Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/00F0B7EEA87411EF88F5C638C4F9AE02.roa
File:                     00F0B7EEA87411EF88F5C638C4F9AE02.roa (raw, json)
Hash identifier:          MnIX1WivCHNfhFI9QSlsXBStCtmjtZcVcNfmwDTY4t8=
Subject key identifier:   DD:FF:26:11:D0:8D:5D:A8:17:F6:B9:A8:93:33:E2:24:C2:CA:FF:9E
Certificate issuer:       /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
Certificate serial:       039F
Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/00F0B7EEA87411EF88F5C638C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:26:08 +0000
ROA not before:           Mon 31 Mar 2025 01:28:18 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58468
IP address blocks:        202.5.130.0/24 maxlen: 24
                          202.5.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl
                          rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A
        Validity
            Not Before: Mar 31 01:28:18 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a44c80-17a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f5:20:2e:6c:ca:71:f8:b6:9e:9c:0b:28:f4:
                    04:8d:33:df:fb:27:2a:c8:f0:2d:a3:44:03:b9:0f:
                    95:b2:8c:97:88:d8:04:be:c3:c6:e9:1a:3d:67:b6:
                    8c:ea:1c:37:9c:0a:02:ee:d0:c8:42:bb:11:79:11:
                    46:17:54:70:03:81:80:e1:49:4b:fe:b6:07:28:24:
                    74:6c:1c:af:aa:d6:42:63:fc:71:9e:06:5e:05:24:
                    e9:f8:26:47:ae:e7:57:8d:4e:a5:0b:f2:27:86:4d:
                    ee:13:5c:61:d7:7f:91:d0:a2:f8:20:04:d7:a7:a7:
                    31:6b:a5:25:8e:0b:e8:2c:c8:fe:c8:c3:e6:02:b9:
                    aa:6c:0d:22:6a:58:4e:ce:8a:12:a6:f1:aa:7c:1a:
                    ef:fe:8c:78:3b:a6:89:44:09:1d:f8:fb:59:c8:ce:
                    81:29:d9:7f:90:99:c8:2c:6a:62:b8:d7:b7:27:53:
                    d6:2f:74:c0:cc:1b:79:6e:18:5f:1e:86:c6:4a:0b:
                    80:db:6c:98:e9:cf:29:ef:69:d9:b4:ce:46:18:5d:
                    98:c2:5d:7f:88:19:da:ef:94:48:79:85:48:66:17:
                    de:71:22:54:22:fd:b2:16:74:6d:d7:07:ae:c4:69:
                    69:b5:bc:4f:73:2d:3c:cf:47:93:46:62:16:db:79:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FF:26:11:D0:8D:5D:A8:17:F6:B9:A8:93:33:E2:24:C2:CA:FF:9E
            X509v3 Authority Key Identifier:
                keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/00F0B7EEA87411EF88F5C638C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:62:37:31:02:68:e8:eb:d5:5f:5d:45:3c:23:f4:55:d4:
         d0:f1:15:bf:71:c3:d9:32:22:9a:4e:f6:e6:d0:31:98:7d:1b:
         3c:0b:fb:54:47:47:64:15:0a:36:6c:b6:5f:45:87:01:8c:70:
         24:74:53:f8:68:81:47:86:d5:1d:13:39:74:26:07:91:67:76:
         0b:1a:91:04:ce:1b:b2:d8:e6:0b:a8:54:da:21:30:0b:09:aa:
         d8:12:a1:da:8b:4a:db:e5:b5:82:3a:e8:1e:c1:80:45:a0:79:
         33:bb:16:1c:7a:10:0e:41:77:49:f4:38:78:87:c7:47:db:17:
         e7:3b:aa:4d:32:c6:48:ff:92:c4:54:7b:13:47:4a:d6:f1:6c:
         ab:fd:e5:64:56:78:05:68:cf:4e:b1:00:fb:c0:f3:8e:a8:2d:
         8e:c8:89:8c:a8:82:54:46:96:db:d2:8a:b6:d0:04:2a:f7:7c:
         a5:72:7f:a6:b2:ae:e1:86:59:15:ac:14:b6:8f:bc:28:a3:76:
         3c:98:a7:00:58:27:dd:66:73:04:e4:44:cb:93:92:69:2b:e1:
         f2:2d:b1:9e:2c:68:14:fc:96:2f:88:96:a7:29:72:8f:2d:d9:
         81:c2:3b:53:6c:52:fc:d1:dd:8e:96:6f:99:97:f0:b9:b9:86:
         87:10:5b:df
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx
MjA5RDNGM0EwHhcNMjUwMzMxMDEyODE4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGM4MC0xN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6/UgLmzKcfi2npwLKPQEjTPf+ycqyPAto0QDuQ+VsoyXiNgEvsPG6Ro9Z7aM
6hw3nAoC7tDIQrsReRFGF1RwA4GA4UlL/rYHKCR0bByvqtZCY/xxngZeBSTp+CZH
rudXjU6lC/Inhk3uE1xh13+R0KL4IATXp6cxa6UljgvoLMj+yMPmArmqbA0ialhO
zooSpvGqfBrv/ox4O6aJRAkd+PtZyM6BKdl/kJnILGpiuNe3J1PWL3TAzBt5bhhf
HobGSguA22yY6c8p72nZtM5GGF2Ywl1/iBna75RIeYVIZhfecSJUIv2yFnRt1weu
xGlptbxPcy08z0eTRmIW23mdlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN3/JhHQ
jV2oF/a5qJMz4iTCyv+eMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4
REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0YwNTEvNUFBRDlEN0VEOEREMTFFQ0E1REQwQzUwQzRGOUFFMDIvMDBGMEI3RUVB
ODc0MTFFRjg4RjVDNjM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBygWCMA0GCSqGSIb3DQEBCwUAA4IBAQAgDGI3MQJo6OvVX11FPCP0
VdTQ8RW/ccPZMiKaTvbm0DGYfRs8C/tUR0dkFQo2bLZfRYcBjHAkdFP4aIFHhtUd
Ezl0JgeRZ3YLGpEEzhuy2OYLqFTaITALCarYEqHai0rb5bWCOugewYBFoHkzuxYc
ehAOQXdJ9Dh4h8dH2xfnO6pNMsZI/5LEVHsTR0rW8Wyr/eVkVngFaM9OsQD7wPOO
qC2OyImMqIJURpbb0oq20AQq93ylcn+msq7hhlkVrBS2j7woo3Y8mKcAWCfdZnME
5ETLk5JpK+HyLbGeLGgU/JYviJanKXKPLdmBwjtTbFL80d2Olm+Zl/C5uYaHEFvf
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:09:57 2026 by rpki-client