Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/84B9D0540E9711EB9A6C2B3CC4F9AE02.roa
File:                     84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          n/sj2wRsBvjs9hKRMqe9d0qAtiVz6B9plUwfc13RUGA=
Subject key identifier:   3F:A1:BC:F8:A6:39:54:B4:13:0D:41:DD:3F:6F:07:07:BE:04:AC:50
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       086D
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/84B9D0540E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:02:58 +0000
ROA not before:           Wed 16 Apr 2025 21:31:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     45209
IP address blocks:        202.92.144.0/22 maxlen: 22
                          2400:b000:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 16 21:31:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47f51-ddf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:69:ef:1c:03:96:3b:45:5b:eb:b0:09:91:
                    34:55:7c:cc:27:82:31:cd:6f:d9:01:54:f7:8b:d3:
                    d7:19:36:0e:0c:2c:c7:32:31:1c:a9:5a:a5:64:5b:
                    d9:a8:cc:6c:87:a1:c0:19:4f:69:f2:c1:e0:8c:08:
                    b2:cb:97:bf:41:c7:bf:ba:ef:03:cb:a9:24:d6:4c:
                    f6:ab:a4:8a:85:83:2f:ce:a3:45:0c:48:3a:45:41:
                    41:ba:8b:45:2a:12:c2:ef:7f:f9:39:8b:0d:e2:2d:
                    13:a2:f4:96:77:90:6b:2c:b8:84:9b:ff:4c:bb:5c:
                    f3:e3:54:27:af:f2:de:6d:98:68:27:a1:05:d7:21:
                    15:ef:15:9f:97:b5:f3:66:a3:30:23:e2:96:1c:90:
                    2c:54:0e:73:00:c9:9a:11:28:94:21:91:42:d8:ae:
                    a8:96:4a:de:a5:ed:f4:21:66:20:f2:3e:74:21:75:
                    5c:ea:13:2b:89:c3:13:6a:79:e6:3c:a5:f5:df:72:
                    98:95:58:34:dd:78:55:bb:46:08:80:f5:21:4d:d0:
                    72:d2:dd:a0:06:d5:2e:55:45:fe:6d:a9:ad:a9:c7:
                    ce:51:9c:18:3b:f6:b2:e0:ea:8f:8f:d6:cf:a9:0e:
                    59:ba:4e:49:b4:32:cc:b1:81:e2:57:0d:cc:c6:14:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A1:BC:F8:A6:39:54:B4:13:0D:41:DD:3F:6F:07:07:BE:04:AC:50
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/84B9D0540E9711EB9A6C2B3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.144.0/22
                IPv6:
                  2400:b000:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:a8:cf:eb:5f:36:36:07:c6:69:26:ba:32:2e:89:4b:78:7e:
         64:a7:01:a9:00:83:ad:a2:9c:cc:63:6f:fc:1b:19:82:f9:12:
         3a:9f:e0:c9:94:79:9c:89:4b:d1:cd:19:39:72:29:c0:4d:19:
         d8:11:4a:4b:66:ff:82:88:f8:ec:d6:57:10:eb:8e:44:5c:aa:
         bf:bb:73:69:61:87:4b:c9:ac:da:20:5e:c4:ad:18:43:ce:67:
         7f:84:3b:f2:a7:a8:65:b6:3a:9d:ea:3b:9d:af:76:f7:67:19:
         32:8c:dc:21:4a:ca:be:be:c0:3b:7b:04:e7:bd:24:fa:58:57:
         ef:59:1b:e2:02:7c:ff:0c:91:49:0e:45:cd:43:59:c6:4f:bf:
         b2:01:a8:f1:6d:2e:8c:40:2f:cf:59:d2:8c:cd:bd:1c:ee:a3:
         dd:55:40:3e:52:5c:8d:d3:66:74:07:b7:ff:21:d7:0b:26:6d:
         e6:d6:d1:89:98:98:d0:70:00:ed:96:85:f2:16:15:99:92:1d:
         a2:ac:76:8b:d9:83:c9:07:dc:8e:a3:3f:c1:c5:28:14:ed:7d:
         19:04:34:85:dd:d8:88:43:3a:86:34:45:38:82:ff:8b:7e:f7:
         69:87:4d:99:47:a8:cc:6a:d5:62:5d:6f:70:15:da:52:e7:52:
         04:2e:1b:e3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB
Mjg4N0U2RjUwHhcNMjUwNDE2MjEzMTQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2Y1MS1kZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArm1p7xwDljtFW+uwCZE0VXzMJ4IxzW/ZAVT3i9PXGTYODCzHMjEcqVqlZFvZ
qMxsh6HAGU9p8sHgjAiyy5e/Qce/uu8Dy6kk1kz2q6SKhYMvzqNFDEg6RUFBuotF
KhLC73/5OYsN4i0TovSWd5BrLLiEm/9Mu1zz41Qnr/LebZhoJ6EF1yEV7xWfl7Xz
ZqMwI+KWHJAsVA5zAMmaESiUIZFC2K6olkrepe30IWYg8j50IXVc6hMricMTannm
PKX133KYlVg03XhVu0YIgPUhTdBy0t2gBtUuVUX+bamtqcfOUZwYO/ay4OqPj9bP
qQ5Zuk5JtDLMsYHiVw3MxhRCaQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFD+hvPim
OVS0Ew1B3T9vBwe+BKxQMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF
OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODRCOUQwNTQw
RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQCylyQMA8EAgACMAkDBwAkALAAAgAwDQYJKoZIhvcNAQELBQADggEB
AFioz+tfNjYHxmkmujIuiUt4fmSnAakAg62inMxjb/wbGYL5Ejqf4MmUeZyJS9HN
GTlyKcBNGdgRSktm/4KI+OzWVxDrjkRcqr+7c2lhh0vJrNogXsStGEPOZ3+EO/Kn
qGW2Op3qO52vdvdnGTKM3CFKyr6+wDt7BOe9JPpYV+9ZG+ICfP8MkUkORc1DWcZP
v7IBqPFtLoxAL89Z0ozNvRzuo91VQD5SXI3TZnQHt/8h1wsmbebW0YmYmNBwAO2W
hfIWFZmSHaKsdovZg8kH3I6jP8HFKBTtfRkENIXd2IhDOoY0RTiC/4t+92mHTZlH
qMxq1WJdb3AV2lLnUgQuG+M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:52 2026 by rpki-client