Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa
File:                     9D4131DE13D511EF883BC527C4F9AE02.roa (raw, json)
Hash identifier:          oNk2Yj7BAXr53shotI4NPG4FvCYNPLa/xgmkzr6F1Yc=
Subject key identifier:   8C:D0:D5:56:7F:18:30:08:1A:95:F7:66:EB:A6:81:C3:C3:D9:8D:75
Certificate issuer:       /CN=A912A3E1/serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
Certificate serial:       0D1D
Authority key identifier: F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa
Signing time:             Mon 04 May 2026 18:22:29 +0000
ROA not before:           Mon 04 May 2026 18:22:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        202.77.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl
                          rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3357 (0xd1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3E1, serialNumber=F35268F976E8AE71FEFA66CA4516361C58AE1D91
        Validity
            Not Before: May  4 18:22:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f8e3e5-ebfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:b2:89:a1:e7:f6:66:c4:eb:b6:ac:10:bd:
                    0c:d9:4b:10:72:3e:58:db:95:0e:5d:a1:d7:02:a4:
                    b4:53:15:db:76:46:69:4c:ab:d3:05:2c:bf:cf:57:
                    f2:8e:88:2f:e8:f5:3e:3c:77:47:0e:29:5b:d5:64:
                    f1:f4:cd:37:e8:f9:bb:68:1d:ea:16:15:ea:05:f3:
                    3f:77:09:ae:ae:51:d5:2e:2f:ad:33:72:4b:6c:38:
                    db:9b:fe:21:f0:c2:0a:a2:6e:a0:f3:ce:23:40:3c:
                    4c:dd:fa:ed:97:47:c6:be:3b:90:16:07:ef:e8:fd:
                    3a:1b:21:7f:95:27:bd:7b:3d:e4:96:77:3a:e1:d7:
                    ba:5f:8e:66:af:f5:3d:de:a0:34:6c:a6:ed:f5:b6:
                    7a:d6:e4:61:6f:c7:77:5d:a9:f3:ab:d9:d6:ba:09:
                    ca:b6:37:57:f9:11:6b:ca:df:52:36:ab:2e:56:d5:
                    90:f6:6e:f2:db:e6:42:3a:05:f3:68:8a:0e:e2:d7:
                    3e:ca:ad:45:9c:64:c2:99:31:05:52:f6:dd:ab:86:
                    75:6d:6c:d3:1e:8f:3c:b3:91:c2:73:94:d0:4e:e6:
                    46:e3:7c:37:18:91:52:bc:db:c9:1e:78:97:a3:dc:
                    72:b7:0c:52:ad:1a:75:0f:e3:32:a0:9c:52:24:77:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D0:D5:56:7F:18:30:08:1A:95:F7:66:EB:A6:81:C3:C3:D9:8D:75
            X509v3 Authority Key Identifier:
                keyid:F3:52:68:F9:76:E8:AE:71:FE:FA:66:CA:45:16:36:1C:58:AE:1D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/81Jo-XbornH--mbKRRY2HFiuHZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81Jo-XbornH--mbKRRY2HFiuHZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3E1/9FD58DA605B011EA92354B5AC4F9AE02/9D4131DE13D511EF883BC527C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:f9:ba:d3:63:d4:98:9a:78:f8:1e:3c:ae:7a:2f:ab:56:81:
         eb:c6:aa:2c:15:2a:03:42:a4:d7:7f:12:37:9c:f4:79:14:0a:
         b4:f0:d5:1f:3c:55:6f:02:8b:85:7c:b4:db:ed:b5:d0:11:36:
         26:a3:72:09:a0:71:e0:b0:90:e1:36:77:ff:57:66:a7:1f:2f:
         9e:70:84:b2:c9:fe:d4:0b:bb:78:eb:3a:24:f3:31:96:41:a2:
         1d:69:e1:f4:d4:1c:e3:89:65:c0:da:4a:23:39:b9:e5:07:72:
         d8:73:3a:87:95:4c:61:cc:4c:9f:c9:5e:15:1d:e6:a6:b9:a2:
         2d:89:04:5c:5b:08:1e:92:21:25:5d:3a:41:40:d9:55:d6:e1:
         51:6d:02:a9:49:bb:90:e4:ef:19:17:e4:8d:a7:f8:36:76:07:
         8b:b1:6e:1d:73:15:2e:26:87:e0:75:5f:68:c8:b5:8b:80:d2:
         ab:28:fd:5c:af:79:ab:a0:d4:f1:9f:c4:b8:e3:4e:a9:44:39:
         db:44:72:eb:8b:1e:e7:4d:80:8d:b7:3f:d5:fb:30:6e:8a:c1:
         b5:11:ec:9b:ea:b3:4d:5e:ba:fb:1f:62:3a:36:57:a6:65:49:
         a3:d0:22:12:f8:de:5f:20:b4:92:76:ca:7e:b3:03:a7:71:fd:
         a9:f2:ca:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:22 2026 by rpki-client