Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/BD4E85B09E6311ECA6EC8071C4F9AE02.roa
File:                     BD4E85B09E6311ECA6EC8071C4F9AE02.roa (raw, json)
Hash identifier:          7BVtLLotMLGpAMIjNPPakQoOlPGO61uSEIii5dgYdzo=
Subject key identifier:   9A:AF:41:6E:3A:ED:DD:1E:78:8F:94:EF:C3:A5:6B:27:1D:5C:B3:42
Certificate issuer:       /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial:       05E2
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/BD4E85B09E6311ECA6EC8071C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:22:37 +0000
ROA not before:           Fri 02 Jan 2026 23:19:19 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     25369
IP address blocks:        202.43.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
        Validity
            Not Before: Jan  2 23:19:19 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a483ed-88e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:56:bd:24:90:06:6d:d9:6e:3f:7c:d4:49:b4:
                    3d:31:38:f4:6a:a0:b0:68:6e:6e:f8:d9:54:12:50:
                    06:6b:cf:25:8f:5c:0b:1c:61:1e:65:42:9a:ee:ec:
                    ea:bc:45:7a:79:aa:c9:bf:ea:7d:c7:75:09:8f:1c:
                    ac:1b:2f:3c:1a:97:51:53:92:ca:41:fd:85:c8:97:
                    d8:09:9b:f0:b1:10:3c:39:46:b7:69:2c:29:49:96:
                    3f:fe:c7:30:0d:6f:86:b8:76:e0:d2:69:84:3d:21:
                    11:e6:ac:e9:c3:93:f0:c6:4d:07:c2:77:5d:0a:de:
                    aa:f4:8b:ca:ca:ea:2d:30:55:0e:c0:a4:0a:8a:1e:
                    76:57:7d:58:dd:84:d6:70:b0:69:ea:0e:19:15:da:
                    cb:e0:0a:e9:94:78:89:f2:9b:e4:65:ec:15:62:e6:
                    b7:2e:91:d4:5b:3d:4b:67:e7:92:e5:92:73:22:dd:
                    f7:77:1b:ee:a1:ed:c8:8a:cd:24:bd:33:2b:48:8a:
                    ac:d4:36:3e:29:e3:ec:1d:9d:98:76:0f:1a:c0:87:
                    3b:07:69:eb:74:9a:1a:2e:57:09:69:77:e3:68:20:
                    53:82:4f:a7:63:7a:78:2e:e8:6b:9f:b5:06:88:b8:
                    a6:bd:5c:f5:b0:04:60:af:4f:fb:be:f5:c6:77:67:
                    c0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AF:41:6E:3A:ED:DD:1E:78:8F:94:EF:C3:A5:6B:27:1D:5C:B3:42
            X509v3 Authority Key Identifier:
                keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/BD4E85B09E6311ECA6EC8071C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:56:e2:9e:84:a6:76:35:f7:c0:00:ef:da:a5:f8:f0:0d:7a:
         f4:65:82:4c:20:aa:7b:09:b7:17:5a:70:7e:9e:41:ce:93:55:
         20:6a:0a:c4:e5:3c:fa:fd:19:92:2f:54:41:df:c2:3c:7e:0a:
         39:f6:de:3c:57:6a:99:fe:b9:29:a5:16:cc:bc:ae:ef:62:89:
         17:69:e7:36:99:46:64:53:b5:8d:39:79:c1:07:33:60:a1:07:
         47:80:fb:1e:f9:1b:60:80:04:30:b0:bc:d7:12:24:43:ab:c4:
         f0:8d:ff:98:4f:25:e8:2f:8c:70:e2:2c:71:bc:c1:ce:e2:e7:
         6f:00:5a:66:c8:e1:db:ae:ab:40:30:6b:7a:67:11:35:48:76:
         c4:4d:fc:f3:96:5a:ce:13:a9:8f:3f:0f:db:91:d1:a9:dd:c5:
         b8:7a:ae:ca:d6:e1:d6:d0:1e:ca:e5:4b:6a:5b:cd:f7:cd:ed:
         39:f9:d0:57:9f:f0:d2:c0:5e:26:77:7a:96:db:49:bd:d7:c1:
         6d:d7:27:76:db:ec:b3:ce:2b:00:1d:98:d0:2c:cf:15:4f:a8:
         b7:16:2d:fe:fc:4a:ee:44:7c:a8:72:d2:27:f3:10:28:da:56:
         54:ec:dc:03:e7:df:10:d8:0a:e3:fd:40:aa:56:7a:46:ca:94:
         db:ff:d6:5c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy
MEM4RkQ1N0IwHhcNMjYwMTAyMjMxOTE5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODNlZC04OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8la9JJAGbdluP3zUSbQ9MTj0aqCwaG5u+NlUElAGa88lj1wLHGEeZUKa7uzq
vEV6earJv+p9x3UJjxysGy88GpdRU5LKQf2FyJfYCZvwsRA8OUa3aSwpSZY//scw
DW+GuHbg0mmEPSER5qzpw5Pwxk0HwnddCt6q9IvKyuotMFUOwKQKih52V31Y3YTW
cLBp6g4ZFdrL4ArplHiJ8pvkZewVYua3LpHUWz1LZ+eS5ZJzIt33dxvuoe3Iis0k
vTMrSIqs1DY+KePsHZ2Ydg8awIc7B2nrdJoaLlcJaXfjaCBTgk+nY3p4Luhrn7UG
iLimvVz1sARgr0/7vvXGd2fAPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJqvQW46
7d0eeI+U78OlaycdXLNCMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2
MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUNENzIvNDU3NkE2NzIyNjEyMTFFQ0I5MzE5OTQyQzRGOUFFMDIvQkQ0RTg1QjA5
RTYzMTFFQ0E2RUM4MDcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyisGMA0GCSqGSIb3DQEBCwUAA4IBAQBhVuKehKZ2NffAAO/apfjw
DXr0ZYJMIKp7CbcXWnB+nkHOk1UgagrE5Tz6/RmSL1RB38I8fgo59t48V2qZ/rkp
pRbMvK7vYokXaec2mUZkU7WNOXnBBzNgoQdHgPse+RtggAQwsLzXEiRDq8Twjf+Y
TyXoL4xw4ixxvMHO4udvAFpmyOHbrqtAMGt6ZxE1SHbETfzzllrOE6mPPw/bkdGp
3cW4eq7K1uHW0B7K5UtqW833ze05+dBXn/DSwF4md3qW20m918Ft1yd22+yzzisA
HZjQLM8VT6i3Fi3+/EruRHyoctIn8xAo2lZU7NwD598Q2Arj/UCqVnpGypTb/9Zc
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:50 2026 by rpki-client