Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/5047D510C02411EC93BB8865C4F9AE02.roa
File:                     5047D510C02411EC93BB8865C4F9AE02.roa (raw, json)
Hash identifier:          NtX2eRx6m9cXHVNSq5ktUCiNpQ4Z5Y/tKPABtSLiW/I=
Subject key identifier:   40:ED:ED:E5:20:16:48:4B:52:8A:CF:94:77:6D:F2:B9:38:1D:4A:48
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1AA6
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/5047D510C02411EC93BB8865C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:24:07 +0000
ROA not before:           Sat 12 Apr 2025 16:25:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58421
IP address blocks:        202.22.16.0/21 maxlen: 21
                          202.22.24.0/22 maxlen: 22
                          202.22.28.0/23 maxlen: 23
                          202.22.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6822 (0x1aa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Apr 12 16:25:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48447-d739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:fc:9d:a6:16:03:dc:f0:50:ce:8d:50:fd:
                    2f:46:28:b1:42:89:1c:ce:4f:b5:07:89:30:f6:88:
                    13:96:f2:a8:d3:d8:f0:90:da:43:e1:f9:48:c1:3f:
                    de:4c:7e:94:16:19:d8:86:c1:fe:45:7c:43:ae:0d:
                    26:a1:ab:19:e7:9b:fe:2c:15:64:3d:5b:c9:ee:70:
                    14:61:b7:86:9a:53:a8:0a:c3:bc:b0:6f:25:82:e7:
                    eb:14:b3:96:66:6a:85:f3:a9:20:8b:73:10:cc:fb:
                    db:a7:b4:cd:7e:10:46:c6:2f:c3:62:a9:85:6c:ea:
                    54:1a:92:32:74:db:f2:71:fa:02:32:41:75:04:3b:
                    4c:8a:67:a5:a7:9c:6d:a2:ee:c5:90:5b:e1:40:2f:
                    e8:da:e5:4c:12:af:38:57:27:b4:00:4a:c5:fd:e0:
                    d9:31:8a:5b:5e:ac:ce:a8:63:3e:e3:0f:9e:8f:ba:
                    d4:af:2a:8e:48:2a:29:2b:5a:4e:d2:2b:ea:46:15:
                    d4:26:ca:3a:6f:52:a8:e1:ac:4c:2d:1b:72:ae:80:
                    79:c4:0a:f5:85:82:d4:06:82:11:e3:8d:88:c9:ce:
                    5f:0f:7b:88:17:e7:b3:f0:75:4a:c9:80:b4:48:8f:
                    21:99:b1:06:55:f1:f2:20:6c:b6:c4:d5:29:81:62:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:ED:ED:E5:20:16:48:4B:52:8A:CF:94:77:6D:F2:B9:38:1D:4A:48
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/5047D510C02411EC93BB8865C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.22.16.0-202.22.30.255

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:d1:da:a8:b8:62:00:8b:5d:19:d7:e0:6e:11:58:e2:2d:
         a3:70:f0:58:90:8c:a0:04:80:5b:bc:4b:4e:42:10:ef:9e:0e:
         a8:66:a0:7e:39:5c:ca:a3:af:90:eb:6a:76:c9:94:65:fa:13:
         82:b7:03:70:5b:3d:71:02:53:f6:c1:58:12:c6:33:66:e1:9c:
         69:c8:a0:e6:63:ae:7e:27:0d:1b:d6:04:9f:2a:07:a2:59:3d:
         9c:16:48:90:27:54:a5:b9:42:cc:02:f6:8a:77:65:65:83:71:
         c9:99:81:dc:a7:04:ee:d4:d3:c3:71:62:a8:2a:24:a7:74:25:
         3e:b2:87:99:8d:1d:aa:bd:79:5d:d0:31:77:c9:b5:b3:35:28:
         92:67:db:86:64:ec:1b:21:9e:36:cd:b9:f3:c0:8b:96:b9:28:
         81:a5:ee:f7:ab:5a:ed:af:25:97:a0:22:c0:67:1e:38:28:ea:
         48:58:93:09:f4:53:f8:38:59:c8:6a:d6:b7:be:2f:85:ef:24:
         e9:62:e9:12:ea:d8:0a:62:cd:e8:d4:0c:a5:59:1e:40:4e:42:
         75:c4:d0:78:28:9d:98:b8:94:5b:54:19:2f:df:91:da:61:f0:
         f5:27:49:63:01:96:15:04:b0:f6:19:01:8e:de:71:c3:6c:57:
         42:a1:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:38 2026 by rpki-client