Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa
File:                     643F1F08B72F11ED85F55F23C4F9AE02.roa (raw, json)
Hash identifier:          iSo5vuWbG03RQHVz/yWnx8Hzh3kOIF3ZXYUxF1Dp2jI=
Subject key identifier:   EA:50:E9:4E:B9:80:DE:B1:89:08:26:32:8B:F7:1B:D1:A1:C8:CD:3E
Certificate issuer:       /CN=A9141BED/serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
Certificate serial:       024A
Authority key identifier: 27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:58:44 +0000
ROA not before:           Fri 11 Jul 2025 03:39:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     18259
IP address blocks:        202.178.96.0/20 maxlen: 24
                          2401:4640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl
                          rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141BED, serialNumber=27689043C43FE61B3CE3C4EBE6B6C15FBCCD2D07
        Validity
            Not Before: Jul 11 03:39:19 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a43803-77b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:cc:82:28:97:c7:04:9c:1f:97:b7:64:83:
                    00:39:11:b6:6a:16:6a:d8:05:19:40:2d:5f:a5:4e:
                    b5:ca:74:b0:0d:b7:e0:97:aa:38:9a:9c:22:72:52:
                    5f:01:81:90:7f:8e:51:40:b0:82:41:ce:41:af:3d:
                    66:fa:f2:0b:26:f8:df:eb:fe:bf:71:c9:2a:c7:49:
                    70:4c:a7:0a:d3:56:b0:09:2b:62:19:aa:1a:0f:5e:
                    98:39:45:a2:2c:b9:f7:c1:d3:9f:63:04:d9:de:d7:
                    5f:cc:c8:fd:bb:e1:80:23:64:5e:f7:7e:61:07:33:
                    da:9b:86:b6:d5:2c:02:ac:e1:72:2b:3c:38:c2:5a:
                    d3:1b:c4:02:6e:ff:58:96:41:fd:64:fe:5e:5c:f9:
                    ad:f6:e3:06:c2:85:e8:ed:cb:cf:04:be:5d:aa:2f:
                    24:10:c6:42:4f:af:f8:8f:c8:9f:5d:32:b3:ae:da:
                    ac:4e:55:be:d8:b9:98:72:ff:e4:e3:5d:66:1c:47:
                    88:8a:39:cf:a8:78:9f:fb:04:2c:f0:ba:9b:30:99:
                    75:20:97:bf:62:a3:45:98:79:69:3a:56:25:d5:51:
                    63:22:35:39:e9:fb:27:b9:64:3a:cd:20:f7:39:48:
                    3c:5c:63:dd:55:d7:f1:f0:50:c5:be:ad:29:fa:dc:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:50:E9:4E:B9:80:DE:B1:89:08:26:32:8B:F7:1B:D1:A1:C8:CD:3E
            X509v3 Authority Key Identifier:
                keyid:27:68:90:43:C4:3F:E6:1B:3C:E3:C4:EB:E6:B6:C1:5F:BC:CD:2D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J2iQQ8Q_5hs848Tr5rbBX7zNLQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BED/FB2AA8ECB72A11ED884A091DC4F9AE02/643F1F08B72F11ED85F55F23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.178.96.0/20
                IPv6:
                  2401:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:43:94:89:b0:35:de:a9:dd:8b:55:dc:6c:d2:8c:f1:9e:26:
         ca:4e:2c:2d:25:78:36:30:d7:34:e7:ae:0a:ff:03:bd:a3:61:
         cd:ce:4b:66:9a:f1:3f:a3:01:dc:c2:de:75:7f:36:88:80:ea:
         74:ca:7b:71:bd:e6:1a:95:9c:fe:14:fc:c7:83:b0:92:79:12:
         e6:7b:80:d5:c7:67:fe:e2:72:5b:24:2e:32:90:85:b4:e2:61:
         a1:62:b4:90:49:77:0b:2c:0c:8a:cb:9f:88:94:84:92:4a:a7:
         3e:53:b7:fe:b8:b7:83:25:6f:b1:74:09:f9:94:18:4a:bc:29:
         81:e9:82:99:f4:f9:7c:4c:01:ff:42:b1:69:fa:9a:28:be:00:
         71:1f:f6:b2:0e:47:a3:74:16:7e:eb:d7:a1:7c:3e:dd:51:f9:
         62:db:47:5f:25:ed:65:44:f7:98:29:1f:fa:37:32:d7:61:57:
         e1:61:2e:0c:3d:6f:11:14:aa:86:bb:3f:bc:53:1a:4b:62:2c:
         c6:19:0a:be:4e:72:5e:11:0d:04:6b:d2:0b:d7:12:a3:ac:d3:
         ab:f1:7d:77:d3:8d:e9:30:15:8e:b3:1d:62:ec:c3:fd:01:7e:
         9b:ed:dc:14:a0:1a:b4:79:4b:ca:1d:5d:91:90:28:3a:da:b1:
         f1:1e:6b:a9
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCRUQxMTAvBgNVBAUTKDI3Njg5MDQzQzQzRkU2MUIzQ0UzQzRFQkU2QjZDMTVG
QkNDRDJEMDcwHhcNMjUwNzExMDMzOTE5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzgwMy03N2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3dXMgiiXxwScH5e3ZIMAORG2ahZq2AUZQC1fpU61ynSwDbfgl6o4mpwiclJf
AYGQf45RQLCCQc5Brz1m+vILJvjf6/6/cckqx0lwTKcK01awCStiGaoaD16YOUWi
LLn3wdOfYwTZ3tdfzMj9u+GAI2Re935hBzPam4a21SwCrOFyKzw4wlrTG8QCbv9Y
lkH9ZP5eXPmt9uMGwoXo7cvPBL5dqi8kEMZCT6/4j8ifXTKzrtqsTlW+2LmYcv/k
411mHEeIijnPqHif+wQs8LqbMJl1IJe/YqNFmHlpOlYl1VFjIjU56fsnuWQ6zSD3
OUg8XGPdVdfx8FDFvq0p+ty8BwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFOpQ6U65
gN6xiQgmMov3G9GhyM0+MB8GA1UdIwQYMBaAFCdokEPEP+YbPOPE6+a2wV+8zS0H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJFRC9GQjJBQThFQ0I3
MkExMUVEODg0QTA5MURDNEY5QUUwMi9KMmlRUThRXzVoczg0OFRyNXJiQlg3ek5M
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0oyaVFROFFfNWhzODQ4VHI1cmJCWDd6TkxRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFCRUQvRkIyQUE4RUNCNzJBMTFFRDg4NEEwOTFEQzRGOUFFMDIvNjQzRjFGMDhC
NzJGMTFFRDg1RjU1RjIzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQEyrJgMA0EAgACMAcDBQAkAUZAMA0GCSqGSIb3DQEBCwUAA4IBAQCU
Q5SJsDXeqd2LVdxs0ozxnibKTiwtJXg2MNc0564K/wO9o2HNzktmmvE/owHcwt51
fzaIgOp0yntxveYalZz+FPzHg7CSeRLme4DVx2f+4nJbJC4ykIW04mGhYrSQSXcL
LAyKy5+IlISSSqc+U7f+uLeDJW+xdAn5lBhKvCmB6YKZ9Pl8TAH/QrFp+poovgBx
H/ayDkejdBZ+69ehfD7dUfli20dfJe1lRPeYKR/6NzLXYVfhYS4MPW8RFKqGuz+8
UxpLYizGGQq+TnJeEQ0Ea9IL1xKjrNOr8X13043pMBWOsx1i7MP9AX6b7dwUoBq0
eUvKHV2RkCg62rHxHmup
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:55 2026 by rpki-client