Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa
File:                     9609416A33D611EFB34E2C40C4F9AE02.roa (raw, json)
Hash identifier:          VEOYpLopU2c9FdbzxqgEzKYlCo37XOpklpOWcyDo3bI=
Subject key identifier:   EB:CD:A3:58:B3:F6:C3:D8:96:37:6C:4A:0F:35:E0:E1:7E:C4:FC:84
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       0676
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:05:15 +0000
ROA not before:           Sat 28 Feb 2026 23:19:24 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153039
IP address blocks:        202.12.127.0/24 maxlen: 24
                          2001:df6:36c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: Feb 28 23:19:24 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a471cb-bea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2c:03:1c:67:8b:de:96:e2:75:db:0c:4c:4f:
                    54:f9:65:cb:ea:da:33:d6:b8:f3:27:f2:01:20:d8:
                    c8:89:2a:13:48:0a:30:f9:cc:e8:a9:3b:74:cc:af:
                    5d:bc:4a:e8:a2:58:57:4b:5f:d7:14:9b:aa:6d:20:
                    63:a3:25:cd:ec:a1:44:ce:f6:85:93:8a:9d:1d:e7:
                    db:d6:29:e7:09:c5:18:30:73:87:de:05:f0:c3:40:
                    6a:2e:e4:7d:cc:cc:64:16:16:7a:a3:52:15:63:f9:
                    72:a6:16:f7:74:21:af:1f:dd:7c:02:ca:14:15:ef:
                    f9:6d:90:8c:d3:c3:e5:c9:7e:3b:25:7e:84:dd:28:
                    27:20:9a:33:7f:54:52:91:8b:8e:a9:e8:af:26:17:
                    f9:6d:b3:f3:2c:1b:f3:ae:74:aa:4f:9d:a3:90:70:
                    67:39:f6:52:03:c5:8d:9e:01:eb:cb:2d:81:47:c5:
                    48:35:06:9f:ec:30:67:9f:94:2d:f2:06:b6:63:41:
                    b8:c7:27:75:f6:93:5f:66:b6:46:2e:8c:f4:75:c8:
                    5c:03:e6:93:29:8c:9a:0e:bd:98:90:32:39:53:76:
                    04:ef:e1:41:bd:4a:83:ac:2a:64:6b:26:30:dc:66:
                    5c:49:60:80:ea:b9:5b:cf:9d:ba:9b:b6:7c:a6:6d:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CD:A3:58:B3:F6:C3:D8:96:37:6C:4A:0F:35:E0:E1:7E:C4:FC:84
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/9609416A33D611EFB34E2C40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.127.0/24
                IPv6:
                  2001:df6:36c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:b6:85:70:08:5a:7d:50:f3:f2:96:07:00:ef:6e:28:b7:86:
         43:db:c9:be:e3:82:6a:72:8a:ae:a6:b0:e9:77:fe:23:08:59:
         70:fb:df:b9:cd:b9:ab:75:96:40:8a:a0:17:46:9b:01:20:82:
         37:6c:31:9b:ec:c0:00:76:21:89:08:17:1e:ae:97:1c:35:1f:
         6a:3d:9f:f6:62:df:3a:d8:00:46:fa:5b:40:f6:8a:8e:60:a1:
         9a:7f:fe:6c:3d:14:20:82:a7:dc:40:7a:b7:93:59:0b:af:7b:
         fb:8b:f8:f0:87:a3:a2:82:23:76:f0:e6:58:d9:ff:9c:3e:57:
         f9:d3:2e:a9:38:ee:d4:ba:12:f1:37:1c:74:08:9e:b8:a0:0f:
         fc:ca:23:b2:8c:26:c0:6c:8b:83:68:23:ab:27:c2:86:f0:ee:
         d1:eb:25:c3:a9:12:05:8b:24:fd:4d:07:55:06:32:cd:18:9b:
         97:92:f8:5a:f0:4f:06:af:49:c4:12:0a:6b:80:a2:36:84:c9:
         78:e1:ba:d5:91:e6:52:f6:c5:d9:24:17:21:de:b0:3c:9c:f4:
         12:b7:dc:22:e1:a7:c9:57:82:bf:fa:83:2e:49:e3:54:4b:dc:
         78:58:5e:e4:c7:7b:03:43:57:a5:60:56:96:3b:a8:59:e7:0c:
         65:92:65:65
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEzRTQxMTAvBgNVBAUTKDkwNjhERTIwMzMyQ0JEMURCMzlCMjM3NDM1QjE3NERF
NzA5OTRGMDMwHhcNMjYwMjI4MjMxOTI0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzFjYi1iZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvywDHGeL3pbiddsMTE9U+WXL6toz1rjzJ/IBINjIiSoTSAow+czoqTt0zK9d
vEroolhXS1/XFJuqbSBjoyXN7KFEzvaFk4qdHefb1innCcUYMHOH3gXww0BqLuR9
zMxkFhZ6o1IVY/lyphb3dCGvH918AsoUFe/5bZCM08PlyX47JX6E3SgnIJozf1RS
kYuOqeivJhf5bbPzLBvzrnSqT52jkHBnOfZSA8WNngHryy2BR8VINQaf7DBnn5Qt
8ga2Y0G4xyd19pNfZrZGLoz0dchcA+aTKYyaDr2YkDI5U3YE7+FBvUqDrCpkayYw
3GZcSWCA6rlbz526m7Z8pm0btQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOvNo1iz
9sPYljdsSg814OF+xPyEMB8GA1UdIwQYMBaAFJBo3iAzLL0ds5sjdDWxdN5wmU8D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTNFNC8yNzUwNTg4MkI5
QTIxMUVCOTVDNjg4MzlDNEY5QUUwMi9rR2plSURNc3ZSMnpteU4wTmJGMDNuQ1pU
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tHamVJRE1zdlIyem15TjBOYkYwM25DWlR3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODEzRTQvMjc1MDU4ODJCOUEyMTFFQjk1QzY4ODM5QzRGOUFFMDIvOTYwOTQxNkEz
M0Q2MTFFRkIzNEUyQzQwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAygx/MA8EAgACMAkDBwAgAQ32NsAwDQYJKoZIhvcNAQELBQADggEB
AKu2hXAIWn1Q8/KWBwDvbii3hkPbyb7jgmpyiq6msOl3/iMIWXD737nNuat1lkCK
oBdGmwEggjdsMZvswAB2IYkIFx6ulxw1H2o9n/Zi3zrYAEb6W0D2io5goZp//mw9
FCCCp9xAereTWQuve/uL+PCHo6KCI3bw5ljZ/5w+V/nTLqk47tS6EvE3HHQInrig
D/zKI7KMJsBsi4NoI6snwobw7tHrJcOpEgWLJP1NB1UGMs0Ym5eS+FrwTwavScQS
CmuAojaEyXjhutWR5lL2xdkkFyHesDyc9BK33CLhp8lXgr/6gy5J41RL3HhYXuTH
ewNDV6VgVpY7qFnnDGWSZWU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:51 2026 by rpki-client