Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/1376B9341FAE11F0B3E41E84C4F9AE02.roa
File:                     1376B9341FAE11F0B3E41E84C4F9AE02.roa (raw, json)
Hash identifier:          PtDZ91mnT8EbY3+b/UvFfpQljI6ctCClP32Mn4w89n8=
Subject key identifier:   54:DB:80:56:03:F6:BF:3D:57:FE:B7:C8:62:42:C6:2D:EE:3E:AA:EB
Certificate issuer:       /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA
Certificate serial:       027A
Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/1376B9341FAE11F0B3E41E84C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:11:23 +0000
ROA not before:           Tue 03 Feb 2026 02:21:29 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        210.80.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl
                          rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0AA, serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA
        Validity
            Not Before: Feb  3 02:21:29 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4652b-1598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dd:4b:56:2f:d0:bf:2c:e4:59:26:af:17:4e:
                    91:78:3a:78:9b:ad:ae:4d:6b:e2:eb:6e:bc:5c:c1:
                    55:e9:af:4b:1e:5a:5e:8b:29:d6:95:e1:23:2d:33:
                    50:97:5b:a4:34:75:9d:60:3c:5f:b1:4d:a5:79:33:
                    03:59:75:4e:ce:89:9a:c7:0e:9c:b1:fc:23:d4:b7:
                    39:62:30:89:e0:16:84:80:f6:2b:a3:af:ab:47:2c:
                    70:f7:b5:f0:8c:e4:38:43:a4:d1:31:d6:d7:cf:a4:
                    a7:93:e6:72:97:57:8f:2c:f4:4c:c9:dc:77:4f:8c:
                    dc:a5:5b:db:db:c0:47:bb:6e:e8:91:82:ba:cb:53:
                    d3:0a:5f:e4:49:3d:c2:e1:6e:e3:1b:d6:db:b0:36:
                    5c:a3:8c:ef:d1:6d:eb:b9:5d:a9:19:15:54:93:18:
                    73:f7:dc:bc:18:36:5e:b0:3d:69:24:06:8f:94:1d:
                    50:37:33:86:f8:a4:bb:a4:5a:7b:74:00:17:25:fa:
                    23:63:09:4a:e1:5f:99:6a:90:cf:17:97:d7:f6:1f:
                    38:82:55:7f:6b:b8:5e:69:8d:45:7f:40:c5:cc:4f:
                    4e:1f:52:b1:fd:2d:b2:7f:ed:04:45:2c:06:14:ee:
                    ca:4b:79:01:32:8e:4c:7d:76:d8:ce:8d:7c:6f:79:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DB:80:56:03:F6:BF:3D:57:FE:B7:C8:62:42:C6:2D:EE:3E:AA:EB
            X509v3 Authority Key Identifier:
                keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/1376B9341FAE11F0B3E41E84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.80.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:17:0e:fd:d4:1e:f6:7b:c2:88:ee:11:ed:8a:e0:6e:b0:
         9b:33:9d:e1:33:46:4c:92:78:38:b2:2b:69:ff:c1:35:7b:cc:
         95:ad:b0:89:a3:7b:69:34:4e:65:79:43:36:40:f9:86:37:23:
         84:d3:53:83:c9:0f:c1:75:60:d0:0b:5d:04:49:e5:78:dd:9c:
         4e:0c:c1:36:0f:d3:ca:d8:82:78:ed:83:3d:fd:39:f9:37:e0:
         f7:d5:c6:7f:80:a4:54:3c:0d:14:6c:d1:9d:21:1a:82:85:5b:
         96:8d:7c:0a:99:ee:84:4b:17:ad:97:bc:d9:77:5a:c1:42:df:
         0f:b4:74:c2:dc:16:da:4a:9b:ad:00:c5:1a:95:98:6f:00:79:
         2f:a1:c4:34:93:48:fc:81:77:76:df:c2:fe:bf:83:1f:23:97:
         96:61:6b:6f:eb:a6:c9:78:0e:fc:cd:c2:b7:7c:fa:41:34:f7:
         44:d4:b5:92:99:9f:2b:d1:5e:67:76:50:9a:b3:db:f8:96:01:
         40:be:1a:5c:10:41:92:57:b6:28:1f:c8:65:a6:03:9b:34:a7:
         99:18:14:85:86:a4:d9:cc:59:0b:18:1b:c0:94:e0:f1:39:17:
         33:2c:ad:0b:87:6a:06:2d:8e:87:ec:a2:11:3b:80:f8:87:89:
         3d:f0:b2:48
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQwQUExMTAvBgNVBAUTKDBBMTYxRjE3N0FGMkFDOEE3NUQ0MUFGRTQ3QUQ0MEQy
QUI5MTg3Q0EwHhcNMjYwMjAzMDIyMTI5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjUyYi0xNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlN1LVi/QvyzkWSavF06ReDp4m62uTWvi6268XMFV6a9LHlpeiynWleEjLTNQ
l1ukNHWdYDxfsU2leTMDWXVOzomaxw6csfwj1Lc5YjCJ4BaEgPYro6+rRyxw97Xw
jOQ4Q6TRMdbXz6Snk+Zyl1ePLPRMydx3T4zcpVvb28BHu27okYK6y1PTCl/kST3C
4W7jG9bbsDZco4zv0W3ruV2pGRVUkxhz99y8GDZesD1pJAaPlB1QNzOG+KS7pFp7
dAAXJfojYwlK4V+ZapDPF5fX9h84glV/a7heaY1Ff0DFzE9OH1Kx/S2yf+0ERSwG
FO7KS3kBMo5MfXbYzo18b3mqIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFTbgFYD
9r89V/63yGJCxi3uPqrrMB8GA1UdIwQYMBaAFAoWHxd68qyKddQa/ketQNKrkYfK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8zNjVCQ0NFQzdB
M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJcDExQnItUjYxQTBxdVJo
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NoWWZGM3J5cklwMTFCci1SNjFBMHF1Umg4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQwQUEvMzY1QkNDRUM3QTNDMTFFRDg2MUIyOTMzQzRGOUFFMDIvMTM3NkI5MzQx
RkFFMTFGMEIzRTQxRTg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0lCSMA0GCSqGSIb3DQEBCwUAA4IBAQBF/hcO/dQe9nvCiO4R7Yrg
brCbM53hM0ZMkng4sitp/8E1e8yVrbCJo3tpNE5leUM2QPmGNyOE01ODyQ/BdWDQ
C10ESeV43ZxODME2D9PK2IJ47YM9/Tn5N+D31cZ/gKRUPA0UbNGdIRqChVuWjXwK
me6ESxetl7zZd1rBQt8PtHTC3BbaSputAMUalZhvAHkvocQ0k0j8gXd238L+v4Mf
I5eWYWtv66bJeA78zcK3fPpBNPdE1LWSmZ8r0V5ndlCas9v4lgFAvhpcEEGSV7Yo
H8hlpgObNKeZGBSFhqTZzFkLGBvAlODxORczLK0Lh2oGLY6H7KIRO4D4h4k98LJI
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:19 2026 by rpki-client