Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/C8D5160AE75E11EF97E59E40C4F9AE02.roa
File:                     C8D5160AE75E11EF97E59E40C4F9AE02.roa (raw, json)
Hash identifier:          Y1Px4R4PB1cOeUqqRsR8kGbEDg+/Xac+F7xJincQnK8=
Subject key identifier:   33:0A:7C:38:0C:68:D8:B4:0B:4A:00:59:36:1F:5F:80:AF:70:4A:F6
Certificate issuer:       /CN=A919D180/serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
Certificate serial:       EE
Authority key identifier: 87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/C8D5160AE75E11EF97E59E40C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:00:53 +0000
ROA not before:           Mon 07 Apr 2025 06:44:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17794
IP address blocks:        202.45.82.0/23 maxlen: 23
                          202.45.85.0/24 maxlen: 24
                          202.45.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl
                          rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D180, serialNumber=87DA44A4CF839C3881C6BC38683CCDC308CA7CE9
        Validity
            Not Before: Apr  7 06:44:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59814-eef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:b2:2d:02:a7:80:38:f1:92:dc:19:2e:b2:
                    1e:75:9b:80:a7:89:92:63:98:e0:e1:e6:cc:d1:22:
                    b3:36:49:8c:39:5f:e8:24:7a:bb:ef:19:04:36:9b:
                    f1:f1:c4:66:0b:d2:ab:80:96:bb:1b:3e:ef:25:64:
                    44:1f:51:b3:68:90:ef:8c:14:75:02:45:9c:e0:07:
                    4e:74:4b:42:65:2e:5c:54:87:b2:ad:5b:ac:72:42:
                    87:4f:a6:b8:ee:c9:9c:8d:3c:a4:73:c7:c4:f8:9b:
                    a7:62:e9:b4:f4:ea:8d:d7:95:72:bc:a8:ce:16:61:
                    0c:09:93:f7:93:c5:2a:6e:18:16:f6:98:8e:a3:a1:
                    39:23:fc:c0:b9:c3:25:29:fa:c7:06:2f:77:78:9d:
                    5f:d1:a9:2c:e4:da:1c:25:74:a9:f2:38:9e:0e:fc:
                    12:b0:e4:ce:55:6d:35:2e:95:52:62:9b:7c:dd:17:
                    cb:2a:92:86:8c:eb:5c:f0:5b:bf:ab:99:ad:46:09:
                    35:1c:80:61:76:d4:20:96:0a:e9:ed:9e:c2:f5:d1:
                    69:92:95:2d:31:b7:fa:20:21:50:3e:a5:a2:82:4a:
                    4f:36:5d:f4:63:1b:c3:8a:20:95:6d:e6:ee:de:47:
                    f6:67:77:c8:bd:25:4a:f9:56:b4:a0:c2:4c:53:3c:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0A:7C:38:0C:68:D8:B4:0B:4A:00:59:36:1F:5F:80:AF:70:4A:F6
            X509v3 Authority Key Identifier:
                keyid:87:DA:44:A4:CF:83:9C:38:81:C6:BC:38:68:3C:CD:C3:08:CA:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/h9pEpM-DnDiBxrw4aDzNwwjKfOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9pEpM-DnDiBxrw4aDzNwwjKfOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D180/774287F2D6C711EFA3E1D81CC4F9AE02/C8D5160AE75E11EF97E59E40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.45.82.0/23
                  202.45.85.0/24
                  202.45.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:38:92:5b:e8:70:f9:a7:85:e9:82:68:40:f6:59:eb:9a:e9:
         af:88:0d:a0:74:e0:c0:d6:46:5f:81:58:b6:0f:dc:9e:6e:52:
         f1:00:d4:93:91:88:1b:55:8b:10:7b:1b:42:1f:d1:46:56:7a:
         4b:89:ba:8b:73:42:af:1b:64:a9:cb:0f:68:79:ba:94:26:d9:
         1e:32:10:0b:51:dd:cb:48:08:e3:5d:77:6e:cb:f5:eb:69:d6:
         a1:7d:34:87:cf:1e:e3:d2:95:66:17:20:f8:ab:59:e4:7e:39:
         f8:ea:45:a6:3e:f7:0c:d3:16:18:84:43:1b:21:4a:21:7d:58:
         cf:a0:a3:83:57:5e:c1:60:17:6c:49:bb:6b:6a:5a:4c:f3:d9:
         9b:76:8e:f2:29:9b:84:44:ed:07:61:c3:3c:4e:cc:ef:6c:19:
         01:07:40:74:27:0d:66:b0:d9:31:45:06:85:24:fc:69:44:ab:
         88:b9:d5:6d:ec:86:c2:35:18:ee:ab:53:c7:a8:32:57:87:40:
         69:a1:93:53:c7:91:b9:3e:8e:fa:07:08:91:52:2d:3f:e0:ad:
         91:67:64:a7:6d:6d:11:10:ca:d3:2e:8f:5f:8c:2b:84:19:0b:
         27:93:4d:85:3e:00:e6:46:3c:97:ea:34:98:bd:78:29:36:16:
         72:d7:88:f7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQxODAxMTAvBgNVBAUTKDg3REE0NEE0Q0Y4MzlDMzg4MUM2QkMzODY4M0NDREMz
MDhDQTdDRTkwHhcNMjUwNDA3MDY0NDQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTgxNC1lZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGeyLQKngDjxktwZLrIedZuAp4mSY5jg4ebM0SKzNkmMOV/oJHq77xkENpvx
8cRmC9KrgJa7Gz7vJWREH1GzaJDvjBR1AkWc4AdOdEtCZS5cVIeyrVusckKHT6a4
7smcjTykc8fE+JunYum09OqN15VyvKjOFmEMCZP3k8UqbhgW9piOo6E5I/zAucMl
KfrHBi93eJ1f0aks5NocJXSp8jieDvwSsOTOVW01LpVSYpt83RfLKpKGjOtc8Fu/
q5mtRgk1HIBhdtQglgrp7Z7C9dFpkpUtMbf6ICFQPqWigkpPNl30YxvDiiCVbebu
3kf2Z3fIvSVK+Va0oMJMUzw5AQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDMKfDgM
aNi0C0oAWTYfX4CvcEr2MB8GA1UdIwQYMBaAFIfaRKTPg5w4gca8OGg8zcMIynzp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDE4MC83NzQyODdGMkQ2
QzcxMUVGQTNFMUQ4MUNDNEY5QUUwMi9oOXBFcE0tRG5EaUJ4cnc0YUR6Tnd3aktm
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g5cEVwTS1EbkRpQnhydzRhRHpOd3dqS2ZPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQxODAvNzc0Mjg3RjJENkM3MTFFRkEzRTFEODFDQzRGOUFFMDIvQzhENTE2MEFF
NzVFMTFFRjk3RTU5RTQwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQByi1SAwQAyi1VAwQAyi1YMA0GCSqGSIb3DQEBCwUAA4IBAQCQOJJb
6HD5p4XpgmhA9lnrmumviA2gdODA1kZfgVi2D9yeblLxANSTkYgbVYsQextCH9FG
VnpLibqLc0KvG2Spyw9oebqUJtkeMhALUd3LSAjjXXduy/XradahfTSHzx7j0pVm
FyD4q1nkfjn46kWmPvcM0xYYhEMbIUohfVjPoKODV17BYBdsSbtralpM89mbdo7y
KZuERO0HYcM8TszvbBkBB0B0Jw1msNkxRQaFJPxpRKuIudVt7IbCNRjuq1PHqDJX
h0BpoZNTx5G5Po76BwiRUi0/4K2RZ2SnbW0REMrTLo9fjCuEGQsnk02FPgDmRjyX
6jSYvXgpNhZy14j3
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:48 2026 by rpki-client