Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/61437CA4ABB911F1BD08353C5611F970.roa
File:                     61437CA4ABB911F1BD08353C5611F970.roa (raw, json)
Hash identifier:          7zLyRUO2jbdPU/ju8XFNTwlDh0zc8bJo13HRv/HfWCI=
Subject key identifier:   B0:6E:54:AC:C3:BC:4B:48:73:77:24:3B:6D:2B:92:D3:73:23:4E:BE
Certificate issuer:       /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial:       01F1
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/61437CA4ABB911F1BD08353C5611F970.roa
Signing time:             Tue 08 Sep 2026 19:13:31 +0000
ROA not before:           Tue 08 Sep 2026 19:13:31 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152585
IP address blocks:        157.20.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
        Validity
            Not Before: Sep  8 19:13:31 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6aa05e5b-8cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:2b:52:b7:ef:b6:00:24:11:c6:2e:eb:46:
                    b3:09:38:13:48:32:90:92:b8:98:92:84:05:13:c6:
                    18:8b:18:44:ab:98:36:ab:1e:0d:ce:c1:4e:50:c6:
                    11:3f:24:81:ed:c0:64:f7:37:98:54:c2:c4:d6:0e:
                    c1:c0:d8:3a:ef:3f:2d:e7:54:c9:1c:b5:2b:d4:10:
                    12:5c:4e:1f:3d:75:08:9e:93:c6:2c:9d:8c:c5:0c:
                    ef:98:c0:28:1d:cd:c7:c2:41:ad:3f:6e:cf:3e:7f:
                    57:64:be:2a:e1:ca:7e:19:84:ec:3d:3d:7f:99:26:
                    59:7b:79:a3:e5:bc:a2:2a:a5:3d:85:9e:07:fa:72:
                    7b:3a:4a:c3:72:da:2d:1f:3d:4f:ff:fd:88:93:28:
                    b3:04:a9:9c:a0:c5:eb:b1:c6:1a:33:43:19:54:3a:
                    a5:fd:d4:e4:4a:ae:d8:96:86:5f:b0:89:c4:21:51:
                    20:d5:65:f8:ce:6e:b5:27:9d:4d:b6:31:0f:c7:24:
                    60:2e:78:90:9a:90:05:b8:b8:16:fa:be:a2:d1:51:
                    72:1a:46:24:6c:c1:2e:46:98:82:9b:dc:92:5d:62:
                    da:57:f6:04:85:d7:2e:03:e9:33:15:b7:a8:25:5a:
                    11:95:f9:84:82:40:d1:cc:9e:f1:2b:a1:8a:6c:0b:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6E:54:AC:C3:BC:4B:48:73:77:24:3B:6D:2B:92:D3:73:23:4E:BE
            X509v3 Authority Key Identifier:
                keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/61437CA4ABB911F1BD08353C5611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:25:70:18:b8:60:a1:6c:74:55:82:34:88:15:5d:33:3e:13:
         35:fc:b1:9a:83:28:60:4a:39:8c:97:f7:dc:13:92:b0:d7:18:
         b1:90:6b:06:d8:c2:54:94:c9:b3:ba:4a:22:56:9d:5a:4c:03:
         73:41:69:b7:31:84:79:84:c7:62:ed:44:a2:7e:c2:1a:6e:c9:
         a6:09:a1:fb:9f:a6:81:71:07:67:59:15:87:b9:53:6e:bf:86:
         8f:2b:72:9a:0c:71:e9:5a:48:32:c8:f3:ca:ca:e3:ed:d9:2b:
         b9:a6:5e:79:5b:14:aa:60:19:91:ec:09:49:75:0e:99:c1:fe:
         7c:6f:8d:9c:4e:ee:ff:e5:03:57:d3:ea:cb:56:94:3f:0e:75:
         30:ad:24:cc:68:33:3a:1e:81:30:74:6e:a1:ac:7d:18:0a:b4:
         3f:6d:55:3e:14:5e:9a:34:bd:f6:0b:b5:0d:60:36:0b:5d:ce:
         05:ae:38:7a:1d:64:50:9c:86:e3:48:70:8e:02:a2:e6:39:4e:
         1b:3f:4f:96:6a:2d:3e:88:92:82:d3:32:0e:53:48:93:68:ac:
         e8:9e:0e:94:6a:2f:44:7c:c1:a4:e3:c1:05:8e:91:83:cf:c0:
         20:da:03:a4:5d:4d:6a:1e:d2:41:c2:45:25:90:6a:18:38:c0:
         bc:62:d1:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx
RjQwMTU4RTUwHhcNMjYwOTA4MTkxMzMxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwNWU1Yi04Y2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo50rUrfvtgAkEcYu60azCTgTSDKQkriYkoQFE8YYixhEq5g2qx4NzsFOUMYR
PySB7cBk9zeYVMLE1g7BwNg67z8t51TJHLUr1BASXE4fPXUInpPGLJ2MxQzvmMAo
Hc3HwkGtP27PPn9XZL4q4cp+GYTsPT1/mSZZe3mj5byiKqU9hZ4H+nJ7OkrDctot
Hz1P//2IkyizBKmcoMXrscYaM0MZVDql/dTkSq7YloZfsInEIVEg1WX4zm61J51N
tjEPxyRgLniQmpAFuLgW+r6i0VFyGkYkbMEuRpiCm9ySXWLaV/YEhdcuA+kzFbeo
JVoRlfmEgkDRzJ7xK6GKbAvfIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLBuVKzD
vEtIc3ckO20rktNzI06+MB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx
NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyNDkvOTg3MjZENkVEMTcwMTFFRUE2MTUxQzREQzRGOUFFMDIvNjE0MzdDQTRB
QkI5MTFGMUJEMDgzNTNDNTYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnRRNMA0GCSqGSIb3DQEBCwUAA4IBAQBrJXAYuGChbHRVgjSIFV0z
PhM1/LGagyhgSjmMl/fcE5Kw1xixkGsG2MJUlMmzukoiVp1aTANzQWm3MYR5hMdi
7USifsIabsmmCaH7n6aBcQdnWRWHuVNuv4aPK3KaDHHpWkgyyPPKyuPt2Su5pl55
WxSqYBmR7AlJdQ6Zwf58b42cTu7/5QNX0+rLVpQ/DnUwrSTMaDM6HoEwdG6hrH0Y
CrQ/bVU+FF6aNL32C7UNYDYLXc4Frjh6HWRQnIbjSHCOAqLmOU4bP0+Wai0+iJKC
0zIOU0iTaKzong6Uai9EfMGk48EFjpGDz8Ag2gOkXU1qHtJBwkUlkGoYOMC8YtH7
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:27:00 2026 by rpki-client