Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa
File:                     BA4B22643AC911EBB83D7F0EC4F9AE02.roa (raw, json)
Hash identifier:          jVj6UwIo4TXqA/uqzwENPxn//OG6jURpNnawIkmt1rI=
Subject key identifier:   6D:E8:A0:BE:5A:F5:E1:12:72:71:BB:83:F5:09:7E:01:C6:A0:DC:BB
Certificate issuer:       /CN=A917C23C/serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
Certificate serial:       07CC
Authority key identifier: AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:54:14 +0000
ROA not before:           Fri 14 Nov 2025 20:41:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24323
IP address blocks:        116.206.44.0/22 maxlen: 22
                          116.206.44.0/24 maxlen: 24
                          116.206.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl
                          rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C23C, serialNumber=AC32E99CB092E62E3ACA187463DA99E73D5AAF3E
        Validity
            Not Before: Nov 14 20:41:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a45316-6b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:37:aa:eb:b9:13:77:2a:5f:68:8c:d2:5a:
                    e0:41:2f:50:82:63:3d:94:81:b4:8e:2b:51:75:1a:
                    e6:1c:f6:34:6b:c3:86:87:42:11:d9:01:0f:b0:2a:
                    01:21:f1:09:f2:54:a6:05:78:76:05:53:30:84:5f:
                    a9:8a:17:92:1f:77:1b:f9:af:15:03:3d:bd:ae:cb:
                    11:d1:5f:91:d5:24:aa:50:ce:ba:fc:93:a3:30:aa:
                    23:be:17:b5:ff:b3:f8:bd:d1:78:ca:12:7a:60:8a:
                    df:1a:e7:a4:2c:14:96:ef:9c:a4:15:ef:e8:df:cc:
                    9e:7a:09:aa:35:2e:3d:16:01:f6:20:c1:ed:54:0f:
                    05:cc:a6:d1:e5:51:56:50:16:10:a1:7c:ab:47:22:
                    6d:ae:09:87:6a:8d:ee:45:e5:8d:e2:7c:9b:e0:66:
                    a7:e9:04:c4:44:20:4d:f6:6c:d7:08:c9:99:6c:7a:
                    9c:e5:6f:04:fa:75:c9:64:7c:03:c3:55:73:e5:e8:
                    19:7c:9b:35:68:58:79:dd:7e:4d:80:c0:d5:1d:6e:
                    60:cd:8d:eb:2f:c5:ee:3d:67:86:e9:96:a7:e1:85:
                    0f:8d:68:b1:0b:25:0e:79:32:44:9d:e1:d6:12:39:
                    ae:16:26:4f:e4:d2:d9:18:44:cb:65:f1:ae:92:0c:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E8:A0:BE:5A:F5:E1:12:72:71:BB:83:F5:09:7E:01:C6:A0:DC:BB
            X509v3 Authority Key Identifier:
                keyid:AC:32:E9:9C:B0:92:E6:2E:3A:CA:18:74:63:DA:99:E7:3D:5A:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/rDLpnLCS5i46yhh0Y9qZ5z1arz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rDLpnLCS5i46yhh0Y9qZ5z1arz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C23C/090744C23A3F11EBB63B7551C4F9AE02/BA4B22643AC911EBB83D7F0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:07:d6:ff:7c:bd:8f:0e:6f:df:dc:ba:dd:95:18:7e:41:97:
         71:0b:12:d5:b4:6b:bb:22:22:d5:aa:d7:95:b4:a2:4e:71:3d:
         6e:5c:b2:24:4f:12:3a:f6:aa:d0:5b:70:b3:65:77:7e:36:3a:
         05:0e:a7:8d:b0:fd:e7:3b:16:d6:fe:a1:59:7b:af:79:7f:ad:
         83:2d:6f:60:43:23:ee:a0:ab:16:45:32:9f:e7:76:dc:0d:03:
         09:70:fc:02:07:d0:26:96:b1:6e:cf:0d:78:33:5b:fc:b6:7c:
         63:f5:41:98:2d:a4:68:2e:80:34:59:a9:f9:ae:1c:6e:0a:46:
         b6:25:4a:8f:f8:c3:38:4d:f6:0c:82:a6:3a:17:79:fb:f8:fc:
         0f:cf:06:b0:96:8b:52:07:0e:e2:a2:fe:5b:7b:86:14:bb:38:
         da:ae:b6:57:06:61:58:4a:91:3d:fb:dd:c7:27:1c:87:cf:36:
         8f:10:db:dd:20:b4:80:c4:cd:73:e9:ed:98:0d:6f:7c:7a:d9:
         b7:12:60:a5:14:cf:c2:6d:92:b3:0e:03:b1:90:58:14:d2:ae:
         b3:3d:f8:19:ca:90:0e:a5:d2:07:de:82:e4:b2:0d:9f:4c:63:
         e9:42:27:a5:c1:43:4b:a9:7f:55:cb:d7:b4:e6:f8:4f:3f:e9:
         a8:f1:34:6f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MyM0MxMTAvBgNVBAUTKEFDMzJFOTlDQjA5MkU2MkUzQUNBMTg3NDYzREE5OUU3
M0Q1QUFGM0UwHhcNMjUxMTE0MjA0MTI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTMxNi02YjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSc3quu5E3cqX2iM0lrgQS9QgmM9lIG0jitRdRrmHPY0a8OGh0IR2QEPsCoB
IfEJ8lSmBXh2BVMwhF+piheSH3cb+a8VAz29rssR0V+R1SSqUM66/JOjMKojvhe1
/7P4vdF4yhJ6YIrfGuekLBSW75ykFe/o38yeegmqNS49FgH2IMHtVA8FzKbR5VFW
UBYQoXyrRyJtrgmHao3uReWN4nyb4Gan6QTERCBN9mzXCMmZbHqc5W8E+nXJZHwD
w1Vz5egZfJs1aFh53X5NgMDVHW5gzY3rL8XuPWeG6Zan4YUPjWixCyUOeTJEneHW
EjmuFiZP5NLZGETLZfGukgx1ewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG3ooL5a
9eEScnG7g/UJfgHGoNy7MB8GA1UdIwQYMBaAFKwy6ZywkuYuOsoYdGPamec9Wq8+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzIzQy8wOTA3NDRDMjNB
M0YxMUVCQjYzQjc1NTFDNEY5QUUwMi9yRExwbkxDUzVpNDZ5aGgwWTlxWjV6MWFy
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JETHBuTENTNWk0NnloaDBZOXFaNXoxYXJ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MyM0MvMDkwNzQ0QzIzQTNGMTFFQkI2M0I3NTUxQzRGOUFFMDIvQkE0QjIyNjQz
QUM5MTFFQkI4M0Q3RjBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCdM4sMA0GCSqGSIb3DQEBCwUAA4IBAQAgB9b/fL2PDm/f3LrdlRh+
QZdxCxLVtGu7IiLVqteVtKJOcT1uXLIkTxI69qrQW3CzZXd+NjoFDqeNsP3nOxbW
/qFZe695f62DLW9gQyPuoKsWRTKf53bcDQMJcPwCB9AmlrFuzw14M1v8tnxj9UGY
LaRoLoA0Wan5rhxuCka2JUqP+MM4TfYMgqY6F3n7+PwPzwawlotSBw7iov5be4YU
uzjarrZXBmFYSpE9+93HJxyHzzaPENvdILSAxM1z6e2YDW98etm3EmClFM/CbZKz
DgOxkFgU0q6zPfgZypAOpdIH3oLksg2fTGPpQielwUNLqX9Vy9e05vhPP+mo8TRv
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:33 2026 by rpki-client