Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/E2037F8C019911EFAFFEEC5DC4F9AE02.roa
File:                     E2037F8C019911EFAFFEEC5DC4F9AE02.roa (raw, json)
Hash identifier:          EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=
Subject key identifier:   75:55:D0:DB:58:8B:6F:4E:82:F8:AC:BD:9B:5D:A6:73:1E:19:E3:16
Certificate issuer:       /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial:       017B
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/E2037F8C019911EFAFFEEC5DC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 04:38:34 +0000
ROA not before:           Thu 09 Apr 2026 04:38:34 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     20868
IP address blocks:        202.50.180.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
        Validity
            Not Before: Apr  9 04:38:34 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d72d4a-5db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:df:ff:e4:09:85:25:d4:ca:a3:78:d6:82:
                    03:60:c7:4e:7e:4b:64:e4:01:78:cf:d3:93:b7:49:
                    93:c4:8b:c1:ac:33:db:8d:d5:70:90:63:bc:40:4c:
                    4a:44:6b:c6:60:0d:10:46:b4:2d:27:51:1d:5d:17:
                    e8:da:5a:c5:cb:75:fd:2a:c6:ba:a9:ef:fa:5c:62:
                    e9:88:fe:e7:85:d2:3b:d8:79:b1:62:52:f3:f3:6a:
                    55:c8:69:41:20:ac:9e:5d:36:20:3a:8b:2a:6b:ff:
                    1e:63:e2:4b:3e:2f:98:13:e5:3e:18:8b:f6:06:a6:
                    d1:25:6e:36:5e:e3:de:35:4d:e5:45:f5:c3:69:f8:
                    3f:b0:72:15:40:2d:71:d8:a8:bc:7f:f4:19:f9:b7:
                    06:c4:53:9b:0d:c4:2c:26:78:88:54:0b:25:50:94:
                    c3:44:bf:9a:ab:39:ed:24:79:8e:98:6b:47:ba:b6:
                    8a:59:53:fc:c7:dd:27:ba:0b:e2:7a:5e:7d:7f:50:
                    7a:e2:0d:87:d6:e6:6f:57:7b:06:8e:e5:a9:09:26:
                    fd:b4:8f:b8:d2:23:15:ee:7a:82:1a:59:12:5b:24:
                    dd:9d:ea:2e:64:be:ae:a3:a3:a5:88:e3:d6:02:12:
                    81:c7:c7:a2:70:9c:c8:ab:c9:f8:1c:12:fa:d4:0c:
                    39:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:D0:DB:58:8B:6F:4E:82:F8:AC:BD:9B:5D:A6:73:1E:19:E3:16
            X509v3 Authority Key Identifier:
                keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/E2037F8C019911EFAFFEEC5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:e7:59:c0:7d:0a:b6:83:8d:a7:55:63:02:d5:bd:cf:f7:3c:
         99:22:62:96:d3:d5:78:a5:09:ff:4e:75:f3:ac:14:69:e6:fd:
         1f:14:a6:20:3d:96:e3:75:b7:1c:80:1e:07:85:52:9a:b1:5a:
         d5:24:59:b7:b9:f0:38:d4:2e:fd:03:1d:12:70:8a:48:91:8f:
         0d:e7:19:35:75:a4:07:c2:9c:ff:1d:93:d2:7f:93:42:2c:49:
         c6:78:8a:1d:06:97:e4:5b:88:1c:6d:aa:a1:25:83:18:74:b2:
         fc:65:25:20:dd:d8:27:26:a0:ec:27:23:7a:b5:e8:58:48:c9:
         17:fd:35:f0:e7:bc:39:06:e1:89:fe:9e:58:28:be:aa:6a:06:
         c0:0d:54:62:46:d4:7e:71:8b:1d:27:6a:39:34:45:28:1f:a9:
         0e:5a:ab:48:46:0e:fa:ae:a4:1e:ed:d3:8f:ef:37:a9:d0:49:
         cc:85:f3:2c:d7:e5:73:25:51:30:fe:a8:75:d4:9f:4c:c2:cb:
         a6:67:0a:c1:2f:f2:f7:4c:2d:08:e1:97:c2:e1:45:ca:d6:f6:
         1e:b5:00:45:0f:75:93:01:78:f4:89:e5:f3:d6:4d:4a:03:1c:
         e9:02:06:5c:30:c7:6e:e4:bb:ba:2d:e3:9a:2f:9d:6b:e4:93:
         c5:d2:5b:d4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG
MERDNTkzM0QwHhcNMjYwNDA5MDQzODM0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ3MmQ0YS01ZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzpff/+QJhSXUyqN41oIDYMdOfktk5AF4z9OTt0mTxIvBrDPbjdVwkGO8QExK
RGvGYA0QRrQtJ1EdXRfo2lrFy3X9Ksa6qe/6XGLpiP7nhdI72HmxYlLz82pVyGlB
IKyeXTYgOosqa/8eY+JLPi+YE+U+GIv2BqbRJW42XuPeNU3lRfXDafg/sHIVQC1x
2Ki8f/QZ+bcGxFObDcQsJniIVAslUJTDRL+aqzntJHmOmGtHuraKWVP8x90nugvi
el59f1B64g2H1uZvV3sGjuWpCSb9tI+40iMV7nqCGlkSWyTdneouZL6uo6OliOPW
AhKBx8eicJzIq8n4HBL61Aw5EQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHVV0NtY
i29OgvisvZtdpnMeGeMWMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx
NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJCOTMvM0FDODc0RUUwMTQzMTFFRjgyNUE2NDY1QzRGOUFFMDIvRTIwMzdGOEMw
MTk5MTFFRkFGRkVFQzVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCyjK0MA0GCSqGSIb3DQEBCwUAA4IBAQAg51nAfQq2g42nVWMC1b3P
9zyZImKW09V4pQn/TnXzrBRp5v0fFKYgPZbjdbccgB4HhVKasVrVJFm3ufA41C79
Ax0ScIpIkY8N5xk1daQHwpz/HZPSf5NCLEnGeIodBpfkW4gcbaqhJYMYdLL8ZSUg
3dgnJqDsJyN6tehYSMkX/TXw57w5BuGJ/p5YKL6qagbADVRiRtR+cYsdJ2o5NEUo
H6kOWqtIRg76rqQe7dOP7zep0EnMhfMs1+VzJVEw/qh11J9MwsumZwrBL/L3TC0I
4ZfC4UXK1vYetQBFD3WTAXj0ieXz1k1KAxzpAgZcMMdu5Lu6LeOaL51r5JPF0lvU
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:54:40 2026 by rpki-client