Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa
File:                     26D56F6425FF11EBAF634966C4F9AE02.roa (raw, json)
Hash identifier:          Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=
Subject key identifier:   6B:66:B4:5B:8A:59:B6:78:3C:C3:66:E1:A0:91:04:F0:CD:63:C7:8D
Certificate issuer:       /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial:       07AA
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa
Signing time:             Fri 06 Jun 2025 21:41:00 +0000
ROA not before:           Fri 06 Jun 2025 21:41:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10229
IP address blocks:        202.43.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
                          rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 21:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1962 (0x7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
        Validity
            Not Before: Jun  6 21:41:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6843606c-6b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:e6:20:50:bc:e9:fe:4c:44:26:96:bd:5d:
                    e6:6f:d6:73:8d:f6:aa:57:07:dc:55:04:bd:56:c9:
                    9a:04:6f:99:f5:c9:48:90:a2:db:f3:b3:d8:65:04:
                    f1:06:bb:7c:32:e5:a3:53:23:bf:ed:1d:c4:93:a6:
                    e5:c1:25:98:35:aa:db:4c:b4:d4:d9:3a:7d:6f:7f:
                    d5:5f:2c:b6:c2:81:5d:23:f5:20:4b:55:52:50:13:
                    90:03:ff:85:29:2e:8e:b5:10:e7:ed:e0:5c:c8:86:
                    8c:d4:03:33:5c:84:66:61:be:35:0f:15:33:20:90:
                    16:9a:b8:d3:42:f3:31:e1:f7:09:3a:6a:98:5f:4f:
                    f4:8a:7d:66:5a:dd:5a:1e:20:58:b4:37:89:81:ac:
                    e6:09:d4:b2:d6:68:11:9b:20:cf:8c:df:ad:1d:28:
                    78:12:b3:87:40:4e:24:a2:1e:32:ae:bc:60:80:1c:
                    00:67:84:94:d0:34:39:f8:36:8a:5f:72:d9:59:85:
                    88:c5:07:48:fd:50:c6:e4:e9:5a:c0:79:e5:b8:38:
                    b6:97:80:48:fe:76:d5:86:0e:ec:15:5e:f8:c6:3e:
                    84:65:37:0d:43:b2:52:44:78:b4:80:1c:a6:27:c9:
                    b0:5d:5f:a1:0e:75:57:bc:fa:0d:30:c8:59:24:54:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:66:B4:5B:8A:59:B6:78:3C:C3:66:E1:A0:91:04:F0:CD:63:C7:8D
            X509v3 Authority Key Identifier:
                keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/26D56F6425FF11EBAF634966C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:69:d0:dc:07:17:69:ea:de:a7:ff:34:a5:81:f6:03:15:4f:
         fd:c7:5f:ff:8a:ba:52:1d:47:fb:90:a3:b8:fe:fe:fb:ac:a3:
         41:e8:9c:aa:d9:00:f9:03:1a:e7:71:1d:bc:12:2e:8b:2d:ec:
         c5:77:55:5f:1d:90:74:4c:31:0d:66:57:8b:4e:10:ac:d9:5f:
         9e:96:f6:55:42:84:fe:31:df:13:2c:d0:00:b7:42:90:0d:ae:
         e8:91:97:cd:30:ab:ec:c2:40:d9:bf:38:64:cd:17:2f:6c:53:
         ab:e3:7d:bd:e2:c9:e7:53:86:74:d5:83:18:b6:e5:37:25:cc:
         a2:cd:72:5e:58:0e:7b:5b:0d:4d:6c:60:a3:cb:f9:4d:51:0f:
         7f:0d:85:05:62:c7:4c:9b:22:ef:67:67:ce:42:3b:46:20:0c:
         0d:66:93:76:bc:15:69:3b:74:6d:03:f2:ae:08:5b:98:ae:6b:
         35:3e:a2:c0:83:bd:0b:1a:19:82:a6:94:24:0b:39:a2:92:8f:
         4d:68:65:b6:2e:35:eb:00:78:31:a0:4f:55:72:f8:c4:5e:a5:
         a2:4d:a4:17:06:d4:ab:75:fd:4b:26:76:ad:5e:1e:34:a5:73:
         e4:65:77:1e:95:5d:6c:b5:2b:b0:3c:37:46:ae:f7:53:b3:d0:
         49:1a:78:40
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1
RjlGNTFERjcwHhcNMjUwNjA2MjE0MTAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQzNjA2Yy02YjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDDmIFC86f5MRCaWvV3mb9ZzjfaqVwfcVQS9VsmaBG+Z9clIkKLb87PYZQTx
Brt8MuWjUyO/7R3Ek6blwSWYNarbTLTU2Tp9b3/VXyy2woFdI/UgS1VSUBOQA/+F
KS6OtRDn7eBcyIaM1AMzXIRmYb41DxUzIJAWmrjTQvMx4fcJOmqYX0/0in1mWt1a
HiBYtDeJgazmCdSy1mgRmyDPjN+tHSh4ErOHQE4koh4yrrxggBwAZ4SU0DQ5+DaK
X3LZWYWIxQdI/VDG5OlawHnluDi2l4BI/nbVhg7sFV74xj6EZTcNQ7JSRHi0gBym
J8mwXV+hDnVXvPoNMMhZJFSp1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGtmtFuK
WbZ4PMNm4aCRBPDNY8eNMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4
N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTlEQ0IvRTRDMEY1NkMxODdGMTFFQkFFMjk2OTJFQzRGOUFFMDIvMjZENTZGNjQy
NUZGMTFFQkFGNjM0OTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHKK9gwDQYJKoZIhvcNAQELBQADggEBAFhp0NwHF2nq3qf/
NKWB9gMVT/3HX/+KulIdR/uQo7j+/vuso0HonKrZAPkDGudxHbwSLost7MV3VV8d
kHRMMQ1mV4tOEKzZX56W9lVChP4x3xMs0AC3QpANruiRl80wq+zCQNm/OGTNFy9s
U6vjfb3iyedThnTVgxi25TclzKLNcl5YDntbDU1sYKPL+U1RD38NhQVix0ybIu9n
Z85CO0YgDA1mk3a8FWk7dG0D8q4IW5iuazU+osCDvQsaGYKmlCQLOaKSj01oZbYu
NesAeDGgT1Vy+MRepaJNpBcG1Kt1/Usmdq1eHjSlc+Rldx6VXWy1K7A8N0au91Oz
0EkaeEA=
-----END CERTIFICATE-----
Generated at Fri Jun 20 17:07:13 2025 by rpki-client