Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/6322249E033E11EDA7401850C4F9AE02.roa
File:                     6322249E033E11EDA7401850C4F9AE02.roa (raw, json)
Hash identifier:          pGyuW5enksJ2G+9mcRO+cELx6+FB88OJUmeOOQetTPM=
Subject key identifier:   C7:C2:ED:2A:18:8F:DD:38:20:72:31:F4:A0:E3:66:F9:80:FF:51:12
Certificate issuer:       /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
Certificate serial:       0A68
Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/6322249E033E11EDA7401850C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:45:16 +0000
ROA not before:           Tue 06 Jan 2026 19:16:42 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     63199
IP address blocks:        202.55.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl
                          rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195BA9, serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
        Validity
            Not Before: Jan  6 19:16:42 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46d1c-fdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:74:30:c0:41:d8:67:dc:4e:a5:ac:70:6a:
                    2a:53:f3:95:b5:a4:ee:d5:9e:e5:7d:7d:05:34:5d:
                    62:fa:38:3a:39:36:5a:a8:a6:71:59:f8:49:b7:a1:
                    1a:7c:75:7c:15:e2:1e:a5:60:e3:b6:93:25:cc:0f:
                    ae:48:fa:02:85:1f:eb:de:c3:19:bc:95:2f:84:e0:
                    24:db:a5:a2:25:12:b2:3d:7e:8e:26:fe:21:9c:5f:
                    5f:3d:f6:33:5b:a6:73:a0:0c:8e:d0:1b:df:7e:1c:
                    26:f7:d6:21:93:b5:b2:d0:41:83:e0:ce:bf:2d:b8:
                    5b:eb:d7:27:1e:79:74:6a:8f:8d:eb:24:98:87:96:
                    20:39:5f:5b:b8:26:bb:f2:56:7b:fb:38:40:e0:c6:
                    02:4c:84:1f:24:4f:e3:62:67:31:76:d6:14:ef:3b:
                    48:84:b0:48:88:26:26:07:b8:56:2b:77:37:93:1d:
                    23:32:bf:f4:9e:d8:0f:d1:8e:f1:c1:40:91:08:34:
                    89:16:5e:46:03:60:a1:b0:f2:6d:ee:bd:5d:47:cc:
                    29:9f:8b:98:27:0e:20:86:5a:e1:de:da:80:98:30:
                    b7:71:d3:5e:20:50:9e:2e:fc:53:7e:5a:8e:28:c7:
                    87:89:b1:c0:01:0c:61:61:05:1a:1a:c7:e4:17:25:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:ED:2A:18:8F:DD:38:20:72:31:F4:A0:E3:66:F9:80:FF:51:12
            X509v3 Authority Key Identifier:
                keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/6322249E033E11EDA7401850C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.55.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:6c:f3:53:f1:ee:54:22:68:ed:32:88:ec:e9:77:7f:f2:b8:
         7a:58:c6:d1:d1:1d:13:f3:19:2c:89:33:de:d3:03:2d:7a:ba:
         e7:f6:7c:97:0e:18:93:58:28:6d:16:d5:44:5b:92:2d:d2:b3:
         2b:ca:4a:ea:30:ac:61:26:b3:bb:2e:73:b6:fa:24:4f:8a:61:
         60:99:d8:7a:c5:4c:c4:18:7d:28:ff:1b:c0:41:97:03:89:35:
         b7:24:34:2d:4e:4d:dc:5c:e1:d5:cb:ee:9f:b9:f9:18:e3:fd:
         1e:a5:60:a8:af:e1:00:96:c9:0c:fd:84:d1:2a:77:e9:e2:d6:
         d1:c0:ea:df:24:22:3c:c8:7b:4a:75:ba:e8:51:e6:85:2e:a7:
         4b:16:2b:91:c9:49:94:db:f5:49:e8:76:cc:55:9d:41:d8:a0:
         0d:13:d6:32:81:06:4c:99:52:a6:11:a3:01:e6:c1:ad:18:58:
         26:95:d2:9b:bb:2a:b1:17:2c:ba:26:c0:f7:18:4b:80:22:43:
         87:8c:94:b3:6b:80:16:75:de:cf:4d:17:69:35:81:09:26:be:
         bf:7a:d1:f6:4a:41:b3:d3:f5:b2:5e:7e:fb:f6:07:7f:11:28:
         ba:f5:b9:ab:23:5f:97:ed:9c:38:73:aa:27:f0:9d:75:63:dd:
         db:18:2d:a9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVCQTkxMTAvBgNVBAUTKERBOUQxRjlDNEZEOUEyN0M3NURBQ0E3REUyMjk5NTY4
MzgwQzA4NTkwHhcNMjYwMTA2MTkxNjQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmQxYy1mZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4x0MMBB2GfcTqWscGoqU/OVtaTu1Z7lfX0FNF1i+jg6OTZaqKZxWfhJt6Ea
fHV8FeIepWDjtpMlzA+uSPoChR/r3sMZvJUvhOAk26WiJRKyPX6OJv4hnF9fPfYz
W6ZzoAyO0Bvffhwm99Yhk7Wy0EGD4M6/Lbhb69cnHnl0ao+N6ySYh5YgOV9buCa7
8lZ7+zhA4MYCTIQfJE/jYmcxdtYU7ztIhLBIiCYmB7hWK3c3kx0jMr/0ntgP0Y7x
wUCRCDSJFl5GA2ChsPJt7r1dR8wpn4uYJw4ghlrh3tqAmDC3cdNeIFCeLvxTflqO
KMeHibHAAQxhYQUaGsfkFyXEMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMfC7SoY
j904IHIx9KDjZvmA/1ESMB8GA1UdIwQYMBaAFNqdH5xP2aJ8ddrKfeIplWg4DAhZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9ERjdBN0YxNDgz
OEUxMUVBOENFQTA5NjBDNEY5QUUwMi8ycDBmbkVfWm9ueDEyc3A5NGltVmFEZ01D
RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJwMGZuRV9ab254MTJzcDk0aW1WYURnTUNGay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTVCQTkvREY3QTdGMTQ4MzhFMTFFQThDRUEwOTYwQzRGOUFFMDIvNjMyMjI0OUUw
MzNFMTFFREE3NDAxODUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyjdSMA0GCSqGSIb3DQEBCwUAA4IBAQBXbPNT8e5UImjtMojs6Xd/
8rh6WMbR0R0T8xksiTPe0wMterrn9nyXDhiTWChtFtVEW5It0rMrykrqMKxhJrO7
LnO2+iRPimFgmdh6xUzEGH0o/xvAQZcDiTW3JDQtTk3cXOHVy+6fufkY4/0epWCo
r+EAlskM/YTRKnfp4tbRwOrfJCI8yHtKdbroUeaFLqdLFiuRyUmU2/VJ6HbMVZ1B
2KANE9YygQZMmVKmEaMB5sGtGFgmldKbuyqxFyy6JsD3GEuAIkOHjJSza4AWdd7P
TRdpNYEJJr6/etH2SkGz0/WyXn779gd/ESi69bmrI1+X7Zw4c6on8J11Y93bGC2p
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:46 2026 by rpki-client