Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/84797D8ACF8D11F09FB4175EC4F9AE02.roa
File:                     84797D8ACF8D11F09FB4175EC4F9AE02.roa (raw, json)
Hash identifier:          t8gtrbMwzQlauD3gHG5WSBOc5P6tKFnudYJCa+/BPeg=
Subject key identifier:   E5:09:69:91:96:F9:1E:11:D4:FE:57:87:4A:81:BA:B1:C0:09:F6:67
Certificate issuer:       /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
Certificate serial:       33
Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/84797D8ACF8D11F09FB4175EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:57:54 +0000
ROA not before:           Tue 02 Dec 2025 14:47:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154274
IP address blocks:        202.58.120.0/23 maxlen: 24
                          2001:df6:29c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl
                          rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C
        Validity
            Not Before: Dec  2 14:47:10 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3d562-ec3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:b1:6c:8c:6c:3c:8a:93:63:d9:c1:90:b3:
                    72:5c:2f:e5:03:0b:21:dc:e5:30:8c:53:92:b4:6b:
                    9e:18:84:33:26:d2:5b:bd:27:4a:e8:c5:08:92:8d:
                    a9:4a:0b:09:99:7d:31:a5:d0:9d:d7:72:e4:12:fb:
                    32:95:7e:13:88:c4:57:2b:58:26:e0:c0:eb:10:6d:
                    2d:4d:d7:eb:52:c9:8e:2c:ef:7f:d9:41:68:18:04:
                    54:e5:2f:64:fc:8a:4d:0a:b1:3a:39:bd:12:3b:60:
                    5a:91:05:cd:27:b3:c2:34:67:4d:04:3b:ce:be:cf:
                    c8:3e:f9:44:23:b2:44:79:a3:56:a2:16:78:25:18:
                    c6:7e:2a:78:f6:ad:a7:11:6e:e7:71:a3:ed:58:a5:
                    35:cb:3d:5f:c8:ba:68:64:0f:a1:dc:a6:87:c6:c8:
                    0e:f6:4d:3d:03:08:e3:79:27:61:74:7b:76:c7:b2:
                    d6:29:64:bb:01:28:2f:ec:85:e5:72:0e:fa:76:9e:
                    ef:0a:e9:5f:9e:d2:8c:4b:f4:81:f8:96:86:4d:1e:
                    16:66:20:2a:57:f9:31:2e:9f:ce:d6:43:7e:5b:f0:
                    66:a5:86:0c:65:96:82:64:31:04:13:00:12:e3:3d:
                    c6:f9:79:9d:f5:41:78:af:73:0c:bd:29:e5:cc:d6:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:69:91:96:F9:1E:11:D4:FE:57:87:4A:81:BA:B1:C0:09:F6:67
            X509v3 Authority Key Identifier:
                keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/84797D8ACF8D11F09FB4175EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.58.120.0/23
                IPv6:
                  2001:df6:29c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:65:33:47:a1:03:18:69:ba:be:eb:1e:68:32:c5:ba:bd:22:
         e2:26:1e:62:2d:3d:01:bb:db:aa:e4:d1:0c:9b:80:05:67:22:
         d8:80:33:f7:a6:45:cd:d4:92:5d:8c:85:c8:43:0a:da:8f:d1:
         af:e6:be:74:b6:33:57:1e:54:5e:1d:ca:82:8c:f5:7b:54:ed:
         bd:39:09:e9:72:0c:35:07:02:1d:9a:b1:2f:53:17:ae:dc:4d:
         fe:4f:f8:fd:27:89:b8:8d:c6:63:ac:50:66:a2:6c:9a:16:66:
         ee:9e:af:04:ce:f6:a9:74:ee:74:ff:0c:12:3d:77:c4:f5:45:
         7c:04:87:20:76:85:fb:06:47:f4:49:53:15:2e:a7:9e:32:f4:
         97:a8:e1:e1:3e:9e:1c:96:57:92:17:f8:fd:b1:99:ce:99:eb:
         37:c5:49:5e:d8:e9:2e:e9:73:2c:94:c8:62:d0:fa:74:5f:83:
         c2:85:86:d1:7e:93:66:6e:81:33:61:ac:66:12:fc:94:a2:a9:
         14:7d:26:9c:25:1c:cb:60:8f:c9:1c:26:3e:11:02:3b:27:5a:
         08:c3:e5:3e:de:a9:f1:27:f4:1c:5a:4b:6d:7e:b5:4b:cf:67:
         43:2c:71:ab:33:23:5d:c1:bc:cf:12:7b:68:0b:25:c6:ea:25:
         d4:95:a8:47
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RDFGRTExMC8GA1UEBRMoNTg3QzRFRjg4NUJENDE2QTk5RDEwRjU1QjZFODE2OEMw
MkQwMjAxQzAeFw0yNTEyMDIxNDQ3MTBaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNTYyLWVjM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqgLFsjGw8ipNj2cGQs3JcL+UDCyHc5TCMU5K0a54YhDMm0lu9J0roxQiSjalK
CwmZfTGl0J3XcuQS+zKVfhOIxFcrWCbgwOsQbS1N1+tSyY4s73/ZQWgYBFTlL2T8
ik0KsTo5vRI7YFqRBc0ns8I0Z00EO86+z8g++UQjskR5o1aiFnglGMZ+Knj2racR
budxo+1YpTXLPV/IumhkD6HcpofGyA72TT0DCON5J2F0e3bHstYpZLsBKC/sheVy
Dvp2nu8K6V+e0oxL9IH4loZNHhZmICpX+TEun87WQ35b8GalhgxlloJkMQQTABLj
Pcb5eZ31QXivcwy9KeXM1ox5AgMBAAGjggJxMIICbTAdBgNVHQ4EFgQU5QlpkZb5
HhHU/leHSoG6scAJ9mcwHwYDVR0jBBgwFoAUWHxO+IW9QWqZ0Q9VtugWjALQIBww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMUZFLzVEQjYwOEFFQ0Y4
QzExRjBBRUY2QzU1OUM0RjlBRTAyL1dIeE8tSVc5UVdxWjBROVZ0dWdXakFMUUlC
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvV0h4Ty1JVzlRV3FaMFE5VnR1Z1dqQUxRSUJ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDFGRS81REI2MDhBRUNGOEMxMUYwQUVGNkM1NTlDNEY5QUUwMi84NDc5N0Q4QUNG
OEQxMUYwOUZCNDE3NUVDNEY5QUUwMi5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBAHKOngwDwQCAAIwCQMHACABDfYpwDANBgkqhkiG9w0BAQsFAAOCAQEA
OWUzR6EDGGm6vuseaDLFur0i4iYeYi09AbvbquTRDJuABWci2IAz96ZFzdSSXYyF
yEMK2o/Rr+a+dLYzVx5UXh3Kgoz1e1TtvTkJ6XIMNQcCHZqxL1MXrtxN/k/4/SeJ
uI3GY6xQZqJsmhZm7p6vBM72qXTudP8MEj13xPVFfASHIHaF+wZH9ElTFS6nnjL0
l6jh4T6eHJZXkhf4/bGZzpnrN8VJXtjpLulzLJTIYtD6dF+DwoWG0X6TZm6BM2Gs
ZhL8lKKpFH0mnCUcy2CPyRwmPhECOydaCMPlPt6p8Sf0HFpLbX61S89nQyxxqzMj
XcG8zxJ7aAslxuol1JWoRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:29 2026 by rpki-client