Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/284E9E9E1D5611EB891ADC6CC4F9AE02.roa
File:                     284E9E9E1D5611EB891ADC6CC4F9AE02.roa (raw, json)
Hash identifier:          0K9xo1NevqH2KRC8xQxUcHRpqfQKIdlyoCnPNU33oSE=
Subject key identifier:   D4:C3:6D:2E:E0:20:88:CD:1B:2D:D9:56:A5:47:53:11:F2:83:C2:BF
Certificate issuer:       /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial:       0839
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/284E9E9E1D5611EB891ADC6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:44:31 +0000
ROA not before:           Fri 06 Jun 2025 21:40:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     10228
IP address blocks:        202.43.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
                          rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
        Validity
            Not Before: Jun  6 21:40:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a45edf-afe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:95:1a:0f:ba:e0:a1:7d:69:6b:0d:f4:d5:
                    1d:a4:e6:c8:4f:67:86:54:af:4f:54:d1:09:af:18:
                    6d:b2:8d:8b:5f:03:6c:2e:e9:db:bd:05:e0:23:4f:
                    ae:2a:5f:2c:f6:f5:4b:40:d8:7e:5a:ab:10:74:ec:
                    a4:da:d6:05:67:72:ce:f0:6c:b3:d9:32:95:e9:89:
                    37:89:54:cb:29:6e:df:4d:27:df:6a:1d:32:28:1a:
                    3e:ea:80:f4:40:d6:62:c7:aa:16:5a:a7:b4:6d:2b:
                    c3:02:f0:8b:be:3b:c2:b1:71:27:ae:2b:63:6b:a3:
                    bb:ae:0a:a9:2c:c9:a9:ec:0d:b8:a7:a7:b5:b8:4b:
                    b9:f6:31:55:d0:77:59:43:75:67:ed:bd:6e:0f:9d:
                    c6:1e:f5:46:b4:5c:fc:8c:0d:2a:b3:0b:d5:9b:af:
                    62:08:dd:38:15:05:51:f2:52:f4:69:eb:23:74:54:
                    3e:cd:0f:0f:c7:db:74:3d:f2:d2:28:f9:bb:ba:6a:
                    d7:9b:6a:57:21:2c:f0:4a:81:54:d5:af:12:c8:17:
                    2e:7d:15:be:07:b0:ac:f0:b4:10:f2:19:97:05:3f:
                    64:7e:9a:01:b5:0b:65:51:41:58:92:78:dc:de:83:
                    6d:ba:de:2d:86:7a:44:cf:91:82:e4:0a:b6:19:ec:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C3:6D:2E:E0:20:88:CD:1B:2D:D9:56:A5:47:53:11:F2:83:C2:BF
            X509v3 Authority Key Identifier:
                keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/284E9E9E1D5611EB891ADC6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:8e:2e:db:fc:1f:dd:d1:cf:1b:5c:cf:b8:de:f8:10:0e:12:
         45:73:e8:2d:27:a3:34:d2:ac:01:96:5b:55:3c:46:19:86:24:
         04:fd:52:28:cd:bc:19:17:bc:39:bd:c5:a5:54:c3:f0:78:de:
         6d:76:48:f4:47:a9:ca:cb:79:0e:f2:1c:3b:1b:8c:3a:62:00:
         d9:6c:74:f3:37:b0:4a:9c:63:d3:8d:11:b2:e0:b1:87:e3:e9:
         0a:b7:e5:ab:2b:5a:92:36:f0:a4:24:8b:9c:67:c5:ab:3e:44:
         0d:32:81:22:0f:de:65:07:13:91:32:bd:9c:4f:6f:80:0f:c8:
         89:ab:d0:f0:1e:2b:64:c2:47:8b:02:83:6b:f5:00:25:00:86:
         2d:7c:98:a8:f5:15:ff:6d:3b:dc:cf:2c:33:fd:cd:e6:c5:5b:
         80:58:1d:0b:7c:f6:af:66:50:9a:f7:4c:c7:e3:38:b9:f2:3d:
         60:62:74:a5:4c:6b:fe:f4:6e:63:c4:99:62:f1:86:2d:f5:2e:
         8a:4b:94:24:5f:cd:f4:4d:e9:ba:b5:ad:91:78:84:dd:59:b4:
         ce:dd:c4:12:8c:02:19:bd:bb:64:75:12:e2:89:3f:7c:48:39:
         e0:88:3c:6e:2a:da:1d:5b:15:49:7e:c4:0b:bc:3b:2b:2a:06:
         e9:45:a9:be
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1
RjlGNTFERjcwHhcNMjUwNjA2MjE0MDU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWVkZi1hZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwc+VGg+64KF9aWsN9NUdpObIT2eGVK9PVNEJrxhtso2LXwNsLunbvQXgI0+u
Kl8s9vVLQNh+WqsQdOyk2tYFZ3LO8Gyz2TKV6Yk3iVTLKW7fTSffah0yKBo+6oD0
QNZix6oWWqe0bSvDAvCLvjvCsXEnritja6O7rgqpLMmp7A24p6e1uEu59jFV0HdZ
Q3Vn7b1uD53GHvVGtFz8jA0qswvVm69iCN04FQVR8lL0aesjdFQ+zQ8Px9t0PfLS
KPm7umrXm2pXISzwSoFU1a8SyBcufRW+B7Cs8LQQ8hmXBT9kfpoBtQtlUUFYknjc
3oNtut4thnpEz5GC5Aq2Gez8PwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNTDbS7g
IIjNGy3ZVqVHUxHyg8K/MB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4
N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTlEQ0IvRTRDMEY1NkMxODdGMTFFQkFFMjk2OTJFQzRGOUFFMDIvMjg0RTlFOUUx
RDU2MTFFQjg5MUFEQzZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQByivYMA0GCSqGSIb3DQEBCwUAA4IBAQBAji7b/B/d0c8bXM+43vgQ
DhJFc+gtJ6M00qwBlltVPEYZhiQE/VIozbwZF7w5vcWlVMPweN5tdkj0R6nKy3kO
8hw7G4w6YgDZbHTzN7BKnGPTjRGy4LGH4+kKt+WrK1qSNvCkJIucZ8WrPkQNMoEi
D95lBxORMr2cT2+AD8iJq9DwHitkwkeLAoNr9QAlAIYtfJio9RX/bTvczywz/c3m
xVuAWB0LfPavZlCa90zH4zi58j1gYnSlTGv+9G5jxJli8YYt9S6KS5QkX830Tem6
ta2ReITdWbTO3cQSjAIZvbtkdRLiiT98SDngiDxuKtodWxVJfsQLvDsrKgbpRam+
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:27 2026 by rpki-client