Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/6910E952A86A11EF89DA976DC4F9AE02.roa
File:                     6910E952A86A11EF89DA976DC4F9AE02.roa (raw, json)
Hash identifier:          c0qyfD83hyONo6+1G1CUEMzQ2pdLQ0z+oznS7ZYnv00=
Subject key identifier:   AC:ED:5C:58:FB:95:DC:15:62:D1:9C:B2:97:B4:8D:0E:11:7B:B3:53
Certificate issuer:       /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial:       039E
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/6910E952A86A11EF89DA976DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:26:07 +0000
ROA not before:           Mon 31 Mar 2025 01:28:17 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     20119
IP address blocks:        202.5.128.0/24 maxlen: 24
                          202.5.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
                          rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
        Validity
            Not Before: Mar 31 01:28:17 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a44c7f-fc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:02:1b:ee:7b:bd:3c:d2:c3:06:50:14:46:
                    31:37:c2:8e:3e:6d:83:40:92:b5:b1:54:d3:fb:b8:
                    ee:da:82:11:1d:b3:7b:d8:ef:b7:65:c9:39:fc:28:
                    68:37:db:76:b8:13:7f:e0:a6:19:7a:c2:98:01:e8:
                    f4:01:4e:f3:4b:a1:be:6a:75:83:51:de:1f:61:d2:
                    e3:a7:c7:fe:06:f8:5b:02:3b:a2:df:ff:db:39:37:
                    ed:1e:79:5f:c2:59:d0:3c:47:56:f9:78:5b:4d:bc:
                    cd:13:68:b4:5c:6c:76:d3:53:28:ab:7f:a8:41:5d:
                    e3:eb:bc:aa:a9:db:16:fb:9a:29:b5:39:62:00:7a:
                    b2:e1:5b:22:6c:b1:16:62:10:45:49:3e:79:a5:61:
                    9b:3f:e2:84:36:89:a0:58:73:ac:50:4a:6c:89:05:
                    0e:0a:ae:bb:af:00:ec:b8:27:f1:97:58:29:0b:6a:
                    ac:98:32:af:d9:36:db:3f:68:a7:c5:85:1b:43:99:
                    ff:51:d2:2c:92:29:35:72:a5:ae:d0:0b:3f:94:28:
                    6e:fb:37:2a:33:38:cf:12:0a:21:39:5a:44:b3:bf:
                    81:de:c5:82:99:da:a3:3d:6b:29:f6:03:92:9d:ed:
                    33:95:d4:59:20:af:c7:9a:73:72:4c:7d:1c:35:5a:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:ED:5C:58:FB:95:DC:15:62:D1:9C:B2:97:B4:8D:0E:11:7B:B3:53
            X509v3 Authority Key Identifier:
                keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/6910E952A86A11EF89DA976DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:7d:3f:31:cf:43:54:9f:ce:38:ad:93:dc:1e:35:33:8d:e0:
         a5:74:9f:81:15:36:df:46:7e:32:b4:ee:73:b8:b0:c1:86:83:
         8d:99:14:9a:ea:a2:1d:91:db:6d:9e:a9:bd:47:53:72:41:fe:
         b7:07:07:6e:02:95:a9:95:fe:76:3e:f7:8a:b1:93:ab:85:97:
         2b:e4:0e:ee:79:c3:10:8f:ae:d0:40:e6:67:a9:cc:1b:c4:69:
         91:1a:08:8e:1b:fb:de:05:30:63:f8:fd:77:b3:f0:39:c3:e2:
         65:e2:dc:b2:5c:94:9a:8c:8a:d7:87:f5:59:91:c2:21:5d:f3:
         cd:92:81:93:00:68:59:89:a0:e6:7e:a8:a4:d9:9f:08:91:6b:
         b7:0e:61:9b:e6:03:24:fa:16:6d:75:61:27:b0:5a:83:08:a9:
         1e:fd:ac:f4:ab:6b:ed:87:87:bb:b8:44:16:57:07:6d:b0:51:
         64:96:6b:41:12:e5:c9:4c:06:b1:db:15:dd:be:68:85:f4:d7:
         de:81:ef:6a:81:68:be:71:40:58:ae:fa:f4:ee:d0:69:6a:63:
         0c:02:d0:16:b2:05:21:ea:b6:6f:ae:d9:c9:db:97:38:98:ed:
         6f:10:c9:4f:59:ad:5e:31:08:ae:8a:d3:d7:49:10:11:27:ce:
         fb:03:e1:5e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx
MjA5RDNGM0EwHhcNMjUwMzMxMDEyODE3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGM3Zi1mYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyxMCG+57vTzSwwZQFEYxN8KOPm2DQJK1sVTT+7ju2oIRHbN72O+3Zck5/Cho
N9t2uBN/4KYZesKYAej0AU7zS6G+anWDUd4fYdLjp8f+BvhbAjui3//bOTftHnlf
wlnQPEdW+XhbTbzNE2i0XGx201Moq3+oQV3j67yqqdsW+5optTliAHqy4VsibLEW
YhBFST55pWGbP+KENomgWHOsUEpsiQUOCq67rwDsuCfxl1gpC2qsmDKv2TbbP2in
xYUbQ5n/UdIskik1cqWu0As/lChu+zcqMzjPEgohOVpEs7+B3sWCmdqjPWsp9gOS
ne0zldRZIK/HmnNyTH0cNVr71QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKztXFj7
ldwVYtGcspe0jQ4Re7NTMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4
REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0YwNTEvNUFBRDlEN0VEOEREMTFFQ0E1REQwQzUwQzRGOUFFMDIvNjkxMEU5NTJB
ODZBMTFFRjg5REE5NzZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBygWAMA0GCSqGSIb3DQEBCwUAA4IBAQAFfT8xz0NUn844rZPcHjUz
jeCldJ+BFTbfRn4ytO5zuLDBhoONmRSa6qIdkdttnqm9R1NyQf63BwduApWplf52
PveKsZOrhZcr5A7uecMQj67QQOZnqcwbxGmRGgiOG/veBTBj+P13s/A5w+Jl4tyy
XJSajIrXh/VZkcIhXfPNkoGTAGhZiaDmfqik2Z8IkWu3DmGb5gMk+hZtdWEnsFqD
CKke/az0q2vth4e7uEQWVwdtsFFklmtBEuXJTAax2xXdvmiF9Nfege9qgWi+cUBY
rvr07tBpamMMAtAWsgUh6rZvrtnJ25c4mO1vEMlPWa1eMQiuitPXSRARJ877A+Fe
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:32 2026 by rpki-client