Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9DC673EE366311EEB376DC3AC4F9AE02.roa
File:                     9DC673EE366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          qsvf0Wviztrgpdzbp+Cc9P5Q6xcagz546uIcx9HEnws=
Subject key identifier:   5C:31:99:63:7D:8C:60:EB:CF:1B:A2:F9:5D:F9:06:31:22:EE:82:78
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       026C
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9DC673EE366311EEB376DC3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:30:15 +0000
ROA not before:           Mon 23 Jun 2025 03:22:12 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135381
IP address blocks:        161.82.175.0/24 maxlen: 24
                          161.82.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 23 03:22:12 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a485b7-62d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:9f:2d:c3:36:9d:e2:eb:fe:a5:c7:b5:f9:
                    ce:98:07:cf:52:58:57:60:ef:34:b3:e4:e9:09:d5:
                    9d:88:ae:e3:c3:a2:32:d5:40:9a:29:1c:1e:52:24:
                    d0:e5:8c:5a:36:36:45:60:9a:69:f1:a0:56:1b:1b:
                    81:3a:9a:28:43:eb:b2:18:64:81:ca:7f:2e:6b:15:
                    88:f9:f9:6a:b2:fa:77:59:bd:87:99:93:6a:3d:17:
                    e4:c9:78:d7:e4:9a:d4:1f:1d:6f:d5:0b:50:e2:91:
                    54:1e:5d:1f:1d:6d:d5:30:52:d0:74:e9:4e:e3:f2:
                    a2:cc:49:06:61:eb:42:21:0d:c9:25:8c:34:66:4d:
                    f3:eb:30:0c:99:ac:cd:7b:74:87:e5:24:8e:be:dc:
                    4e:0b:52:e0:39:c1:00:5c:34:2d:d4:1d:6e:83:a5:
                    4e:d6:0f:e2:d6:50:fa:67:48:fa:b9:b8:c8:62:9e:
                    7f:14:01:bd:32:6a:9b:ff:37:bf:ec:61:74:d8:91:
                    ee:6d:fc:23:d2:ca:24:28:d7:ed:8d:f9:73:ea:64:
                    c5:ac:11:05:89:7e:1f:36:38:b4:6a:dc:f5:f7:de:
                    bf:b3:22:d8:f7:01:e9:a5:d7:11:f9:4d:96:f9:9c:
                    64:c6:f5:a8:16:f0:d8:ac:46:7b:a9:a0:8e:f1:29:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:31:99:63:7D:8C:60:EB:CF:1B:A2:F9:5D:F9:06:31:22:EE:82:78
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9DC673EE366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.175.0/24
                  161.82.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:ba:c6:65:ee:d0:a6:d9:af:f9:9c:28:a4:a5:f1:07:91:f7:
         e7:b5:90:bf:07:48:fd:83:51:47:41:14:ac:82:d9:7f:21:01:
         35:65:fd:66:65:33:af:17:20:1f:94:25:7a:5e:00:ed:65:cb:
         e0:4e:cf:cb:83:22:a5:70:26:9c:c2:39:06:3f:1d:2d:78:aa:
         4e:22:a1:30:3e:3a:38:94:83:3d:0c:b8:a7:b8:71:c4:66:8f:
         52:00:38:c4:04:10:b9:8f:a1:37:e4:9e:aa:dc:6f:eb:fa:12:
         fe:36:ec:91:70:4e:9e:82:d4:5b:ea:4d:ae:6c:77:23:5b:4b:
         88:8c:01:ca:4a:37:96:94:6d:74:a5:05:fe:ae:8b:d9:9c:75:
         e5:bd:dd:1b:01:c9:1f:db:50:ba:e3:9a:e4:0f:03:fd:ce:94:
         ef:61:6e:16:be:6c:49:f1:b1:5c:bf:42:2a:82:64:a2:da:3f:
         fa:0f:0c:09:c4:75:10:5b:7f:4d:b3:73:54:24:cf:f3:b1:29:
         38:1d:e5:26:f4:09:bf:01:93:15:e9:cf:08:92:e7:4f:33:81:
         37:57:6a:26:aa:0b:2f:f7:a4:b7:48:8b:c2:41:7c:36:b9:4b:
         00:91:19:02:7b:0e:87:52:5c:0b:f9:43:a6:fa:64:0b:62:0a:
         ed:72:9c:d6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3
NThGNkFFMUQwHhcNMjUwNjIzMDMyMjEyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODViNy02MmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwByfLcM2neLr/qXHtfnOmAfPUlhXYO80s+TpCdWdiK7jw6Iy1UCaKRweUiTQ
5YxaNjZFYJpp8aBWGxuBOpooQ+uyGGSByn8uaxWI+flqsvp3Wb2HmZNqPRfkyXjX
5JrUHx1v1QtQ4pFUHl0fHW3VMFLQdOlO4/KizEkGYetCIQ3JJYw0Zk3z6zAMmazN
e3SH5SSOvtxOC1LgOcEAXDQt1B1ug6VO1g/i1lD6Z0j6ubjIYp5/FAG9Mmqb/ze/
7GF02JHubfwj0sokKNftjflz6mTFrBEFiX4fNji0atz1996/syLY9wHppdcR+U2W
+ZxkxvWoFvDYrEZ7qaCO8SlYawIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFwxmWN9
jGDrzxui+V35BjEi7oJ4MB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvOURDNjczRUUz
NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAoVKvAwQAoVLaMA0GCSqGSIb3DQEBCwUAA4IBAQCmusZl7tCm2a/5
nCikpfEHkffntZC/B0j9g1FHQRSsgtl/IQE1Zf1mZTOvFyAflCV6XgDtZcvgTs/L
gyKlcCacwjkGPx0teKpOIqEwPjo4lIM9DLinuHHEZo9SADjEBBC5j6E35J6q3G/r
+hL+NuyRcE6egtRb6k2ubHcjW0uIjAHKSjeWlG10pQX+rovZnHXlvd0bAckf21C6
45rkDwP9zpTvYW4WvmxJ8bFcv0IqgmSi2j/6DwwJxHUQW39Ns3NUJM/zsSk4HeUm
9Am/AZMV6c8IkudPM4E3V2omqgsv96S3SIvCQXw2uUsAkRkCew6HUlwL+UOm+mQL
YgrtcpzW
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:35 2026 by rpki-client