Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa
File:                     8AA99B52FEC511EABAAE7814C4F9AE02.roa (raw, json)
Hash identifier:          vB0fuKHGsvH5aq1nXdB3rU1YErIvmv6iT5GZ44Uq7g0=
Subject key identifier:   BA:AD:63:70:81:74:28:EE:BC:D8:5F:D0:BD:54:85:29:D5:AA:BC:A1
Certificate issuer:       /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial:       084C
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa
Signing time:             Sat 28 Feb 2026 21:18:29 +0000
ROA not before:           Sat 28 Feb 2026 21:18:29 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        203.30.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
                          rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
        Validity
            Not Before: Feb 28 21:18:29 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a35ba5-7b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:1b:f8:b5:cd:92:a6:75:5c:d8:2c:07:24:
                    4f:02:d5:c6:dd:f1:c5:7c:5a:98:60:38:71:47:47:
                    b8:3a:a0:0b:cb:a0:38:df:fc:89:bf:92:dc:8d:7a:
                    a6:b1:05:9a:6c:85:c8:48:a9:e7:7b:91:dc:c9:76:
                    24:15:99:bc:7d:52:4b:a3:b1:91:f8:3c:68:25:be:
                    fa:72:3e:28:71:f9:f8:50:20:90:87:d7:c8:e5:19:
                    0e:d7:27:4a:dc:4c:bd:aa:2f:fa:41:e3:c9:79:a2:
                    b0:6d:13:2b:01:aa:8a:68:55:12:f6:15:b2:6b:a6:
                    fe:70:f5:d6:d4:ac:cd:bd:dc:89:6e:ba:72:83:1c:
                    9d:dc:1d:a5:0c:ce:5e:ae:72:d4:7f:1a:24:99:6b:
                    11:7b:9a:03:8f:eb:30:81:ea:e2:a8:44:6d:c7:28:
                    5b:74:8c:b6:38:aa:a4:5e:ea:b8:d0:c8:5e:a5:22:
                    9a:d1:8e:c7:34:18:ba:64:bc:35:24:02:fa:01:48:
                    a7:4f:40:1b:7c:07:39:52:23:7d:18:77:6d:4a:cf:
                    e2:6c:f9:88:95:ab:c3:e5:83:2e:69:63:21:ce:7f:
                    48:f2:35:15:92:37:e3:e7:be:1a:22:b9:73:7f:04:
                    8e:2b:5e:76:64:9f:67:9b:86:e9:d5:78:fd:10:08:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AD:63:70:81:74:28:EE:BC:D8:5F:D0:BD:54:85:29:D5:AA:BC:A1
            X509v3 Authority Key Identifier:
                keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/8AA99B52FEC511EABAAE7814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:91:97:8b:4a:26:d1:4e:cb:33:ef:ab:f3:a6:c4:88:40:27:
         07:00:7d:7e:2e:28:e4:df:ef:e7:27:e9:a9:8e:96:2f:18:23:
         53:08:b7:a7:01:1a:fa:91:b3:79:02:fe:bd:8c:b1:1a:74:3e:
         a3:f0:b6:1c:d2:09:76:05:16:d5:67:9a:a9:88:61:48:2d:f2:
         33:4a:7a:32:cc:09:90:08:fd:09:b7:26:d2:3c:0d:e8:95:34:
         69:54:6d:4e:da:e1:d2:a9:19:59:56:37:00:a0:99:52:d6:29:
         05:2e:14:71:0e:30:3c:3d:c6:58:5e:97:e0:f9:6c:2b:ae:90:
         6e:b2:85:a5:a7:07:76:2f:86:c9:4c:89:60:2d:b2:d2:61:89:
         68:e4:96:7a:d6:08:64:63:b3:03:c7:53:eb:86:aa:f6:82:36:
         98:d9:63:01:74:7c:ba:97:dd:47:62:2c:b9:64:3f:e7:b1:fa:
         1c:be:29:48:48:ee:15:59:1e:7e:54:9e:d5:be:9c:4a:57:5d:
         41:cf:ee:da:ae:54:4e:f5:4c:4d:2c:05:f2:e5:87:e3:a0:7f:
         7d:5d:43:42:6c:96:21:df:ca:2a:4b:29:c0:5f:31:2f:46:a3:
         65:de:11:42:8c:6d:7b:4a:60:3c:5d:47:c6:3a:17:fe:25:97:
         25:ab:f9:69
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG
MUIzOUJGRDgwHhcNMjYwMjI4MjExODI5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWEzNWJhNS03YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoXcb+LXNkqZ1XNgsByRPAtXG3fHFfFqYYDhxR0e4OqALy6A43/yJv5LcjXqm
sQWabIXISKnne5HcyXYkFZm8fVJLo7GR+DxoJb76cj4ocfn4UCCQh9fI5RkO1ydK
3Ey9qi/6QePJeaKwbRMrAaqKaFUS9hWya6b+cPXW1KzNvdyJbrpygxyd3B2lDM5e
rnLUfxokmWsRe5oDj+swgeriqERtxyhbdIy2OKqkXuq40MhepSKa0Y7HNBi6ZLw1
JAL6AUinT0AbfAc5UiN9GHdtSs/ibPmIlavD5YMuaWMhzn9I8jUVkjfj574aIrlz
fwSOK152ZJ9nm4bp1Xj9EAh1uQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLqtY3CB
dCjuvNhf0L1UhSnVqryhMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF
QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc4NEUvNkI1NEQ5QzhGRUMxMTFFQTlFNzMzMzc1QzRGOUFFMDIvOEFBOTlCNTJG
RUM1MTFFQUJBQUU3ODE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyx7lMA0GCSqGSIb3DQEBCwUAA4IBAQBikZeLSibRTssz76vzpsSI
QCcHAH1+Lijk3+/nJ+mpjpYvGCNTCLenARr6kbN5Av69jLEadD6j8LYc0gl2BRbV
Z5qpiGFILfIzSnoyzAmQCP0JtybSPA3olTRpVG1O2uHSqRlZVjcAoJlS1ikFLhRx
DjA8PcZYXpfg+WwrrpBusoWlpwd2L4bJTIlgLbLSYYlo5JZ61ghkY7MDx1Prhqr2
gjaY2WMBdHy6l91HYiy5ZD/nsfocvilISO4VWR5+VJ7VvpxKV11Bz+7arlRO9UxN
LAXy5YfjoH99XUNCbJYh38oqSynAXzEvRqNl3hFCjG17SmA8XUfGOhf+JZclq/lp
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:42 2026 by rpki-client