:53:96:c5:f8:45:25:f9:4e:ec:6c:66:6f:cf:
                    5f:c3:f6:17:da:4f:51:39:ef:cd:f4:91:a1:50:d6:
                    06:75:2d:68:c0:1c:64:d1:b8:3b:cd:bc:30:d8:86:
                    1e:a3:79:a1:c7:94:d5:54:62:c4:1e:d8:87:0e:10:
                    4f:26:9b:e7:e9:88:29:29:1b:af:15:3f:55:ee:f4:
                    3f:5d:e8:52:1b:5e:0f:ab:25:35:c9:52:40:ab:8b:
                    83:ae:b9:47:87:37:5e:3b:eb:de:63:27:c1:37:35:
                    e1:bc:2a:2a:51:48:09:67:58:2e:d2:74:15:88:b3:
                    de:15:98:ee:7e:67:3f:6e:b2:6b:dc:8d:05:41:a1:
                    23:d7:d2:80:68:c9:c2:24:55:92:49:e8:d2:76:b1:
                    b8:cf:a7:68:ce:0c:57:ca:8e:f6:6d:d6:a8:3a:35:
                    33:d6:69:e2:ae:33:d5:63:9f:40:96:17:0d:9d:16:
                    db:75:e3:db:5c:38:0d:12:63:90:19:ff:07:01:0d:
                    f5:f3:66:c1:a5:7a:51:81:43:f4:d2:1a:4d:30:77:
                    18:67:1e:a1:0e:d4:c0:87:39:4f:6e:36:6c:8e:18:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3D:D0:86:8E:41:20:28:77:B2:77:76:6E:31:90:BC:6D:A8:BB:ED
            X509v3 Authority Key Identifier:
                keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1A1E4A7A6A6911F18287CF148C47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.120.0/22
                  103.53.40.0/22
                  111.118.212.0/22
                  119.18.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:39:ed:57:a1:e4:ab:bd:4a:ad:f0:c7:50:31:53:6b:27:ad:
         1f:73:76:fb:1b:bf:92:6e:9f:90:c2:c9:5d:56:f3:33:20:92:
         1b:aa:09:10:d6:09:b3:72:7f:5a:de:21:de:05:52:d3:4d:23:
         48:d3:83:57:df:f9:f2:97:d9:fb:92:ad:c5:2f:0f:f1:e0:2d:
         8b:09:4d:2d:23:e7:53:0f:34:6f:aa:65:54:d4:a2:aa:26:0b:
         be:da:c6:de:01:41:96:9f:02:08:2a:e8:2b:7e:9e:f3:f0:95:
         2f:7b:3a:95:76:04:40:9d:7a:aa:6c:8d:e1:38:70:c2:5f:2e:
         3f:55:5e:3f:4c:64:9b:fe:d6:0c:26:6c:94:7b:ea:3b:23:fc:
         ba:dc:d7:dc:ae:e1:0b:2b:d7:ef:db:71:6b:3d:e9:8d:32:89:
         66:82:82:ba:07:ba:6e:b6:bc:28:07:0d:9c:af:78:7d:c2:03:
         6f:14:f4:bb:75:9f:af:da:75:37:ce:6f:90:a4:ef:f4:6b:5b:
         5b:cf:2e:0d:44:61:57:48:ff:ec:a0:44:02:ac:58:20:72:a5:
         1e:1b:b2:b6:a0:c2:52:25:0b:d0:24:df:5a:c9:9f:19:19:d9:
         bd:88:67:4a:36:e7:6f:64:18:bc:43:0a:4d:88:d1:d6:16:b0:
         0c:ab:33:84
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICNYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE3NTMxMTAvBgNVBAUTKEE2NkREMDEwREEyNERGOEFFMTcwNkJEOTA4Q0JBNDNC
RDEzODk2MzEwHhcNMjYwNzA2MjAwNzA1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjMGFlOS1kMDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA42tOju9QfL5Zfbj+e3efQQpPJdSx7GvN/glGRv9P0FOWxfhFJflO7Gxmb89f
w/YX2k9ROe/N9JGhUNYGdS1owBxk0bg7zbww2IYeo3mhx5TVVGLEHtiHDhBPJpvn
6YgpKRuvFT9V7vQ/XehSG14PqyU1yVJAq4uDrrlHhzdeO+veYyfBNzXhvCoqUUgJ
Z1gu0nQViLPeFZjufmc/brJr3I0FQaEj19KAaMnCJFWSSejSdrG4z6dozgxXyo72
bdaoOjUz1mnirjPVY59AlhcNnRbbdePbXDgNEmOQGf8HAQ3182bBpXpRgUP00hpN
MHcYZx6hDtTAhzlPbjZsjhi2QQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFCc90IaO
QSAod7J3dm4xkLxtqLvtMB8GA1UdIwQYMBaAFKZt0BDaJN+K4XBr2QjLpDvROJYx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc1My84MDUxNDU5MDFE
QTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0cmhjR3ZaQ011a085RTRs
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BtM1FFTm9rMzRyaGNHdlpDTXVrTzlFNGxqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzE3NTMvODA1MTQ1OTAxREE3MTFFMkFBQTk0QUExMDhCMDJDRDIvMUExRTRBN0E2
QTY5MTFGMTgyODdDRjE0OEM0N0E4ODgucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQCLXF4AwQCZzUoAwQCb3bUAwQEdxIwMA0GCSqGSIb3DQEBCwUAA4IB
AQBnOe1XoeSrvUqt8MdQMVNrJ60fc3b7G7+Sbp+QwsldVvMzIJIbqgkQ1gmzcn9a
3iHeBVLTTSNI04NX3/nyl9n7kq3FLw/x4C2LCU0tI+dTDzRvqmVU1KKqJgu+2sbe
AUGWnwIIKugrfp7z8JUvezqVdgRAnXqqbI3hOHDCXy4/VV4/TGSb/tYMJmyUe+o7
I/y63NfcruELK9fv23FrPemNMolmgoK6B7putrwoBw2cr3h9wgNvFPS7dZ+v2nU3
zm+QpO/0a1tbzy4NRGFXSP/soEQCrFggcqUeG7K2oMJSJQvQJN9ayZ8ZGdm9iGdK
NudvZBi8QwpNiNHWFrAMqzOE
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:48 2026 by rpki-client