Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/9D181A24D78211EC944E227FC4F9AE02.roa
File:                     9D181A24D78211EC944E227FC4F9AE02.roa (raw, json)
Hash identifier:          iqp8NoA/Jl5PLmiI3YPL4U9Qb+o2EA4rLIlCgShCEP4=
Subject key identifier:   D4:91:56:71:C4:1D:64:46:B2:8E:75:4E:82:AD:C5:56:E5:AA:BA:DF
Certificate issuer:       /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial:       0751
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/9D181A24D78211EC944E227FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:55:25 +0000
ROA not before:           Tue 02 Sep 2025 22:42:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     8576
IP address blocks:        202.89.20.0/23 maxlen: 23
                          202.89.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
                          rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C07D, serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
        Validity
            Not Before: Sep  2 22:42:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4535d-b7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:c6:b9:b2:7f:e8:92:27:53:00:e7:e3:82:
                    3e:d1:54:7b:ae:ca:9e:af:2e:d9:e6:f3:cf:3e:9d:
                    e5:bf:74:3b:55:b5:48:a1:7b:b3:3a:7f:77:d1:99:
                    e4:b9:25:70:96:26:6f:10:cb:f9:38:a5:1e:6f:60:
                    28:31:26:37:d5:01:f8:9c:06:a3:d9:40:ba:29:67:
                    0d:fb:a2:f7:53:e4:82:7f:c4:b2:0a:6c:44:14:50:
                    c2:89:ac:94:a5:a4:71:8e:1a:0b:35:9f:bc:9f:0e:
                    dc:45:5f:0a:4c:2f:dc:33:27:06:bd:66:cc:86:45:
                    78:3b:2c:a1:9b:2b:8d:f1:c0:83:bc:c7:71:79:44:
                    ee:d0:09:6a:7e:81:f3:05:1c:0e:e0:e4:7e:b8:01:
                    84:bf:1d:dd:13:54:f0:ea:75:32:44:ae:1a:b0:54:
                    d5:cc:49:51:a5:3f:0b:84:61:9c:1b:73:de:14:fd:
                    4f:f4:91:3f:ee:8f:c4:18:d0:db:af:18:74:30:94:
                    8a:cd:15:51:8f:36:7f:fc:56:46:1d:e5:43:c6:8b:
                    3b:c0:d6:82:ae:41:a4:3f:c5:3b:eb:86:e5:40:43:
                    8a:36:f2:04:73:47:ef:1c:95:ec:e3:d7:c6:f6:f3:
                    84:71:98:19:b6:d7:d7:6a:30:22:f6:d1:9a:08:40:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:91:56:71:C4:1D:64:46:B2:8E:75:4E:82:AD:C5:56:E5:AA:BA:DF
            X509v3 Authority Key Identifier:
                keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/9D181A24D78211EC944E227FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.89.20.0/23
                  202.89.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:76:75:f5:1d:fe:b8:2f:e8:fa:99:28:33:9c:43:62:c8:8c:
         69:f9:f6:51:c7:9c:72:18:1e:80:c6:25:bf:8d:10:d4:b5:61:
         b8:06:b4:e7:68:bb:03:0f:ae:8c:55:15:01:7d:8d:6b:6d:2e:
         8c:88:a0:67:41:5c:6e:a9:d1:bf:f9:04:23:ac:a9:45:3a:56:
         8b:05:be:d9:42:46:f9:fe:da:c6:a1:f5:43:ec:45:18:6d:9a:
         cc:57:fd:38:84:42:fb:7a:45:ae:9d:e7:6a:64:40:5e:58:5a:
         65:95:48:d7:96:b4:5b:0f:a5:6f:b9:72:15:78:53:db:d7:a9:
         33:91:a1:5f:0c:7c:b4:de:e5:74:3f:49:a3:73:35:55:03:4e:
         91:43:62:f0:c7:cd:2a:bf:64:f3:9a:34:dc:15:49:3d:e7:a6:
         fc:56:dd:73:55:90:a0:ce:fa:00:e1:c9:d4:fa:84:d0:0c:7d:
         63:da:39:a7:8b:34:6d:41:52:59:84:ac:fd:ad:ba:98:93:5f:
         a8:c4:32:93:9e:45:79:4c:9f:b1:83:3e:20:f5:7e:f2:bb:a2:
         37:b4:f0:ab:41:bb:79:37:05:76:1c:b7:89:54:9f:d5:80:a2:
         5f:99:c4:f1:f8:20:08:73:50:ee:d3:7f:f0:07:33:e4:3d:78:
         56:2e:d2:d0
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMwN0QxMTAvBgNVBAUTKEFBREFBM0M0NDExNjYwREY1QzM0NDhBOTFDODRBRTU3
NTdBMjZFMTMwHhcNMjUwOTAyMjI0MjU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTM1ZC1iN2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA12/GubJ/6JInUwDn44I+0VR7rsqery7Z5vPPPp3lv3Q7VbVIoXuzOn930Znk
uSVwliZvEMv5OKUeb2AoMSY31QH4nAaj2UC6KWcN+6L3U+SCf8SyCmxEFFDCiayU
paRxjhoLNZ+8nw7cRV8KTC/cMycGvWbMhkV4OyyhmyuN8cCDvMdxeUTu0AlqfoHz
BRwO4OR+uAGEvx3dE1Tw6nUyRK4asFTVzElRpT8LhGGcG3PeFP1P9JE/7o/EGNDb
rxh0MJSKzRVRjzZ//FZGHeVDxos7wNaCrkGkP8U764blQEOKNvIEc0fvHJXs49fG
9vOEcZgZttfXajAi9tGaCECOwQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNSRVnHE
HWRGso51ToKtxVblqrrfMB8GA1UdIwQYMBaAFKrao8RBFmDfXDRIqRyErldXom4T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA3RC9BQjA4OUYzNjZC
ODcxMUVCQkQ4MjY2MUNDNEY5QUUwMi9xdHFqeEVFV1lOOWNORWlwSElTdVYxZWli
aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F0cWp4RUVXWU45Y05FaXBISVN1VjFlaWJoTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUMwN0QvQUIwODlGMzY2Qjg3MTFFQkJEODI2NjFDQzRGOUFFMDIvOUQxODFBMjRE
NzgyMTFFQzk0NEUyMjdGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBylkUAwQAylkXMA0GCSqGSIb3DQEBCwUAA4IBAQAmdnX1Hf64L+j6
mSgznENiyIxp+fZRx5xyGB6AxiW/jRDUtWG4BrTnaLsDD66MVRUBfY1rbS6MiKBn
QVxuqdG/+QQjrKlFOlaLBb7ZQkb5/trGofVD7EUYbZrMV/04hEL7ekWunedqZEBe
WFpllUjXlrRbD6VvuXIVeFPb16kzkaFfDHy03uV0P0mjczVVA06RQ2Lwx80qv2Tz
mjTcFUk956b8Vt1zVZCgzvoA4cnU+oTQDH1j2jmnizRtQVJZhKz9rbqYk1+oxDKT
nkV5TJ+xgz4g9X7yu6I3tPCrQbt5NwV2HLeJVJ/VgKJfmcTx+CAIc1Du03/wBzPk
PXhWLtLQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:07 2026 by rpki-client