Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/D5271A183ADB11F0BC52A042C4F9AE02.roa
File:                     D5271A183ADB11F0BC52A042C4F9AE02.roa (raw, json)
Hash identifier:          KM3zcDRIYT9oq/Wkhlh7FP99EJLA5sWO1MorkCKVVvE=
Subject key identifier:   46:89:B0:D6:A1:1E:8B:EF:6F:93:BD:76:D8:78:9C:37:4F:38:8E:81
Certificate issuer:       /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial:       A2
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/D5271A183ADB11F0BC52A042C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:36:10 +0000
ROA not before:           Tue 27 May 2025 09:20:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        205.210.164.0/24 maxlen: 24
                          205.210.166.0/24 maxlen: 24
                          205.210.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
        Validity
            Not Before: May 27 09:20:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a424aa-82c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:70:a1:81:34:9b:4a:a7:6b:bd:23:4f:9a:be:
                    c2:11:7d:5f:a2:16:d8:ef:55:0a:fe:78:a5:dc:33:
                    ff:aa:20:39:c9:80:d0:1d:e2:22:fe:be:39:05:91:
                    ae:a4:a5:3d:cd:0a:08:89:8a:4e:c1:64:cc:31:23:
                    82:15:07:f5:03:8e:f0:0f:9c:3d:fb:9e:c0:08:8c:
                    02:63:02:6e:44:dd:25:bb:d1:ab:92:d3:a7:44:b5:
                    7e:9a:f1:a1:20:09:f8:22:39:49:fb:98:0a:54:31:
                    5e:58:41:95:1e:50:f2:94:3d:74:7c:55:0e:36:69:
                    00:4c:f0:fb:f4:e1:e1:73:1e:61:ef:2b:56:7c:e0:
                    68:7d:82:0b:f2:0b:f7:c2:ed:5f:88:b3:ce:0f:af:
                    6b:50:85:87:21:21:71:a5:50:fe:39:79:ca:9f:a0:
                    35:40:59:1a:9d:36:e1:c9:3b:bb:df:6c:dd:a8:3b:
                    3f:99:a4:23:03:9c:9a:f6:98:d4:dc:e7:b5:3a:d7:
                    3d:f0:94:46:f9:00:21:77:88:56:82:5c:5a:f2:87:
                    94:9e:53:09:f2:69:86:db:8d:fb:de:0f:a9:e0:b3:
                    bc:34:d6:35:9d:89:28:fe:89:5a:1f:48:fc:fb:b9:
                    52:d0:bf:4f:de:56:54:57:04:ce:e1:5f:c5:29:da:
                    e7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:89:B0:D6:A1:1E:8B:EF:6F:93:BD:76:D8:78:9C:37:4F:38:8E:81
            X509v3 Authority Key Identifier:
                keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/D5271A183ADB11F0BC52A042C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.164.0/24
                  205.210.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:34:8c:41:4c:9b:1c:1c:f8:fa:dc:53:72:a2:64:93:dd:
         95:8c:93:e2:fd:f6:da:40:34:28:55:e8:54:10:89:41:97:0b:
         e4:7c:22:53:e3:89:2b:8f:51:45:7e:2e:40:35:3e:80:bb:d1:
         2e:d9:6d:75:b0:e4:4d:df:e7:6c:6d:86:fa:0c:6d:2e:bc:44:
         fe:7f:da:c7:f8:a3:7c:3d:39:33:ae:2d:c4:f3:5c:9a:79:e4:
         7e:7c:47:9e:55:85:87:4b:7c:3f:b7:ff:83:6f:46:24:cd:6d:
         c1:10:39:de:a8:e8:73:44:64:0a:94:5f:04:19:73:7e:f3:e0:
         7a:9a:8a:b7:ca:33:27:90:b3:d1:d9:a8:d4:0b:9a:e8:cf:33:
         47:eb:85:9c:d3:e7:b3:6c:59:a6:1b:0d:e5:db:1f:00:6b:40:
         98:1c:ad:18:3e:bc:7f:ac:fe:1f:ca:59:72:73:cf:7e:f0:ca:
         e5:6f:f5:6d:03:bc:5c:20:af:07:77:47:cc:14:6e:0a:7f:a6:
         00:98:74:76:28:10:33:69:52:d5:5c:88:56:5c:49:e1:63:fc:
         89:e5:9b:e9:2d:a1:0b:dd:9c:5e:88:57:5a:2e:e8:cb:b3:80:
         11:ce:97:b5:04:e2:d9:e6:dc:ae:fc:76:41:67:9b:6e:47:4c:
         fb:6c:b7:46
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKDVEQjc1QjJERjk0RDA0NDc0QTZFNUUyRDRCNzhDQzA4
NEJGQzJBNkMwHhcNMjUwNTI3MDkyMDMwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjRhYS04MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4HChgTSbSqdrvSNPmr7CEX1fohbY71UK/nil3DP/qiA5yYDQHeIi/r45BZGu
pKU9zQoIiYpOwWTMMSOCFQf1A47wD5w9+57ACIwCYwJuRN0lu9GrktOnRLV+mvGh
IAn4IjlJ+5gKVDFeWEGVHlDylD10fFUONmkATPD79OHhcx5h7ytWfOBofYIL8gv3
wu1fiLPOD69rUIWHISFxpVD+OXnKn6A1QFkanTbhyTu732zdqDs/maQjA5ya9pjU
3Oe1Otc98JRG+QAhd4hWglxa8oeUnlMJ8mmG24373g+p4LO8NNY1nYko/olaH0j8
+7lS0L9P3lZUVwTO4V/FKdrnbQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEaJsNah
Hovvb5O9dth4nDdPOI6BMB8GA1UdIwQYMBaAFF23Wy35TQRHSm5eLUt4zAhL/Cps
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS8wOTVGNkM4QzI2
N0MxMUYwOTY3N0Y4MEJDNEY5QUUwMi9YYmRiTGZsTkJFZEtibDR0UzNqTUNFdjhL
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEttdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OEUvMDk1RjZDOEMyNjdDMTFGMDk2NzdGODBCQzRGOUFFMDIvRDUyNzFBMTgz
QURCMTFGMEJDNTJBMDQyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAzdKkAwQBzdKmMA0GCSqGSIb3DQEBCwUAA4IBAQB5HDSMQUybHBz4
+txTcqJkk92VjJPi/fbaQDQoVehUEIlBlwvkfCJT44krj1FFfi5ANT6Au9Eu2W11
sORN3+dsbYb6DG0uvET+f9rH+KN8PTkzri3E81yaeeR+fEeeVYWHS3w/t/+Db0Yk
zW3BEDneqOhzRGQKlF8EGXN+8+B6moq3yjMnkLPR2ajUC5rozzNH64Wc0+ezbFmm
Gw3l2x8Aa0CYHK0YPrx/rP4fyllyc89+8Mrlb/VtA7xcIK8Hd0fMFG4Kf6YAmHR2
KBAzaVLVXIhWXEnhY/yJ5ZvpLaEL3ZxeiFdaLujLs4ARzpe1BOLZ5tyu/HZBZ5tu
R0z7bLdG
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:06 2026 by rpki-client