Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/9DE187FA2A8211F08575E277C4F9AE02.roa
File:                     9DE187FA2A8211F08575E277C4F9AE02.roa (raw, json)
Hash identifier:          XOz44GxKH9RUxphnLQGSg14r7883QyXPCV8YI6CNByI=
Subject key identifier:   E1:0D:7B:2F:3E:8C:12:72:28:20:1C:83:DA:67:37:8F:E6:94:14:30
Certificate issuer:       /CN=A91EA449/serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
Certificate serial:       016C
Authority key identifier: 6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/9DE187FA2A8211F08575E277C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:10:41 +0000
ROA not before:           Tue 03 Jun 2025 06:04:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        203.21.95.0/24 maxlen: 24
                          203.27.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA449, serialNumber=6F65A0C92260B1ADA23187B29BAC3BEADAC05661
        Validity
            Not Before: Jun  3 06:04:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5a871-0475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:16:7c:6b:9b:09:aa:08:ca:b6:3b:4d:3f:
                    a0:1b:96:60:ce:4b:6d:5e:9d:bf:64:22:d3:1b:13:
                    22:41:bd:4a:e1:9e:1a:c5:16:e0:6a:96:34:40:36:
                    68:65:c2:f0:84:dd:30:f0:04:0c:d0:fb:13:f3:d2:
                    37:36:89:26:28:71:38:12:23:fa:9c:07:a3:5c:32:
                    d7:91:b4:ae:a8:41:24:4d:21:f6:7b:25:9f:cb:91:
                    10:f9:54:1e:02:fa:d0:0d:3f:fe:e8:5f:06:5b:5e:
                    fc:76:39:59:3c:75:b3:bc:dc:b4:08:c0:d0:2f:cd:
                    5e:ba:1d:65:05:1d:a1:f8:99:2e:e2:b7:45:0c:ad:
                    a4:59:27:fb:7c:3d:36:68:ea:8f:96:d4:a0:51:d6:
                    00:75:bf:92:e0:3c:f9:25:96:02:66:9d:8b:61:f6:
                    dd:7b:50:55:f7:71:5c:6c:2c:98:fa:d0:b1:e0:df:
                    98:59:2d:6c:e5:96:a3:c2:e8:d1:5c:2e:e0:f4:8d:
                    59:6c:19:a0:5d:bb:94:03:08:bf:a4:c0:af:6a:6f:
                    d0:39:44:6f:77:64:15:5e:8c:8d:0b:83:6f:86:f9:
                    98:46:32:89:ed:f8:95:d9:c1:27:8a:ae:8a:5f:6c:
                    45:f8:06:25:ad:db:83:bb:a9:9a:5b:56:f4:8b:9f:
                    dd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0D:7B:2F:3E:8C:12:72:28:20:1C:83:DA:67:37:8F:E6:94:14:30
            X509v3 Authority Key Identifier:
                keyid:6F:65:A0:C9:22:60:B1:AD:A2:31:87:B2:9B:AC:3B:EA:DA:C0:56:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/b2WgySJgsa2iMYeym6w76trAVmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2WgySJgsa2iMYeym6w76trAVmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA449/401790FC073C11EF8D1DB056C4F9AE02/9DE187FA2A8211F08575E277C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.95.0/24
                  203.27.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d1:a3:eb:c3:ee:aa:7c:c7:f2:12:e6:9a:2e:90:2d:e2:b8:
         c1:66:77:20:c6:d2:ca:ff:ea:51:d7:7c:1d:62:61:14:ed:3c:
         a8:ca:42:be:c0:55:f6:e7:c4:a2:39:89:19:72:ad:8e:67:48:
         54:15:75:6a:cc:8a:df:57:1d:31:f0:ab:da:c9:a8:28:d7:ac:
         12:c5:08:e5:a5:2d:00:f4:1d:69:12:27:62:57:78:64:24:3c:
         ca:ee:a0:17:65:9a:99:5e:45:fe:e6:83:ac:83:3c:07:f8:63:
         61:d8:f6:5d:c4:d2:eb:0d:4c:42:69:ba:21:86:7a:75:ea:e8:
         e6:be:e2:26:63:42:63:13:01:e8:4e:0c:77:c5:aa:c1:c0:df:
         ae:1d:4d:95:71:41:ce:41:5d:c5:b0:66:6e:09:4e:c0:fa:d6:
         9d:27:a1:8f:c6:5f:14:e4:32:dd:d6:1a:39:94:d4:b7:4d:2a:
         12:ca:1f:ef:8a:27:19:ad:be:34:dd:e5:65:3f:19:35:a6:9a:
         8a:97:4a:3a:6d:29:82:07:c9:31:48:06:bb:b2:0b:f2:8b:dd:
         71:70:ef:96:0f:40:f4:1b:8b:ca:99:d2:c5:95:fc:45:90:3a:
         a5:ac:38:b0:38:55:5e:04:f6:6f:a4:af:4a:2a:ef:1c:2f:fc:
         42:93:53:30
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE0NDkxMTAvBgNVBAUTKDZGNjVBMEM5MjI2MEIxQURBMjMxODdCMjlCQUMzQkVB
REFDMDU2NjEwHhcNMjUwNjAzMDYwNDQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTg3MS0wNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZkWfGubCaoIyrY7TT+gG5ZgzkttXp2/ZCLTGxMiQb1K4Z4axRbgapY0QDZo
ZcLwhN0w8AQM0PsT89I3NokmKHE4EiP6nAejXDLXkbSuqEEkTSH2eyWfy5EQ+VQe
AvrQDT/+6F8GW178djlZPHWzvNy0CMDQL81euh1lBR2h+Jku4rdFDK2kWSf7fD02
aOqPltSgUdYAdb+S4Dz5JZYCZp2LYfbde1BV93FcbCyY+tCx4N+YWS1s5ZajwujR
XC7g9I1ZbBmgXbuUAwi/pMCvam/QOURvd2QVXoyNC4NvhvmYRjKJ7fiV2cEniq6K
X2xF+AYlrduDu6maW1b0i5/d+QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOENey8+
jBJyKCAcg9pnN4/mlBQwMB8GA1UdIwQYMBaAFG9loMkiYLGtojGHspusO+rawFZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTQ0OS80MDE3OTBGQzA3
M0MxMUVGOEQxREIwNTZDNEY5QUUwMi9iMldneVNKZ3NhMmlNWWV5bTZ3NzZ0ckFW
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2IyV2d5U0pnc2EyaU1ZZXltNnc3NnRyQVZtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE0NDkvNDAxNzkwRkMwNzNDMTFFRjhEMURCMDU2QzRGOUFFMDIvOURFMTg3RkEy
QTgyMTFGMDg1NzVFMjc3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAyxVfAwQAyxtGMA0GCSqGSIb3DQEBCwUAA4IBAQCH0aPrw+6qfMfy
EuaaLpAt4rjBZncgxtLK/+pR13wdYmEU7TyoykK+wFX258SiOYkZcq2OZ0hUFXVq
zIrfVx0x8Kvayago16wSxQjlpS0A9B1pEidiV3hkJDzK7qAXZZqZXkX+5oOsgzwH
+GNh2PZdxNLrDUxCabohhnp16ujmvuImY0JjEwHoTgx3xarBwN+uHU2VcUHOQV3F
sGZuCU7A+tadJ6GPxl8U5DLd1ho5lNS3TSoSyh/viicZrb403eVlPxk1ppqKl0o6
bSmCB8kxSAa7sgvyi91xcO+WD0D0G4vKmdLFlfxFkDqlrDiwOFVeBPZvpK9KKu8c
L/xCk1Mw
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:51 2026 by rpki-client