Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/20313836639E11ECA24A0411C4F9AE02.roa
File:                     20313836639E11ECA24A0411C4F9AE02.roa (raw, json)
Hash identifier:          52cdHjvrEl/AEQax5U+EBppBhjw50cTtpOuMNyEIXwM=
Subject key identifier:   F9:3A:E4:FE:36:E3:62:D2:CC:E2:B5:29:4E:2B:D2:ED:6E:72:6F:3D
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BE4
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/20313836639E11ECA24A0411C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:23:36 +0000
ROA not before:           Fri 02 Jan 2026 16:13:49 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4827
IP address blocks:        58.64.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11236 (0x2be4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:49 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a49238-ac76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fa:18:8d:c0:72:45:f9:10:97:a0:c5:14:c4:
                    12:75:0b:73:40:3f:1d:f5:cc:53:e6:0c:19:2f:52:
                    d6:82:a9:c0:3a:c6:4c:63:f5:c1:16:42:b1:11:51:
                    5b:97:78:72:53:86:05:bb:7b:71:dd:48:79:89:c1:
                    4f:cc:80:8f:16:1e:13:10:f7:b8:62:b6:c8:be:30:
                    38:4d:8d:65:73:53:21:22:42:8a:74:10:d5:fa:d4:
                    a6:05:f8:39:77:70:d0:12:f1:97:c6:7b:c3:eb:4f:
                    f3:be:46:02:58:e9:e4:19:ce:fe:53:a3:34:77:de:
                    f2:ba:7a:91:c8:25:db:f1:f5:7a:c8:cf:a7:b9:40:
                    ef:86:d3:b4:51:11:54:69:a3:08:e6:4a:8a:2a:c5:
                    b7:8f:c3:7b:e5:2f:77:a0:66:ac:d8:f3:a6:8c:e1:
                    b2:a5:31:7d:bd:0a:13:00:97:bd:ff:9e:f8:05:c9:
                    bc:fb:fe:f1:f1:4a:12:25:26:4e:fb:bf:70:a6:6a:
                    82:53:57:c6:28:24:b4:92:c0:e6:34:ad:bc:cb:df:
                    c5:e9:96:34:cd:ae:22:3e:2a:d5:85:8d:82:a9:8e:
                    74:3b:63:87:32:8b:fd:d8:1f:07:1d:38:81:83:92:
                    50:8f:24:a6:46:69:8b:0b:da:2a:26:b2:54:5a:14:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3A:E4:FE:36:E3:62:D2:CC:E2:B5:29:4E:2B:D2:ED:6E:72:6F:3D
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/20313836639E11ECA24A0411C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.64.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:16:6a:ec:4e:4a:2a:a1:58:cf:14:95:a8:fa:f4:e4:45:39:
         af:81:df:d6:c1:85:9e:46:1f:e0:7a:8c:dd:2a:d0:0b:c0:2d:
         14:ad:fc:7e:fe:70:9e:98:2b:a6:11:5b:fb:2d:8b:51:4d:a6:
         0f:4c:29:ff:f9:88:4a:47:43:da:b4:01:01:c5:0a:61:79:bd:
         19:9c:c2:ae:bd:ce:c8:a7:ab:35:9e:85:9d:59:25:49:47:f5:
         d1:d3:9f:1f:63:85:8a:ff:30:f8:97:88:b5:0a:58:90:ef:e6:
         ff:71:6c:86:77:0c:8f:f5:c1:fb:6e:8a:a9:0a:17:d1:95:c0:
         4a:4f:65:01:b5:06:60:f3:02:cc:dc:1c:cb:98:34:7f:3a:56:
         ae:59:37:a6:2f:30:9b:25:fe:9f:b6:26:d2:43:db:79:c0:79:
         6b:19:7a:3d:56:4b:25:32:bb:39:63:09:0d:12:a6:4a:50:9e:
         92:33:e1:ec:e1:b4:81:22:68:79:87:cc:42:30:5b:c4:63:06:
         90:e6:13:22:02:79:41:26:c6:1e:27:d7:ef:d2:a3:3b:47:33:
         04:56:97:a7:b3:3d:32:5b:1a:b0:f6:34:f7:76:9b:f6:8e:60:
         36:fc:89:bd:0e:d6:17:0b:e0:fa:5e:54:00:fc:3c:3f:e2:3c:
         83:7a:2a:63
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTIzOC1hYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlfoYjcByRfkQl6DFFMQSdQtzQD8d9cxT5gwZL1LWgqnAOsZMY/XBFkKxEVFb
l3hyU4YFu3tx3Uh5icFPzICPFh4TEPe4YrbIvjA4TY1lc1MhIkKKdBDV+tSmBfg5
d3DQEvGXxnvD60/zvkYCWOnkGc7+U6M0d97yunqRyCXb8fV6yM+nuUDvhtO0URFU
aaMI5kqKKsW3j8N75S93oGas2POmjOGypTF9vQoTAJe9/574Bcm8+/7x8UoSJSZO
+79wpmqCU1fGKCS0ksDmNK28y9/F6ZY0za4iPirVhY2CqY50O2OHMov92B8HHTiB
g5JQjySmRmmLC9oqJrJUWhSc7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPk65P42
42LSzOK1KU4r0u1ucm89MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMjAzMTM4MzY2
MzlFMTFFQ0EyNEEwNDExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAOkAiMA0GCSqGSIb3DQEBCwUAA4IBAQChFmrsTkoqoVjPFJWo+vTk
RTmvgd/WwYWeRh/geozdKtALwC0Urfx+/nCemCumEVv7LYtRTaYPTCn/+YhKR0Pa
tAEBxQpheb0ZnMKuvc7Ip6s1noWdWSVJR/XR058fY4WK/zD4l4i1CliQ7+b/cWyG
dwyP9cH7boqpChfRlcBKT2UBtQZg8wLM3BzLmDR/OlauWTemLzCbJf6ftibSQ9t5
wHlrGXo9VkslMrs5YwkNEqZKUJ6SM+Hs4bSBImh5h8xCMFvEYwaQ5hMiAnlBJsYe
J9fv0qM7RzMEVpensz0yWxqw9jT3dpv2jmA2/Im9DtYXC+D6XlQA/Dw/4jyDeipj
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:34 2026 by rpki-client