Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/284E9E9E1D5611EB891ADC6CC4F9AE02.roa
File:                     284E9E9E1D5611EB891ADC6CC4F9AE02.roa (raw, json)
Hash identifier:          fTOR9/QC+OhH2+hrGoKHcs/jMnPvIkd1epQi4PDNnQE=
Subject key identifier:   61:FA:4F:EA:81:68:C2:A5:0A:DD:11:79:22:A7:93:51:6B:22:0E:40
Certificate issuer:       /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial:       0875
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/284E9E9E1D5611EB891ADC6CC4F9AE02.roa
Signing time:             Sat 06 Jun 2026 21:25:28 +0000
ROA not before:           Sat 06 Jun 2026 21:25:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     10228
IP address blocks:        202.43.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
                          rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
        Validity
            Not Before: Jun  6 21:25:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a249048-b166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:04:c2:c0:17:a0:6d:a6:2f:d4:7e:98:ef:
                    bb:99:96:31:82:4e:d1:a8:1b:75:29:e2:3c:65:cf:
                    e6:81:5e:37:f6:ff:3b:68:89:7c:dd:23:1f:7b:e0:
                    1f:2f:a5:cb:6b:f9:2c:16:49:b6:96:aa:d6:90:b7:
                    47:4c:31:92:08:29:3b:bb:e5:37:e1:f3:e6:b3:9c:
                    27:bc:94:f3:b2:53:66:94:2a:ed:14:ed:56:7c:d4:
                    85:6b:8b:c5:d7:1e:b4:46:50:8b:d1:cc:72:53:88:
                    cd:f0:b3:4d:6c:01:61:2b:f6:32:e9:76:8b:cd:fc:
                    b7:63:a8:1d:66:30:4c:f3:aa:81:77:7e:16:56:e3:
                    b7:dd:84:66:e7:2b:76:b9:a3:e9:34:95:f6:d5:6f:
                    83:4f:9f:a3:33:b8:28:07:e1:96:51:c4:52:bf:81:
                    72:db:0b:a0:b3:8f:e3:d5:0a:80:34:8c:b4:c5:76:
                    18:1e:7f:3e:0c:f0:bc:40:84:26:e5:74:55:ba:b7:
                    4b:8c:4d:b9:d5:2a:67:2e:0d:72:e9:07:72:4b:df:
                    c4:c2:ec:3e:de:7a:c0:7b:ca:2c:d7:f6:19:65:f9:
                    1f:63:cd:91:f3:97:2e:f5:3d:55:45:c3:3d:55:a8:
                    ef:5a:09:a3:54:05:b6:97:23:31:69:6d:0f:5e:f9:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FA:4F:EA:81:68:C2:A5:0A:DD:11:79:22:A7:93:51:6B:22:0E:40
            X509v3 Authority Key Identifier:
                keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/284E9E9E1D5611EB891ADC6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:ee:cf:ff:bc:2b:0d:61:01:82:b2:30:00:01:b4:d9:4a:ef:
         bc:46:a5:a6:27:16:bf:69:6e:98:d8:27:b9:6d:79:26:4e:b7:
         b3:c3:a0:0f:09:e5:c6:51:91:74:dc:db:80:f6:49:b9:cd:3b:
         eb:e8:d0:2b:83:9b:ab:a2:92:9c:48:dd:85:01:08:da:6e:42:
         69:c1:4c:bc:50:34:df:da:46:18:78:94:80:d5:94:03:39:39:
         70:8c:24:68:75:b2:8e:2e:25:aa:8b:a5:f4:04:ea:a0:7e:9b:
         4c:64:1f:42:33:98:c3:2a:12:5d:43:ab:70:8c:a1:1d:40:83:
         28:22:60:a1:d6:83:1b:ac:cd:fa:75:ef:d4:82:fd:10:15:7a:
         69:4e:01:d2:c3:95:b2:59:77:38:19:62:b6:35:ba:49:17:e2:
         0f:f6:cc:80:5e:0b:da:0f:27:bc:80:1d:31:f0:a0:47:f3:da:
         ac:a1:da:8b:43:ee:c3:43:4a:04:16:ca:c0:b1:fe:79:94:13:
         76:22:22:ac:6c:a3:ef:da:c5:c8:00:48:1b:ba:c7:e6:64:34:
         19:fa:bf:3c:0d:02:bf:88:3f:02:3c:3d:3b:a7:40:8a:0b:c5:
         51:f9:d7:37:14:e0:33:b1:41:af:84:2d:da:6b:73:f2:71:c7:
         c2:a8:6e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:31 2026 by rpki-client