Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/154E8BACB58F11F0B4ABC646C4F9AE02.roa
File:                     154E8BACB58F11F0B4ABC646C4F9AE02.roa (raw, json)
Hash identifier:          ZARFfMASfkf/hCiNQL3nCduRhWKG2AU4AD9gJdDHB7c=
Subject key identifier:   D2:75:D8:6E:C9:4D:62:DA:DF:88:3E:48:93:8E:96:A3:B2:05:60:E5
Certificate issuer:       /CN=A9150FA6/serialNumber=DA60E80266570379380A6F7A3EE23B9D0E546471
Certificate serial:       AA
Authority key identifier: DA:60:E8:02:66:57:03:79:38:0A:6F:7A:3E:E2:3B:9D:0E:54:64:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/154E8BACB58F11F0B4ABC646C4F9AE02.roa
Signing time:             Fri 11 Sep 2026 07:58:22 +0000
ROA not before:           Fri 11 Sep 2026 07:58:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9941
IP address blocks:        202.62.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl
                          rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150FA6, serialNumber=DA60E80266570379380A6F7A3EE23B9D0E546471
        Validity
            Not Before: Sep 11 07:58:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa3b49e-3296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:73:13:ce:d9:26:b2:db:e2:64:e1:f6:a8:
                    f8:dc:91:27:f4:f5:cb:59:a2:54:96:6a:06:69:ab:
                    45:9c:01:63:7b:fc:2e:d5:0c:57:03:d6:80:f2:31:
                    cc:75:57:f1:92:eb:32:92:a5:b0:77:a8:6c:f2:2e:
                    01:c9:fe:85:fb:7e:f4:ba:b2:59:42:06:fa:5f:3c:
                    d5:49:16:e3:4f:ab:aa:29:83:85:dc:19:be:5b:84:
                    f7:ca:f0:c9:23:92:23:69:21:a7:97:12:28:ef:19:
                    57:af:fc:44:1d:7d:fa:41:15:09:c9:bc:18:2b:0a:
                    2f:ad:44:99:a8:59:99:cf:ba:f8:28:0e:95:d3:65:
                    af:71:50:3b:21:fd:f5:06:96:e4:7f:52:18:a6:ad:
                    49:5e:1b:94:b2:da:69:f1:b8:80:cc:64:c8:39:1f:
                    7b:4d:1b:c6:09:7f:60:d4:f1:71:13:d8:e9:41:5a:
                    53:81:54:19:7e:9b:c6:c3:1f:1f:cc:fb:f7:fb:68:
                    29:5f:35:2f:57:08:9f:84:21:9d:b9:b7:2c:c9:63:
                    cc:6b:de:22:f5:0b:82:22:5a:56:75:60:1b:58:70:
                    63:b0:fb:21:cb:70:0a:0f:40:e0:91:e8:04:c0:09:
                    ef:22:6e:20:99:77:01:28:6a:59:fc:8a:1c:4e:12:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:D8:6E:C9:4D:62:DA:DF:88:3E:48:93:8E:96:A3:B2:05:60:E5
            X509v3 Authority Key Identifier:
                keyid:DA:60:E8:02:66:57:03:79:38:0A:6F:7A:3E:E2:3B:9D:0E:54:64:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mDoAmZXA3k4Cm96PuI7nQ5UZHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150FA6/ABF3D01CB3FA11F0A0AC447AC4F9AE02/154E8BACB58F11F0B4ABC646C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:ca:bd:af:99:5a:2c:4e:c6:2b:fd:46:60:34:7c:be:02:70:
         a8:05:5b:d0:ad:6d:cd:2e:51:0e:71:c9:e1:dc:dd:0c:32:a6:
         85:b4:aa:14:b6:f3:4e:40:22:47:00:eb:d0:3f:9c:ca:7d:2d:
         3f:dc:c8:9a:4e:d6:06:52:d6:2e:59:df:00:72:40:4d:dc:05:
         02:fe:86:3e:c7:81:ee:93:bb:e4:ed:cd:76:cd:6e:16:58:23:
         37:7a:09:72:7a:a3:c7:a5:d7:09:b1:5a:43:32:0b:f2:1a:a0:
         46:f4:89:49:ae:26:e0:08:a0:e2:f9:57:79:24:ed:b0:03:8f:
         3e:69:89:7b:e2:8a:51:50:5d:ab:fc:7c:f7:be:f5:8d:37:27:
         55:8d:ac:30:5c:e8:0b:3c:18:4d:c3:43:a0:6c:13:e3:0e:93:
         5a:1e:51:d3:25:f4:f1:c6:dd:cf:01:fc:4d:12:42:fc:e3:e3:
         82:96:c4:83:9b:8b:95:57:6e:09:fb:14:97:cd:3a:5a:a6:52:
         fc:c1:52:42:51:6c:7b:15:68:36:98:24:9d:40:60:f0:38:75:
         bf:8d:da:34:d7:8c:78:5b:f7:c3:b5:1d:53:62:74:5a:ef:36:
         8a:37:46:d5:dc:60:73:68:09:79:22:64:64:82:77:5f:e1:61:
         cc:ae:b3:5c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBGQTYxMTAvBgNVBAUTKERBNjBFODAyNjY1NzAzNzkzODBBNkY3QTNFRTIzQjlE
MEU1NDY0NzEwHhcNMjYwOTExMDc1ODIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEzYjQ5ZS0zMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJJzE87ZJrLb4mTh9qj43JEn9PXLWaJUlmoGaatFnAFje/wu1QxXA9aA8jHM
dVfxkusykqWwd6hs8i4Byf6F+370urJZQgb6XzzVSRbjT6uqKYOF3Bm+W4T3yvDJ
I5IjaSGnlxIo7xlXr/xEHX36QRUJybwYKwovrUSZqFmZz7r4KA6V02WvcVA7If31
Bpbkf1IYpq1JXhuUstpp8biAzGTIOR97TRvGCX9g1PFxE9jpQVpTgVQZfpvGwx8f
zPv3+2gpXzUvVwifhCGdubcsyWPMa94i9QuCIlpWdWAbWHBjsPshy3AKD0DgkegE
wAnvIm4gmXcBKGpZ/IocThJe9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNJ12G7J
TWLa34g+SJOOlqOyBWDlMB8GA1UdIwQYMBaAFNpg6AJmVwN5OApvej7iO50OVGRx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEZBNi9BQkYzRDAxQ0Iz
RkExMUYwQTBBQzQ0N0FDNEY5QUUwMi8ybURvQW1aWEEzazRDbTk2UHVJN25RNVVa
SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJtRG9BbVpYQTNrNENtOTZQdUk3blE1VVpIRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTBGQTYvQUJGM0QwMUNCM0ZBMTFGMEEwQUM0NDdBQzRGOUFFMDIvMTU0RThCQUNC
NThGMTFGMEI0QUJDNjQ2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQByj50MA0GCSqGSIb3DQEBCwUAA4IBAQChyr2vmVosTsYr/UZgNHy+
AnCoBVvQrW3NLlEOccnh3N0MMqaFtKoUtvNOQCJHAOvQP5zKfS0/3MiaTtYGUtYu
Wd8AckBN3AUC/oY+x4Huk7vk7c12zW4WWCM3eglyeqPHpdcJsVpDMgvyGqBG9IlJ
ribgCKDi+Vd5JO2wA48+aYl74opRUF2r/Hz3vvWNNydVjawwXOgLPBhNw0OgbBPj
DpNaHlHTJfTxxt3PAfxNEkL84+OClsSDm4uVV24J+xSXzTpaplL8wVJCUWx7FWg2
mCSdQGDwOHW/jdo014x4W/fDtR1TYnRa7zaKN0bV3GBzaAl5ImRkgndf4WHMrrNc
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:56 2026 by rpki-client