Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/E9FB74DCE57711ECBC483554C4F9AE02.roa
File:                     E9FB74DCE57711ECBC483554C4F9AE02.roa (raw, json)
Hash identifier:          211xEjDsnDyQAXNRqQMMENUPbgNnfotqpOqOJlVt87Q=
Subject key identifier:   3A:A3:9E:C5:2C:E3:0C:F7:AB:E7:BA:90:86:5B:B8:37:AE:B1:84:A9
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       0720
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/E9FB74DCE57711ECBC483554C4F9AE02.roa
Signing time:             Sat 04 Jul 2026 23:23:54 +0000
ROA not before:           Sat 04 Jul 2026 23:23:54 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     7588
IP address blocks:        203.185.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: Jul  4 23:23:54 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a499609-de3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:9c:ff:7d:25:cc:d3:3c:cd:de:78:7c:5a:
                    cf:cd:2c:e5:a0:71:3d:1f:b6:f4:c3:fc:fc:b3:31:
                    e1:a7:c5:52:e6:6c:5c:66:af:03:30:8f:a4:39:6e:
                    e1:9a:9e:a5:1c:23:c8:94:88:8f:43:98:c6:d3:87:
                    38:f6:02:54:f7:3c:3d:77:d2:c0:61:74:59:48:bb:
                    cc:61:87:76:dc:45:49:39:65:3e:b1:df:12:95:77:
                    c2:b0:a9:53:dc:71:1d:30:76:9d:b3:02:ed:13:a0:
                    7a:70:f0:4c:ba:f1:a8:5e:1e:2c:8d:32:95:a6:3c:
                    70:65:a5:b0:20:64:c5:3b:d8:7f:9c:b3:01:22:aa:
                    aa:fb:8d:bb:77:b7:c3:e5:41:25:17:cc:3e:06:3a:
                    30:d1:19:26:17:7a:a6:b4:48:3e:3d:92:ec:d6:b3:
                    78:8b:45:45:7d:fa:73:7e:9d:fc:bc:d3:11:de:fe:
                    b7:ec:19:b4:f2:d5:ec:e4:95:60:9e:a9:4d:df:75:
                    f9:84:7e:6f:b0:55:a5:0a:83:96:60:b6:c1:0b:29:
                    94:5a:3e:44:af:86:fe:60:26:03:aa:53:96:34:b2:
                    37:71:ac:33:90:16:40:2c:32:b2:32:f2:a4:27:83:
                    3d:2c:dd:53:c2:ee:c5:61:0d:05:5e:a7:c8:af:a4:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A3:9E:C5:2C:E3:0C:F7:AB:E7:BA:90:86:5B:B8:37:AE:B1:84:A9
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/E9FB74DCE57711ECBC483554C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.185.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:fb:a2:a7:8b:fe:28:06:e8:9d:be:21:cf:d3:8a:73:cf:64:
         ff:62:9a:f6:f3:3c:ab:52:23:d4:17:b8:7a:d7:d1:0f:75:a2:
         37:9a:43:7a:f5:ec:92:99:a1:62:e8:17:75:f3:00:0a:ac:f7:
         e6:95:64:78:d4:5e:f3:df:07:66:b9:e5:df:ae:d0:64:fa:4c:
         9e:00:2c:c6:9f:a2:3d:7c:37:7b:31:3f:79:b3:01:80:f4:8d:
         68:f1:58:ab:a8:44:f9:27:e4:c4:c8:58:4a:f9:1d:02:05:e0:
         ce:f5:e7:bb:28:19:b1:6f:cf:cb:f7:33:06:b3:5a:e6:45:98:
         f1:d4:39:c1:f1:93:58:16:10:73:bc:b9:26:37:5f:d1:6a:df:
         87:de:c1:83:fd:f1:3d:3d:8a:10:1a:43:91:5f:8c:87:30:41:
         24:a2:0b:e3:fc:6a:79:2c:b7:11:4b:ed:b4:7d:95:bb:9f:15:
         1e:4d:5a:50:25:4b:fc:f3:00:e1:cd:c5:d3:1b:00:c9:0b:a1:
         0b:fe:0d:0b:e0:31:cf:99:d9:03:26:33:6e:e7:62:b7:5d:b5:
         97:94:1f:eb:60:54:d4:d8:4c:f3:26:27:fd:15:dc:08:72:6e:
         a8:d5:9f:79:ee:bd:9f:4b:f3:b1:da:6c:ea:25:0e:52:cc:d3:
         8e:24:3e:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjYwNzA0MjMyMzU0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ5OTYwOS1kZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaGc/30lzNM8zd54fFrPzSzloHE9H7b0w/z8szHhp8VS5mxcZq8DMI+kOW7h
mp6lHCPIlIiPQ5jG04c49gJU9zw9d9LAYXRZSLvMYYd23EVJOWU+sd8SlXfCsKlT
3HEdMHadswLtE6B6cPBMuvGoXh4sjTKVpjxwZaWwIGTFO9h/nLMBIqqq+427d7fD
5UElF8w+Bjow0RkmF3qmtEg+PZLs1rN4i0VFffpzfp38vNMR3v637Bm08tXs5JVg
nqlN33X5hH5vsFWlCoOWYLbBCymUWj5Er4b+YCYDqlOWNLI3cawzkBZALDKyMvKk
J4M9LN1Twu7FYQ0FXqfIr6RjYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDqjnsUs
4wz3q+e6kIZbuDeusYSpMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwQTgvNzBDMkVCN0FBMTk2MTFFQjgyMDBDRjA5QzRGOUFFMDIvRTlGQjc0RENF
NTc3MTFFQ0JDNDgzNTU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFy7lAMA0GCSqGSIb3DQEBCwUAA4IBAQCi+6Kni/4oBuidviHP04pz
z2T/Ypr28zyrUiPUF7h619EPdaI3mkN69eySmaFi6Bd18wAKrPfmlWR41F7z3wdm
ueXfrtBk+kyeACzGn6I9fDd7MT95swGA9I1o8VirqET5J+TEyFhK+R0CBeDO9ee7
KBmxb8/L9zMGs1rmRZjx1DnB8ZNYFhBzvLkmN1/Rat+H3sGD/fE9PYoQGkORX4yH
MEEkogvj/Gp5LLcRS+20fZW7nxUeTVpQJUv88wDhzcXTGwDJC6EL/g0L4DHPmdkD
JjNu52K3XbWXlB/rYFTU2EzzJif9FdwIcm6o1Z957r2fS/Ox2mzqJQ5SzNOOJD48
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:09 2026 by rpki-client