Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/699C6052D60D11E9A0539B2EC4F9AE02.roa
File:                     699C6052D60D11E9A0539B2EC4F9AE02.roa (raw, json)
Hash identifier:          Jq+fenEWrGpMf3MTBZ/FN03Ey4113yMjyuYTne9fALY=
Subject key identifier:   86:AF:95:7A:40:02:C2:96:C4:03:89:6F:1F:34:65:0A:E2:71:49:63
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BBB
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/699C6052D60D11E9A0539B2EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:23:00 +0000
ROA not before:           Fri 02 Jan 2026 16:13:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136605
IP address blocks:        202.80.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11195 (0x2bbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a49214-09a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:61:bd:61:d4:aa:5c:79:21:6e:f0:42:11:
                    ad:4f:1f:a2:df:da:67:a8:c9:b8:d2:44:41:de:a3:
                    8f:71:e8:01:3e:73:ec:86:5e:8c:66:4f:3c:f5:ef:
                    c2:58:2c:92:f4:09:3e:41:81:c3:2c:1d:9f:3a:1d:
                    af:4b:10:c1:6a:a7:39:fe:7a:05:cf:6f:7f:72:b2:
                    32:a6:d1:e2:6e:27:b4:cf:57:6d:68:18:98:a8:b7:
                    de:1c:b0:5a:f9:e0:f9:10:6c:53:e7:b5:9a:18:bf:
                    d0:65:38:cd:02:cc:98:e9:2b:ff:dd:94:dd:3a:e6:
                    fe:f3:fd:dc:b8:34:d1:ea:a6:c7:c8:f5:20:34:5b:
                    fa:ae:53:be:f1:88:20:26:d2:df:3e:2b:a4:d0:d3:
                    a8:7f:51:7d:24:59:4e:88:00:c9:83:8d:fe:fd:51:
                    97:35:2c:77:72:3d:58:92:9e:85:f0:22:3b:da:01:
                    12:45:09:b3:58:a7:0a:8c:d1:7c:13:b8:41:db:58:
                    1d:1a:b6:52:ea:f7:e0:cb:eb:77:45:92:30:46:3c:
                    42:17:2e:ea:d8:8d:e2:67:a8:ba:7e:a7:3b:ad:00:
                    0e:49:23:6e:9d:41:c4:77:55:d8:46:50:53:e8:6b:
                    e6:53:1c:fa:b5:da:4e:c4:a2:63:50:b5:49:cf:ca:
                    18:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AF:95:7A:40:02:C2:96:C4:03:89:6F:1F:34:65:0A:E2:71:49:63
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/699C6052D60D11E9A0539B2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:bf:a8:b5:63:dd:72:42:18:80:82:28:ee:5a:5b:7a:33:1e:
         fd:32:bf:88:71:d2:70:05:3d:a7:03:aa:45:c7:fe:c2:03:48:
         f9:6c:d6:65:8b:be:4c:39:70:62:99:4b:47:aa:e3:06:45:6b:
         d3:e5:2b:df:d5:40:28:56:cb:f5:f4:1d:8f:25:51:c6:14:58:
         87:95:05:e6:e1:01:39:3b:d7:22:45:63:2a:ae:aa:f6:32:54:
         56:c2:f0:26:99:d0:5b:f2:28:53:d1:ec:b4:af:ef:e6:fa:00:
         70:61:e3:f1:97:3c:5d:af:e2:53:7e:6e:72:35:b8:77:80:3c:
         27:92:98:3d:3e:4c:2a:27:eb:d1:93:3b:89:44:8a:a8:f1:14:
         26:1d:5e:05:77:f9:c3:a0:11:99:ec:ce:59:d4:f9:80:0f:80:
         04:07:ed:01:53:8b:1e:67:d9:19:77:62:3d:28:b9:48:d6:ee:
         73:43:9e:27:c3:db:a7:2c:e6:f7:cc:01:ac:b7:80:a4:2b:22:
         18:85:25:3a:2d:3c:e5:6e:f6:67:97:24:da:ca:ec:47:61:f4:
         75:58:4a:8c:c6:43:b1:ab:b1:69:cd:79:8b:cc:8c:00:73:27:
         86:47:33:5b:e5:26:09:f6:25:7b:ff:ee:38:25:48:8a:18:04:
         50:69:e1:53
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTIxNC0wOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn71hvWHUqlx5IW7wQhGtTx+i39pnqMm40kRB3qOPcegBPnPshl6MZk889e/C
WCyS9Ak+QYHDLB2fOh2vSxDBaqc5/noFz29/crIyptHibie0z1dtaBiYqLfeHLBa
+eD5EGxT57WaGL/QZTjNAsyY6Sv/3ZTdOub+8/3cuDTR6qbHyPUgNFv6rlO+8Ygg
JtLfPiuk0NOof1F9JFlOiADJg43+/VGXNSx3cj1Ykp6F8CI72gESRQmzWKcKjNF8
E7hB21gdGrZS6vfgy+t3RZIwRjxCFy7q2I3iZ6i6fqc7rQAOSSNunUHEd1XYRlBT
6GvmUxz6tdpOxKJjULVJz8oYjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIavlXpA
AsKWxAOJbx80ZQricUljMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvNjk5QzYwNTJE
NjBEMTFFOUEwNTM5QjJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAylD/MA0GCSqGSIb3DQEBCwUAA4IBAQBzv6i1Y91yQhiAgijuWlt6
Mx79Mr+IcdJwBT2nA6pFx/7CA0j5bNZli75MOXBimUtHquMGRWvT5Svf1UAoVsv1
9B2PJVHGFFiHlQXm4QE5O9ciRWMqrqr2MlRWwvAmmdBb8ihT0ey0r+/m+gBwYePx
lzxdr+JTfm5yNbh3gDwnkpg9PkwqJ+vRkzuJRIqo8RQmHV4Fd/nDoBGZ7M5Z1PmA
D4AEB+0BU4seZ9kZd2I9KLlI1u5zQ54nw9unLOb3zAGst4CkKyIYhSU6LTzlbvZn
lyTayuxHYfR1WEqMxkOxq7FpzXmLzIwAcyeGRzNb5SYJ9iV7/+44JUiKGARQaeFT
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:57 2026 by rpki-client