Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/3701B6ECAB3511F18DD665A26C11F970.roa
File:                     3701B6ECAB3511F18DD665A26C11F970.roa (raw, json)
Hash identifier:          AtFyjSzJpmwJS5++D9ZwxOebly4i8uSwVic2GM31Rrg=
Subject key identifier:   50:50:91:C4:34:6D:8E:CA:88:09:1C:F4:C6:BB:DA:5F:AA:FF:97:32
Certificate issuer:       /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
Certificate serial:       2B38
Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/3701B6ECAB3511F18DD665A26C11F970.roa
Signing time:             Tue 08 Sep 2026 03:27:27 +0000
ROA not before:           Tue 08 Sep 2026 03:27:27 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     4913
IP address blocks:        202.80.160.0/24 maxlen: 24
                          202.80.161.0/24 maxlen: 24
                          202.80.162.0/24 maxlen: 24
                          202.80.163.0/24 maxlen: 24
                          202.80.165.0/24 maxlen: 24
                          202.80.166.0/24 maxlen: 24
                          202.80.167.0/24 maxlen: 24
                          202.80.169.0/24 maxlen: 24
                          202.80.170.0/24 maxlen: 24
                          202.80.171.0/24 maxlen: 24
                          202.80.172.0/24 maxlen: 24
                          202.80.174.0/24 maxlen: 24
                          202.80.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl
                          rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11064 (0x2b38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815
        Validity
            Not Before: Sep  8 03:27:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a9f809f-05d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d3:00:dc:a1:da:df:02:30:1f:2a:12:aa:43:
                    40:b8:df:06:8d:0a:79:4b:5b:1c:70:b1:35:db:65:
                    e1:bf:a8:71:3b:9e:f9:06:41:1f:6d:30:62:38:ae:
                    13:9d:74:0a:dc:27:ba:43:7e:4f:45:01:a1:02:63:
                    46:30:f2:61:6d:99:cc:80:20:65:fc:78:5c:58:5e:
                    27:63:2f:a1:11:57:8c:e1:26:30:97:0a:e0:e2:e2:
                    48:d5:04:cf:33:a8:1e:68:8c:1a:f3:f3:df:98:65:
                    ec:5a:37:03:ef:1b:78:18:8d:f8:30:b3:3e:85:8b:
                    72:54:8a:ca:93:a1:be:c4:ee:0c:d3:7e:13:d7:d2:
                    cb:0a:b8:3e:fa:b6:13:d2:59:b3:c8:f2:00:7b:53:
                    38:7d:06:fb:af:9f:12:17:b0:f6:02:49:0f:58:05:
                    86:0d:79:ac:0e:fa:c5:de:63:27:15:5b:9c:16:5a:
                    4a:a3:e3:2b:31:db:d4:70:fd:25:ea:32:c4:e3:3d:
                    71:9b:16:6a:90:2e:04:85:09:12:ed:5b:ef:10:d8:
                    e2:c5:9e:49:0b:a0:41:4e:9f:97:bd:d0:da:79:92:
                    27:db:67:1f:22:de:54:12:c5:88:ea:13:54:3e:11:
                    be:e3:43:6c:94:c8:08:96:f5:9d:4c:07:01:b3:10:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:50:91:C4:34:6D:8E:CA:88:09:1C:F4:C6:BB:DA:5F:AA:FF:97:32
            X509v3 Authority Key Identifier:
                keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/3701B6ECAB3511F18DD665A26C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.160.0/22
                  202.80.165.0-202.80.167.255
                  202.80.169.0-202.80.172.255
                  202.80.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:c9:89:49:23:88:9d:6a:4f:b2:5a:c1:5d:0e:a1:94:90:b8:
         ea:c8:a0:21:b8:7a:5d:bf:b0:9c:60:3f:39:1a:8e:c9:33:52:
         05:44:26:7a:04:6a:00:38:84:90:e2:4e:b6:ff:57:9b:4a:58:
         dc:cf:a8:40:71:fc:b0:a8:a2:09:66:cc:da:04:8e:20:03:7e:
         43:e3:d1:8d:9c:2c:c6:d6:3a:98:51:04:7d:cd:99:11:5c:e6:
         39:81:84:f4:1e:19:d2:e5:3b:7d:b5:9e:47:91:2d:f5:c8:3a:
         18:27:12:e1:fe:d8:db:4c:69:22:58:8f:34:54:0a:7b:44:04:
         c4:50:e5:b2:5b:84:b8:94:88:05:46:78:08:8f:ef:a3:d7:1a:
         67:44:2a:f3:60:f8:f3:a4:47:86:7c:4c:56:42:a9:33:7d:ea:
         3c:fa:db:f9:23:df:e0:91:1f:fa:5c:a0:0a:f0:4e:08:84:e6:
         14:e6:19:c2:f9:06:f8:77:a1:d4:a9:91:88:5b:2f:72:a8:2f:
         00:51:a0:23:7d:4e:f7:13:f4:e3:48:5f:06:91:c7:53:7a:76:
         d1:67:2d:ea:b5:05:ec:4d:5d:d5:78:11:53:cb:c8:2f:57:fb:
         94:69:65:ae:15:81:66:07:6d:fa:81:c2:f8:48:24:f4:6e:86:
         fb:bb:e8:8c
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgICKzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4
QjJBNUE4MTUwHhcNMjYwOTA4MDMyNzI3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlmODA5Zi0wNWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5tMA3KHa3wIwHyoSqkNAuN8GjQp5S1sccLE122Xhv6hxO575BkEfbTBiOK4T
nXQK3Ce6Q35PRQGhAmNGMPJhbZnMgCBl/HhcWF4nYy+hEVeM4SYwlwrg4uJI1QTP
M6geaIwa8/PfmGXsWjcD7xt4GI34MLM+hYtyVIrKk6G+xO4M034T19LLCrg++rYT
0lmzyPIAe1M4fQb7r58SF7D2AkkPWAWGDXmsDvrF3mMnFVucFlpKo+MrMdvUcP0l
6jLE4z1xmxZqkC4EhQkS7VvvENjixZ5JC6BBTp+XvdDaeZIn22cfIt5UEsWI6hNU
PhG+40NslMgIlvWdTAcBsxC12QIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFFBQkcQ0
bY7KiAkc9Ma72l+q/5cyMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3
MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx
QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjIwRUQvRTdFMjMxRTYzNzAwMTFFNEIzMkJEMDZCQzRGOUFFMDIvMzcwMUI2RUNB
QjM1MTFGMThERDY2NUEyNkMxMUY5NzAucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu
BAIAATAoAwQCylCgMAwDBADKUKUDBAPKUKAwDAMEAMpQqQMEAMpQrAMEAcpQrjAN
BgkqhkiG9w0BAQsFAAOCAQEAbsmJSSOInWpPslrBXQ6hlJC46sigIbh6Xb+wnGA/
ORqOyTNSBUQmegRqADiEkOJOtv9Xm0pY3M+oQHH8sKiiCWbM2gSOIAN+Q+PRjZws
xtY6mFEEfc2ZEVzmOYGE9B4Z0uU7fbWeR5Et9cg6GCcS4f7Y20xpIliPNFQKe0QE
xFDlsluEuJSIBUZ4CI/vo9caZ0Qq82D486RHhnxMVkKpM33qPPrb+SPf4JEf+lyg
CvBOCITmFOYZwvkG+Heh1KmRiFsvcqgvAFGgI31O9xP040hfBpHHU3p20Wct6rUF
7E1d1XgRU8vIL1f7lGllrhWBZgdt+oHC+Egk9G6G+7vojA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:22:20 2026 by rpki-client