Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/D9624ED082FD11F088ACD36DC4F9AE02.roa
File:                     D9624ED082FD11F088ACD36DC4F9AE02.roa (raw, json)
Hash identifier:          x04ROYFrMT9oBHbHLSP4ELtb1xdWEg+KH0XVVfaWkMo=
Subject key identifier:   8D:6C:FA:48:F8:DC:FC:5C:26:EC:51:D3:B1:60:A7:EB:63:F6:D1:FD
Certificate issuer:       /CN=A9176E5A/serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
Certificate serial:       64
Authority key identifier: B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/D9624ED082FD11F088ACD36DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:29:33 +0000
ROA not before:           Fri 31 Oct 2025 07:51:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        203.14.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl
                          rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176E5A, serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
        Validity
            Not Before: Oct 31 07:51:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3f8ed-c0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:3f:b1:cb:18:f4:71:00:7e:ad:08:5d:e1:
                    83:00:e4:b4:5c:27:c4:20:af:de:5b:98:c4:58:13:
                    ad:2e:f3:b9:4b:e4:d1:c3:ea:02:b5:72:95:76:52:
                    ae:6b:ea:c2:b1:12:b5:92:c8:46:37:f5:04:18:94:
                    1d:ac:98:74:5d:b9:40:71:0c:07:46:2f:46:6a:09:
                    62:d1:66:2d:a3:0e:ff:0c:91:e6:5c:8a:b8:0a:3e:
                    36:c7:23:f5:b0:6f:24:94:e9:78:22:3a:61:cc:a3:
                    54:97:f0:4c:74:fd:8b:9c:eb:36:31:30:5a:0a:d7:
                    79:52:f4:08:ca:12:e5:87:02:61:59:d7:bf:f5:91:
                    5a:87:73:80:ec:d4:fd:82:01:bd:72:2d:37:af:70:
                    8e:ee:83:20:a0:0b:e6:87:b9:08:d0:8e:5b:24:4b:
                    24:68:8f:06:62:20:0a:93:62:d4:02:54:bd:4a:96:
                    98:b2:b1:19:8e:dc:9d:cf:3d:90:26:ba:93:18:b9:
                    02:23:b8:a9:be:c8:88:57:6a:53:63:fc:20:9a:51:
                    e8:45:32:b7:f9:3d:3c:34:3d:ca:8a:48:94:c3:80:
                    e8:de:ef:21:5b:e7:24:0b:42:b9:0f:9e:50:c7:f1:
                    99:e2:7e:b8:77:58:87:3a:5e:8c:da:64:b8:28:45:
                    ac:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6C:FA:48:F8:DC:FC:5C:26:EC:51:D3:B1:60:A7:EB:63:F6:D1:FD
            X509v3 Authority Key Identifier:
                keyid:B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/D9624ED082FD11F088ACD36DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.14.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:95:8b:d9:33:ac:c6:f3:5d:0a:28:9d:ca:97:77:4e:96:85:
         d7:2a:5f:61:98:75:65:a1:5e:55:9e:1e:2a:a7:e4:12:56:73:
         23:00:a3:53:62:a2:d6:47:e7:40:e9:9b:9d:25:5d:80:9c:a6:
         09:95:b7:9c:be:23:ba:f3:94:e5:0b:c3:7f:c2:fc:0f:7f:87:
         a2:f9:83:20:8f:13:fb:ba:33:01:3f:02:fb:c0:51:9f:72:0c:
         23:d9:ce:ce:dc:2d:28:7f:f0:39:a2:df:29:05:a2:ad:37:0e:
         df:aa:ab:a1:65:3f:06:2d:74:1f:d1:5d:b9:23:39:9b:31:fa:
         dd:bc:f3:48:83:d2:b2:ce:bd:9b:3f:e2:82:8e:39:d9:4d:63:
         a4:7d:1e:d4:34:0e:02:56:fc:8b:86:ed:75:b9:01:fc:9b:cd:
         f7:4a:a0:11:b5:dc:2f:63:75:43:1a:87:9a:0e:72:ce:6c:3f:
         44:27:d4:d3:43:f2:dc:b8:27:0c:f3:a6:dd:c5:2f:83:01:f1:
         35:98:69:d9:aa:c3:fa:69:94:e6:2e:7c:6c:52:7c:b4:6a:1a:
         0b:e3:40:c2:b4:e2:e9:3c:4c:c8:b5:23:8e:84:e7:c6:d6:54:
         a5:b7:7c:e6:11:e5:a4:4f:8a:8d:d8:a1:31:39:b4:98:f9:fa:
         5a:f7:ef:94
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NkU1QTExMC8GA1UEBRMoQjE1MjRGQkU0NjVGRTRGQjk5RkU2MTFERkMwNDBGNTEw
QzExNjhGRTAeFw0yNTEwMzEwNzUxNTZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNmOGVkLWMwZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0WT+xyxj0cQB+rQhd4YMA5LRcJ8Qgr95bmMRYE60u87lL5NHD6gK1cpV2Uq5r
6sKxErWSyEY39QQYlB2smHRduUBxDAdGL0ZqCWLRZi2jDv8MkeZcirgKPjbHI/Ww
bySU6XgiOmHMo1SX8Ex0/Yuc6zYxMFoK13lS9AjKEuWHAmFZ17/1kVqHc4Ds1P2C
Ab1yLTevcI7ugyCgC+aHuQjQjlskSyRojwZiIAqTYtQCVL1KlpiysRmO3J3PPZAm
upMYuQIjuKm+yIhXalNj/CCaUehFMrf5PTw0PcqKSJTDgOje7yFb5yQLQrkPnlDH
8Znifrh3WIc6XozaZLgoRay3AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUjWz6SPjc
/Fwm7FHTsWCn62P20f0wHwYDVR0jBBgwFoAUsVJPvkZf5PuZ/mEd/AQPUQwRaP4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTVBLzgwMzc5ODM4ODJG
RDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1Wl9tRWRfQVFQVVF3UmFQ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc1ZKUHZrWmY1UHVaX21FZF9BUVBVUXdSYVA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkU1QS84MDM3OTgzODgyRkQxMUYwQUUwRjg3NkFDNEY5QUUwMi9EOTYyNEVEMDgy
RkQxMUYwODhBQ0QzNkRDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAHLDnQwDQYJKoZIhvcNAQELBQADggEBAG6Vi9kzrMbzXQooncqXd06W
hdcqX2GYdWWhXlWeHiqn5BJWcyMAo1NiotZH50Dpm50lXYCcpgmVt5y+I7rzlOUL
w3/C/A9/h6L5gyCPE/u6MwE/AvvAUZ9yDCPZzs7cLSh/8Dmi3ykFoq03Dt+qq6Fl
PwYtdB/RXbkjOZsx+t2880iD0rLOvZs/4oKOOdlNY6R9HtQ0DgJW/IuG7XW5Afyb
zfdKoBG13C9jdUMah5oOcs5sP0Qn1NND8ty4Jwzzpt3FL4MB8TWYadmqw/pplOYu
fGxSfLRqGgvjQMK04uk8TMi1I46E58bWVKW3fOYR5aRPio3YoTE5tJj5+lr375Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:18 2026 by rpki-client