Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa
File:                     C49CE482BEA411EB85828650C4F9AE02.roa (raw, json)
Hash identifier:          YRVF06vQab+9NFZ7dGOQFnvASdYRW+VxNdESL/wwkLo=
Subject key identifier:   88:17:B1:86:5F:2F:8D:71:4B:6A:88:8B:5C:56:F6:03:18:F9:B4:78
Certificate issuer:       /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
Certificate serial:       06B2
Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 00:25:18 +0000
ROA not before:           Thu 09 Jul 2026 00:25:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        203.19.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl
                          rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714 (0x6b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722
        Validity
            Not Before: Jul  9 00:25:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4eea6e-98d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:ab:3a:b4:98:52:3f:44:4b:74:9b:a5:14:
                    44:b5:e6:eb:ab:a7:f4:a6:fa:81:18:ab:97:b2:35:
                    7d:1e:54:a0:63:39:29:bb:22:ee:6f:b6:eb:6f:85:
                    ca:05:f4:23:2b:7a:b2:50:4b:c3:00:df:60:8a:b7:
                    e8:40:5a:03:5b:3f:af:76:50:8e:b5:69:2d:4a:17:
                    d3:cd:d3:7c:f2:29:b3:dc:8d:9a:6d:3d:8a:34:53:
                    8e:f6:c8:8e:11:5e:50:50:db:d3:a8:88:05:c2:a5:
                    9d:91:30:03:22:9c:98:76:c0:76:c7:5e:c7:83:6c:
                    1d:6b:79:e4:b9:2d:8b:87:c1:34:a3:34:ea:01:10:
                    84:b8:57:ba:a2:1e:f8:ed:19:29:19:f0:b6:3a:aa:
                    92:fd:e8:62:a7:f9:a4:04:77:3d:2b:0a:50:2b:1e:
                    2d:7f:5d:8f:7f:f5:8c:c5:99:2d:ad:06:db:89:9a:
                    9a:0e:a7:53:bb:34:6b:b7:b4:98:ef:b6:7f:9b:60:
                    d0:e4:f2:6f:b7:34:83:3f:fb:2d:3e:f6:f2:12:65:
                    41:e0:d3:b3:3b:1e:5b:2c:41:aa:70:c3:8f:f5:5e:
                    3b:18:3c:43:de:a7:e6:78:61:74:08:84:95:cc:fa:
                    a8:50:28:a1:22:05:dd:d5:28:81:35:82:77:b3:52:
                    a4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:17:B1:86:5F:2F:8D:71:4B:6A:88:8B:5C:56:F6:03:18:F9:B4:78
            X509v3 Authority Key Identifier:
                keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/C49CE482BEA411EB85828650C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:b7:11:8a:c8:48:cc:fd:f9:d7:90:40:53:4e:83:53:4b:6c:
         ee:ca:9b:78:a7:af:2c:90:8e:4c:f2:f7:76:20:0a:b6:ee:5d:
         10:2e:58:c5:7f:f5:2f:6e:00:8b:2d:dc:b8:59:6e:c4:b4:15:
         01:80:0c:b8:9d:87:cd:ac:4c:0f:27:bb:77:ea:20:98:e1:6c:
         7e:8c:40:89:9c:62:33:83:fc:5d:94:d0:9d:59:f2:87:e0:25:
         cb:c1:35:0a:e8:a9:c2:0a:c0:69:8b:85:e5:b7:93:3c:f7:16:
         79:20:61:5a:1e:1a:2f:af:7c:5e:5a:40:57:36:30:68:cb:62:
         ae:af:4d:46:e2:50:54:a2:db:25:6d:5f:22:63:21:be:60:e8:
         66:ab:45:e4:bf:3c:24:6d:fa:9e:cd:e0:e3:a4:fc:c4:55:70:
         33:ba:33:32:8f:76:5e:ea:36:0e:7d:13:d7:9a:8a:f6:fc:cc:
         e0:79:3c:cb:a8:87:64:e1:36:8b:b2:f5:68:43:cd:ce:9b:61:
         8d:89:9a:ac:bb:5c:c4:16:44:0f:6b:b6:dc:a5:69:5c:3e:0c:
         15:9f:2e:fa:6d:f9:3c:07:09:f4:b6:ce:18:1c:bd:f7:77:09:
         5c:8c:41:72:42:31:8a:6d:99:32:d7:87:a2:76:85:ad:68:e4:
         bf:cc:e4:85
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz
NzRBNUM3MjIwHhcNMjYwNzA5MDAyNTE4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRlZWE2ZS05OGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGWrOrSYUj9ES3SbpRREtebrq6f0pvqBGKuXsjV9HlSgYzkpuyLub7brb4XK
BfQjK3qyUEvDAN9girfoQFoDWz+vdlCOtWktShfTzdN88imz3I2abT2KNFOO9siO
EV5QUNvTqIgFwqWdkTADIpyYdsB2x17Hg2wda3nkuS2Lh8E0ozTqARCEuFe6oh74
7RkpGfC2OqqS/ehip/mkBHc9KwpQKx4tf12Pf/WMxZktrQbbiZqaDqdTuzRrt7SY
77Z/m2DQ5PJvtzSDP/stPvbyEmVB4NOzOx5bLEGqcMOP9V47GDxD3qfmeGF0CISV
zPqoUCihIgXd1SiBNYJ3s1KkvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIgXsYZf
L41xS2qIi1xW9gMY+bR4MB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF
QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODUyNEIvOTI0MDZBMDZCRUEyMTFFQkFENkVGNDRGQzRGOUFFMDIvQzQ5Q0U0ODJC
RUE0MTFFQjg1ODI4NjUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxOMMA0GCSqGSIb3DQEBCwUAA4IBAQCptxGKyEjM/fnXkEBTToNT
S2zuypt4p68skI5M8vd2IAq27l0QLljFf/UvbgCLLdy4WW7EtBUBgAy4nYfNrEwP
J7t36iCY4Wx+jECJnGIzg/xdlNCdWfKH4CXLwTUK6KnCCsBpi4Xlt5M89xZ5IGFa
Hhovr3xeWkBXNjBoy2Kur01G4lBUotslbV8iYyG+YOhmq0XkvzwkbfqezeDjpPzE
VXAzujMyj3Ze6jYOfRPXmor2/MzgeTzLqIdk4TaLsvVoQ83Om2GNiZqsu1zEFkQP
a7bcpWlcPgwVny76bfk8Bwn0ts4YHL33dwlcjEFyQjGKbZky14eidoWtaOS/zOSF
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:10 2026 by rpki-client