Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/A64296622BAA11EC9618D864C4F9AE02.roa
File:                     A64296622BAA11EC9618D864C4F9AE02.roa (raw, json)
Hash identifier:          8H4igkdyvSrlee6FsZvSUQfDkv8BaE7hXMId+JKjlHg=
Subject key identifier:   DA:C1:96:58:26:05:E0:6F:63:02:20:0C:D2:C0:A5:5C:54:22:22:55
Certificate issuer:       /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial:       0566
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/A64296622BAA11EC9618D864C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:47:14 +0000
ROA not before:           Tue 24 Feb 2026 23:19:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        202.45.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
                          rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
        Validity
            Not Before: Feb 24 23:19:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a45f82-62da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:4c:0d:fa:e3:7c:df:dd:4a:93:70:c2:8a:
                    9c:51:06:dd:18:0a:55:90:6f:2a:df:b3:30:ae:eb:
                    d7:4f:9c:e2:9e:0e:2a:8f:93:72:7c:34:9f:af:16:
                    43:31:07:b8:9e:40:e4:b4:9e:ee:8c:b6:79:39:24:
                    b7:9c:03:a6:75:94:b8:01:93:5d:5e:e5:47:ea:66:
                    26:55:18:d7:8d:75:c2:3c:cb:02:00:2c:35:84:8d:
                    5d:ec:39:ac:ae:ae:b2:f0:f4:b2:e0:9b:13:f5:3f:
                    ea:b8:89:6b:3e:a6:1c:d4:90:27:8e:06:a8:8d:81:
                    dc:7b:b2:95:7a:e1:ac:c2:e7:91:52:75:c9:2a:f7:
                    84:c9:4c:9e:e6:92:71:56:f9:b1:d7:95:53:53:22:
                    ea:e6:bf:3f:08:be:72:d4:d5:68:7a:d3:53:68:c8:
                    9d:49:6b:97:6c:36:99:ae:d0:98:70:4c:d7:a3:ff:
                    7d:11:90:fc:19:23:89:81:44:19:89:2b:d5:09:07:
                    fa:6e:de:d3:02:9d:f9:b2:47:a4:a8:97:81:99:59:
                    86:2d:61:49:94:48:89:2e:bf:ff:65:a3:14:6a:9e:
                    a0:a9:ec:af:ce:02:65:63:92:4c:79:69:5d:ce:b7:
                    15:0b:bf:af:eb:2e:82:c7:57:3e:53:0b:8a:33:a5:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C1:96:58:26:05:E0:6F:63:02:20:0C:D2:C0:A5:5C:54:22:22:55
            X509v3 Authority Key Identifier:
                keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/A64296622BAA11EC9618D864C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.45.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:04:42:3c:ca:69:62:41:63:0e:fa:4e:a3:af:67:97:41:4f:
         db:09:21:2e:cf:7c:8a:00:4d:54:24:2e:7c:a0:ba:db:74:4c:
         b6:02:9d:2e:ce:5b:ff:5b:f4:a0:46:1f:fb:d8:4e:ed:0a:2b:
         78:e2:13:fe:67:a2:7a:50:54:48:cf:3e:2e:8d:93:93:e9:0c:
         1b:dd:23:56:7e:1a:a5:be:8e:72:64:4f:60:ea:4f:8a:97:2a:
         21:8c:5b:0b:8b:a4:4e:e8:72:5f:a4:89:e2:3d:40:76:e6:96:
         89:ec:9f:6e:b4:b9:f3:0d:7b:de:14:ae:36:de:a8:24:4d:e1:
         ac:00:23:66:61:e7:20:91:0f:20:50:e9:91:07:5c:3d:7f:c7:
         73:19:65:27:52:9a:c2:73:08:c2:3e:33:87:69:f5:fe:42:27:
         be:9d:70:d7:96:43:57:b4:02:4f:18:c8:54:49:a9:1f:bf:f2:
         d4:7b:43:0e:39:ef:a5:c6:4b:8a:93:d2:6a:de:22:38:d3:e9:
         62:79:82:8c:3e:1e:24:7f:c9:0e:01:17:f1:c8:41:3b:46:a5:
         ab:34:67:e6:09:ab:ac:82:c2:c6:c6:7b:3a:51:38:26:35:a2:
         d0:1e:d9:c7:b8:3b:1f:05:48:0e:fc:01:91:1c:e9:8e:d1:50:
         1f:1e:2f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:36 2026 by rpki-client