Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/DA8A3692A59411F0BF072D6DC4F9AE02.roa
File:                     DA8A3692A59411F0BF072D6DC4F9AE02.roa (raw, json)
Hash identifier:          KPbP95r3TCc58AOeYUlQqKFz/YOZ3L4nxR/B312mHxQ=
Subject key identifier:   52:F3:91:5D:43:9B:26:35:0D:C7:B8:1A:5D:D1:9B:71:A9:87:3B:58
Certificate issuer:       /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial:       3579
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/DA8A3692A59411F0BF072D6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:11:59 +0000
ROA not before:           Fri 10 Oct 2025 04:52:43 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     23647
IP address blocks:        202.51.80.0/24 maxlen: 24
                          202.51.81.0/24 maxlen: 24
                          202.51.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
                          rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13689 (0x3579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
        Validity
            Not Before: Oct 10 04:52:43 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4816f-ba9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:58:77:f2:82:bf:96:1b:a4:ba:e3:f0:fd:
                    d5:69:73:2b:59:34:c6:54:f2:f7:ba:81:7d:fa:21:
                    e1:40:5d:6f:7c:cf:6f:9d:c8:ac:e5:93:bf:f9:67:
                    5e:8f:4c:cd:06:e3:04:f1:e8:ef:a6:66:eb:52:3b:
                    64:af:93:47:86:dd:cc:3c:d0:a0:6c:cd:92:21:2d:
                    83:43:43:56:b9:bb:fe:47:b4:ce:b8:b3:4c:68:53:
                    49:14:49:f9:de:c0:3d:54:76:3a:d9:f5:5c:d0:b7:
                    cf:d8:7f:d9:0f:5f:33:3d:c0:5c:66:87:10:50:64:
                    5c:44:e9:2f:e6:3b:81:17:fc:05:1b:17:b2:fa:b6:
                    d0:a7:3d:f5:e9:61:07:59:0e:ef:8a:b3:2c:83:78:
                    65:54:b8:02:d4:bd:65:05:41:e3:5a:32:3c:38:e3:
                    98:e2:3f:ef:da:aa:04:20:58:4c:40:7d:33:ba:7c:
                    5e:4c:91:6e:58:7e:c6:d5:c7:f2:9c:58:df:e2:78:
                    50:a1:fc:95:14:21:f6:a6:2e:aa:80:37:4f:bd:f4:
                    e0:28:dc:bd:4c:e8:fd:b1:8d:7c:fb:ba:9d:b3:99:
                    e4:e0:3a:62:8d:83:ac:55:08:f9:78:8a:30:14:05:
                    bb:5c:b0:c2:d4:87:71:77:24:86:33:73:13:fc:bf:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F3:91:5D:43:9B:26:35:0D:C7:B8:1A:5D:D1:9B:71:A9:87:3B:58
            X509v3 Authority Key Identifier:
                keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/DA8A3692A59411F0BF072D6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.51.80.0/23
                  202.51.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:46:5f:49:d0:ea:d4:59:c7:79:65:f9:a7:85:cb:b3:84:41:
         a7:c0:30:98:e2:df:d2:19:53:14:4e:5f:72:42:48:82:a1:32:
         53:7b:ef:2b:c5:b1:b8:ed:a6:95:0c:2a:04:e8:5e:b4:18:36:
         ed:f1:83:b0:ba:c3:52:63:60:d8:2a:50:7c:66:a1:71:0a:d0:
         c1:b9:df:41:f9:fb:3b:6b:1f:03:ed:ab:dc:e7:7e:61:fa:7a:
         73:a7:10:dd:ea:5e:02:ec:94:66:ee:cf:b9:12:d3:3e:37:e4:
         8e:57:8b:7f:40:4c:03:f6:ec:54:13:6c:df:b0:a8:b0:5a:35:
         b8:e9:bd:ea:e3:e0:04:8e:6e:a5:7c:ee:18:78:19:dc:c9:0f:
         73:e3:9b:c4:cc:37:db:25:91:a7:8a:07:46:af:a7:91:0e:f2:
         06:ed:b6:4e:c8:7e:40:c0:f4:08:e5:42:b3:fe:53:1f:3a:b7:
         ac:b3:6f:b5:fd:dc:14:0e:02:ef:bc:32:42:7d:f0:b2:fb:20:
         aa:0a:cf:ce:ab:d4:7f:1b:35:ec:1d:ca:ca:71:3a:d1:7b:0a:
         f9:a3:ad:dc:32:d1:c7:98:67:73:48:cf:ca:10:7d:c0:f1:3d:
         e9:9b:53:55:ab:99:55:4f:23:91:be:78:5b:92:d0:6b:53:06:
         72:8b:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:07 2026 by rpki-client