Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa
File:                     D973D5BE97D711EEA1B09A33C4F9AE02.roa (raw, json)
Hash identifier:          vK6UgwvhHzxe7wOhZkBOrNQ5FiwefRM4NQVFNi53pvw=
Subject key identifier:   44:C4:46:4E:62:D0:AD:10:C8:08:6F:1B:F1:34:74:28:2D:32:D1:2B
Certificate issuer:       /CN=A912F437/serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
Certificate serial:       01AD
Authority key identifier: FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:28:22 +0000
ROA not before:           Sat 31 Jan 2026 03:23:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149446
IP address blocks:        210.87.104.0/23 maxlen: 24
                          2401:5720::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl
                          rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F437, serialNumber=FB02ECD6C7789A396B53A48FA9243660E252C143
        Validity
            Not Before: Jan 31 03:23:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a414c6-13c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:05:7f:81:21:d9:46:3e:6f:4d:9d:82:27:c7:
                    30:84:a6:5e:1b:c9:d3:0e:e7:8f:8f:8c:fd:1d:04:
                    93:7b:74:bc:1d:0b:21:97:3b:65:c2:cf:19:b9:61:
                    f2:e6:6a:1b:14:e9:18:92:cc:c1:60:18:dc:6a:13:
                    ff:83:07:56:4b:d8:9d:c1:48:3c:86:db:66:1f:1d:
                    58:cb:e4:42:8e:7f:6a:87:5f:4b:c8:84:54:49:45:
                    8d:e1:7c:3c:f2:ae:40:a3:41:85:05:12:42:f6:ca:
                    56:49:5c:09:86:eb:b7:b1:12:60:8e:57:1e:b5:39:
                    83:2d:48:9b:12:8f:f7:4b:cd:5c:02:69:7d:ad:19:
                    cf:ba:a4:5a:73:83:46:f7:26:ea:54:b5:5f:e2:4b:
                    27:0b:11:f9:24:aa:89:52:fa:49:65:84:6e:19:fc:
                    c9:5e:82:21:d0:41:9a:70:53:b7:20:2a:13:8b:ba:
                    f3:1f:0e:dc:ff:29:fd:d4:0e:b9:5a:89:e1:75:04:
                    47:bf:ba:9b:68:d5:0c:be:ac:05:a6:1e:df:3a:3e:
                    6b:f8:04:9f:d2:e3:b7:74:30:a5:f4:a7:c8:1d:7b:
                    bf:83:f0:61:9c:b8:b3:b9:70:45:68:9e:b5:06:04:
                    0d:a2:86:96:49:8b:3f:98:02:77:02:56:65:58:bf:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:46:4E:62:D0:AD:10:C8:08:6F:1B:F1:34:74:28:2D:32:D1:2B
            X509v3 Authority Key Identifier:
                keyid:FB:02:EC:D6:C7:78:9A:39:6B:53:A4:8F:A9:24:36:60:E2:52:C1:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wLs1sd4mjlrU6SPqSQ2YOJSwUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F437/81F669DC97D711EEAABCA432C4F9AE02/D973D5BE97D711EEA1B09A33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.104.0/23
                IPv6:
                  2401:5720::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:1d:b4:f2:bc:05:22:e0:4d:0e:df:32:b4:e8:e4:b4:b1:95:
         15:c0:24:8b:bc:ae:c6:aa:f6:0f:8d:25:5e:2c:07:d8:73:d0:
         68:65:fb:be:86:cf:5b:aa:c1:7a:90:74:42:3b:ac:3f:bd:58:
         a5:d3:f1:d3:35:85:e7:a9:d3:ca:84:26:e5:0a:1b:ce:fd:94:
         3a:b4:c3:c2:82:91:05:39:38:1e:2c:ba:5d:34:89:23:91:e9:
         72:1d:1c:1d:a3:f8:ac:01:0c:02:06:de:aa:08:61:d1:40:86:
         20:e2:ae:8b:ba:b8:2d:32:1c:65:38:da:5a:a3:57:b4:1c:6b:
         b1:3e:61:50:df:2b:de:b9:43:88:47:8e:26:da:5d:64:0f:6c:
         5d:b2:42:ca:ad:c0:50:64:6d:02:ff:10:2b:bf:e0:9e:3a:df:
         df:7b:bb:fa:f8:40:a5:6e:99:44:e4:3e:3a:36:b1:f4:6a:49:
         53:39:6d:e5:c3:f9:84:64:4c:cc:5a:63:0a:91:d2:4c:26:29:
         f7:31:75:fb:c5:24:43:47:35:dc:3e:57:9c:19:78:64:bf:05:
         00:2d:e3:7d:15:45:82:a9:90:15:23:23:d8:2d:f3:eb:d4:b7:
         46:e3:c4:12:23:e2:22:03:fd:5b:3c:75:c7:33:df:29:96:0d:
         5a:8c:2e:00
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY0MzcxMTAvBgNVBAUTKEZCMDJFQ0Q2Qzc3ODlBMzk2QjUzQTQ4RkE5MjQzNjYw
RTI1MkMxNDMwHhcNMjYwMTMxMDMyMzM0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTRjNi0xM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5wV/gSHZRj5vTZ2CJ8cwhKZeG8nTDuePj4z9HQSTe3S8HQshlztlws8ZuWHy
5mobFOkYkszBYBjcahP/gwdWS9idwUg8httmHx1Yy+RCjn9qh19LyIRUSUWN4Xw8
8q5Ao0GFBRJC9spWSVwJhuu3sRJgjlcetTmDLUibEo/3S81cAml9rRnPuqRac4NG
9ybqVLVf4ksnCxH5JKqJUvpJZYRuGfzJXoIh0EGacFO3ICoTi7rzHw7c/yn91A65
WonhdQRHv7qbaNUMvqwFph7fOj5r+ASf0uO3dDCl9KfIHXu/g/BhnLizuXBFaJ61
BgQNooaWSYs/mAJ3AlZlWL8g2QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFETERk5i
0K0QyAhvG/E0dCgtMtErMB8GA1UdIwQYMBaAFPsC7NbHeJo5a1Okj6kkNmDiUsFD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQzNy84MUY2NjlEQzk3
RDcxMUVFQUFCQ0E0MzJDNEY5QUUwMi8td0xzMXNkNG1qbHJVNlNQcVNRMllPSlN3
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy13THMxc2Q0bWpsclU2U1BxU1EyWU9KU3dVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY0MzcvODFGNjY5REM5N0Q3MTFFRUFBQkNBNDMyQzRGOUFFMDIvRDk3M0Q1QkU5
N0Q3MTFFRUExQjA5QTMzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQB0ldoMA0EAgACMAcDBQAkAVcgMA0GCSqGSIb3DQEBCwUAA4IBAQAa
HbTyvAUi4E0O3zK06OS0sZUVwCSLvK7GqvYPjSVeLAfYc9BoZfu+hs9bqsF6kHRC
O6w/vVil0/HTNYXnqdPKhCblChvO/ZQ6tMPCgpEFOTgeLLpdNIkjkelyHRwdo/is
AQwCBt6qCGHRQIYg4q6LurgtMhxlONpao1e0HGuxPmFQ3yveuUOIR44m2l1kD2xd
skLKrcBQZG0C/xArv+CeOt/fe7v6+EClbplE5D46NrH0aklTOW3lw/mEZEzMWmMK
kdJMJin3MXX7xSRDRzXcPlecGXhkvwUALeN9FUWCqZAVIyPYLfPr1LdG48QSI+Ii
A/1bPHXHM98plg1ajC4A
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:47 2026 by rpki-client