Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/1576F19ABC5C11EB831EC25AC4F9AE02.roa
File:                     1576F19ABC5C11EB831EC25AC4F9AE02.roa (raw, json)
Hash identifier:          /3x4vYPiXoG8rAiPY7APpgt+Ap9Ktaa/xQN8yrKkbXg=
Subject key identifier:   AD:C8:AD:E4:BA:A3:CD:49:EA:36:01:DE:5B:6B:16:45:B2:DA:19:73
Certificate issuer:       /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D
Certificate serial:       066A
Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/1576F19ABC5C11EB831EC25AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:49:48 +0000
ROA not before:           Wed 02 Jul 2025 23:35:13 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        203.23.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl
                          rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D
        Validity
            Not Before: Jul  2 23:35:13 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a40bbc-f20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:d1:e0:fd:36:86:c0:a1:85:c4:13:b5:82:
                    b7:9f:73:96:6e:96:0c:c5:53:6c:84:db:23:61:09:
                    30:f4:8e:13:5e:d6:4e:aa:96:12:a0:1e:13:81:b5:
                    8e:a7:d0:62:f7:b7:70:3e:68:f1:af:c8:de:e7:ca:
                    c0:6e:ed:48:f2:d2:e3:71:e4:07:d3:29:c4:ea:71:
                    c9:e5:b9:5e:08:89:34:30:a9:0f:71:17:9d:5f:9e:
                    76:80:29:11:44:ce:1c:e6:87:d8:37:1c:a4:bd:67:
                    e0:71:07:70:49:f0:db:5b:b0:8d:ce:e7:29:b5:4d:
                    88:af:03:a7:d7:3c:85:69:a5:4b:a5:dc:1c:13:ee:
                    5a:c4:0c:ad:d1:9f:80:da:1d:3c:01:30:cc:f9:db:
                    60:50:e9:a1:9d:b7:91:e7:24:b4:b2:f8:2e:01:23:
                    55:57:8e:94:d9:49:b4:d5:e3:a6:86:9c:d6:71:be:
                    a4:10:fd:c9:6f:86:be:7d:69:6e:d5:b8:96:c0:5e:
                    bf:77:56:90:6d:7f:6f:54:9f:b2:e7:f6:e9:df:0e:
                    e8:08:38:e2:2f:fd:69:c8:dc:ff:7b:cc:ee:54:78:
                    b7:e3:93:b4:4d:0c:3c:11:4d:ea:d6:88:a6:8b:d5:
                    30:cd:40:ef:b2:c1:22:5d:79:f3:43:29:26:e7:aa:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C8:AD:E4:BA:A3:CD:49:EA:36:01:DE:5B:6B:16:45:B2:DA:19:73
            X509v3 Authority Key Identifier:
                keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/1576F19ABC5C11EB831EC25AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:64:c8:ae:f2:3a:ce:bc:c9:71:68:ca:93:18:9d:c2:4e:
         6a:e8:f5:22:ce:03:44:ab:12:66:61:27:a3:93:2d:dc:f0:2d:
         9f:19:a9:76:5b:32:73:1c:c6:51:92:e0:30:78:8d:3e:31:12:
         8f:20:be:45:0a:20:11:fb:0c:15:77:09:42:b5:ec:c2:91:86:
         3c:01:75:a8:59:95:1d:a3:b4:bb:68:10:12:3d:9e:e5:55:70:
         2f:88:e7:3a:0e:76:f7:ee:7e:06:2f:1c:22:fc:ef:06:8b:98:
         1c:af:ee:b0:69:64:e5:26:fc:b0:b0:1f:ee:17:82:bf:fa:9d:
         46:6f:33:81:d1:0b:1f:c8:59:72:4b:59:f7:48:1d:11:01:b3:
         f5:27:4e:ff:95:df:bb:8e:4f:8b:05:66:4b:ed:6d:4a:bf:c9:
         7a:f6:40:57:d7:65:a6:3d:70:59:d0:fc:b5:ca:75:59:2b:20:
         bc:8e:51:23:f1:06:b7:d7:57:86:fc:b3:e6:53:f5:06:3d:69:
         73:88:f7:08:66:78:20:c3:57:5b:8b:54:0e:33:68:8d:2e:61:
         80:04:bb:f1:fb:61:40:49:d3:29:e7:31:3a:1a:77:44:8c:5a:
         88:62:51:05:54:70:56:16:b6:8b:f2:c5:d0:76:24:41:a6:d5:
         29:5b:57:69
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE
NDAxODMxNkQwHhcNMjUwNzAyMjMzNTEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGJiYy1mMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzLnR4P02hsChhcQTtYK3n3OWbpYMxVNshNsjYQkw9I4TXtZOqpYSoB4TgbWO
p9Bi97dwPmjxr8je58rAbu1I8tLjceQH0ynE6nHJ5bleCIk0MKkPcRedX552gCkR
RM4c5ofYNxykvWfgcQdwSfDbW7CNzucptU2IrwOn1zyFaaVLpdwcE+5axAyt0Z+A
2h08ATDM+dtgUOmhnbeR5yS0svguASNVV46U2Um01eOmhpzWcb6kEP3Jb4a+fWlu
1biWwF6/d1aQbX9vVJ+y5/bp3w7oCDjiL/1pyNz/e8zuVHi345O0TQw8EU3q1oim
i9UwzUDvssEiXXnzQykm56ojlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK3IreS6
o81J6jYB3ltrFkWy2hlzMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD
NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN
VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjJFQkQvMzEyMDA2NUVCQzVBMTFFQjhFMUQ5MjU4QzRGOUFFMDIvMTU3NkYxOUFC
QzVDMTFFQjgzMUVDMjVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxdMMA0GCSqGSIb3DQEBCwUAA4IBAQAo12TIrvI6zrzJcWjKkxid
wk5q6PUizgNEqxJmYSejky3c8C2fGal2WzJzHMZRkuAweI0+MRKPIL5FCiAR+wwV
dwlCtezCkYY8AXWoWZUdo7S7aBASPZ7lVXAviOc6Dnb37n4GLxwi/O8Gi5gcr+6w
aWTlJvywsB/uF4K/+p1GbzOB0QsfyFlyS1n3SB0RAbP1J07/ld+7jk+LBWZL7W1K
v8l69kBX12WmPXBZ0Py1ynVZKyC8jlEj8Qa311eG/LPmU/UGPWlziPcIZnggw1db
i1QOM2iNLmGABLvx+2FASdMp5zE6GndEjFqIYlEFVHBWFraL8sXQdiRBptUpW1dp
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:18 2026 by rpki-client