Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/05E0CD8A56D311F0B46F9787C4F9AE02.roa
File:                     05E0CD8A56D311F0B46F9787C4F9AE02.roa (raw, json)
Hash identifier:          ZL7HtMcMaee/+U2RFcFAEBNXOBbDZe6QSqp6AaUWyjA=
Subject key identifier:   45:CE:02:C2:84:E1:F7:B1:77:B5:AB:C7:9D:45:53:FD:A6:EB:87:2A
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       032E
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/05E0CD8A56D311F0B46F9787C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:41:29 +0000
ROA not before:           Wed 22 Oct 2025 02:45:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     214024
IP address blocks:        202.155.112.0/22 maxlen: 24
                          202.155.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct 22 02:45:52 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48859-4be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b7:1b:e0:a0:ba:06:47:20:a9:cd:68:04:90:
                    8e:b4:96:24:c4:4e:5e:79:6f:b4:44:a6:6f:9a:75:
                    48:38:a6:e7:b8:5c:75:89:20:62:8c:41:80:35:7c:
                    a6:6b:23:2d:e3:f1:a3:ab:7c:bd:7e:da:e9:ef:9d:
                    58:ab:dc:68:dc:02:a8:db:d2:ae:c9:a3:90:ed:8f:
                    5f:2a:be:f2:bb:7a:22:ba:54:bf:a5:aa:c2:6c:3f:
                    9c:b9:17:a3:68:86:b9:a3:e0:34:af:e5:4f:d8:13:
                    8f:f0:f6:9f:29:56:ae:95:5a:99:12:8a:cf:cf:65:
                    09:f3:00:65:9a:25:dd:13:4a:85:2e:18:08:a0:cf:
                    40:c3:5c:68:7b:45:3d:b7:dc:65:0a:3c:5f:be:a9:
                    f8:f0:e1:9f:a9:60:9d:83:28:fd:b4:c0:7a:3c:8c:
                    88:2a:7f:02:1c:bd:a0:c4:2d:ed:e8:8c:46:1d:b4:
                    35:59:fd:3b:b8:66:38:b9:11:41:bf:ce:6b:ef:8e:
                    9b:b4:13:fb:c6:7b:52:cb:5b:91:da:6c:9b:39:e3:
                    71:6c:e1:1b:2b:1a:53:9f:0c:2e:51:14:ee:7a:fa:
                    1a:a6:70:2b:67:45:f4:e5:ff:27:a3:59:46:82:93:
                    28:52:d3:5b:4a:ad:29:26:90:b6:9c:9d:06:83:07:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CE:02:C2:84:E1:F7:B1:77:B5:AB:C7:9D:45:53:FD:A6:EB:87:2A
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/05E0CD8A56D311F0B46F9787C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.112.0/22
                  202.155.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:24:46:01:4b:f8:30:ce:31:31:63:b8:4e:99:7e:e2:e1:7d:
         29:fb:42:4a:4b:e4:fc:5e:c2:8c:41:73:92:e8:fb:5b:dd:7c:
         c0:c1:4f:37:35:6e:8f:0d:00:46:86:6b:2d:4c:4c:97:9e:37:
         b6:90:42:a4:3b:f6:8b:47:83:32:3f:49:69:e3:9c:c9:ce:a8:
         c0:02:c1:eb:54:22:e9:aa:68:d7:1f:b9:82:69:71:7c:4a:d5:
         e4:6e:3f:b6:f6:4e:a7:da:22:80:6d:3c:00:2a:53:0e:65:a0:
         da:1c:64:e2:4a:60:86:2e:01:a5:4d:73:f8:b9:dd:ca:41:49:
         e0:ed:13:ae:e2:22:f6:08:01:f8:9d:a8:99:ba:67:d3:6e:14:
         5b:f4:b5:56:79:c6:77:e6:d8:1b:c4:d6:4c:a5:e9:b6:12:72:
         d7:4e:a4:ca:63:35:be:3f:a7:5b:1c:ac:fc:49:f3:ea:16:e1:
         b7:4d:d7:7b:99:af:21:ca:1c:54:23:9c:ce:1b:f6:bf:6b:b6:
         5e:b0:54:36:e9:d3:c5:b2:87:29:21:8c:ef:88:61:9a:7e:b4:
         b3:b5:c1:18:19:cc:63:5b:dd:f9:0f:d4:49:91:f7:a9:11:c6:
         72:30:e5:4b:a3:31:fa:bb:fd:fc:f5:2a:dd:24:88:4c:14:89:
         49:95:a2:cf
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjUxMDIyMDI0NTUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODg1OS00YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+bcb4KC6Bkcgqc1oBJCOtJYkxE5eeW+0RKZvmnVIOKbnuFx1iSBijEGANXym
ayMt4/Gjq3y9ftrp751Yq9xo3AKo29KuyaOQ7Y9fKr7yu3oiulS/parCbD+cuRej
aIa5o+A0r+VP2BOP8PafKVaulVqZEorPz2UJ8wBlmiXdE0qFLhgIoM9Aw1xoe0U9
t9xlCjxfvqn48OGfqWCdgyj9tMB6PIyIKn8CHL2gxC3t6IxGHbQ1Wf07uGY4uRFB
v85r746btBP7xntSy1uR2mybOeNxbOEbKxpTnwwuURTuevoapnArZ0X05f8no1lG
gpMoUtNbSq0pJpC2nJ0GgwfI4QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEXOAsKE
4fexd7Wrx51FU/2m64cqMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvMDVFMENEOEE1
NkQzMTFGMEI0NkY5Nzg3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCyptwAwQCypt4MA0GCSqGSIb3DQEBCwUAA4IBAQCAJEYBS/gwzjEx
Y7hOmX7i4X0p+0JKS+T8XsKMQXOS6Ptb3XzAwU83NW6PDQBGhmstTEyXnje2kEKk
O/aLR4MyP0lp45zJzqjAAsHrVCLpqmjXH7mCaXF8StXkbj+29k6n2iKAbTwAKlMO
ZaDaHGTiSmCGLgGlTXP4ud3KQUng7ROu4iL2CAH4naiZumfTbhRb9LVWecZ35tgb
xNZMpem2EnLXTqTKYzW+P6dbHKz8SfPqFuG3Tdd7ma8hyhxUI5zOG/a/a7ZesFQ2
6dPFsocpIYzviGGafrSztcEYGcxjW935D9RJkfepEcZyMOVLozH6u/389SrdJIhM
FIlJlaLP
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:50:01 2026 by rpki-client