Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/70783ACCAF3411E99DF2F83EC4F9AE02.roa
File:                     70783ACCAF3411E99DF2F83EC4F9AE02.roa (raw, json)
Hash identifier:          DHxldtdjduA648dGXzIE2fHUrQfhYKmCz8+1dqRlVIc=
Subject key identifier:   9F:60:65:15:A0:8F:0A:FF:AE:29:5F:62:C2:1D:D3:A9:74:71:9A:DA
Certificate issuer:       /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2
Certificate serial:       0E8E
Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/70783ACCAF3411E99DF2F83EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:37:03 +0000
ROA not before:           Wed 18 Jun 2025 18:21:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134099
IP address blocks:        202.36.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl
                          rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3726 (0xe8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2
        Validity
            Not Before: Jun 18 18:21:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a424df-56fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:82:e0:f2:c9:3c:a1:d7:05:af:0a:f6:82:
                    d3:5b:7f:d5:1d:20:26:ba:c4:7b:d5:4c:03:ab:f5:
                    3a:47:7a:a6:fd:a7:96:be:72:ee:bd:be:17:e3:25:
                    a5:7b:6e:6c:9a:30:05:21:f2:29:4e:9b:e5:2f:8c:
                    b1:26:c1:7c:7f:9c:c2:03:e2:8f:98:d9:84:f5:76:
                    05:05:65:40:48:18:2a:c5:a7:96:d5:00:32:8e:61:
                    b1:83:9e:38:9e:fc:ed:f1:d9:0b:c3:47:86:ed:49:
                    a3:b2:da:a2:00:7a:37:ab:10:73:df:6a:9c:0b:89:
                    42:c2:b0:9a:9b:c8:5f:e7:f4:6d:a5:98:0f:6f:4f:
                    f1:ab:4e:c3:87:37:54:dc:8a:69:2b:f7:7e:a2:32:
                    50:1a:34:dc:74:6e:29:16:fc:ac:95:f1:c4:09:a2:
                    8f:77:c8:81:12:ed:e3:4f:36:5c:23:f1:ce:4b:a6:
                    22:06:c6:93:6d:69:07:b7:90:02:e9:df:5f:b5:f8:
                    8f:81:b5:1d:88:94:72:43:03:83:5f:2c:2c:97:43:
                    fa:f9:a5:f1:fc:3d:67:f6:ee:a4:7e:a9:26:3e:99:
                    0f:49:51:fa:58:7b:6c:4b:13:79:3c:bc:cc:63:bf:
                    34:4e:3f:9f:3f:c9:c0:61:41:f3:ba:dc:60:ec:5a:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:60:65:15:A0:8F:0A:FF:AE:29:5F:62:C2:1D:D3:A9:74:71:9A:DA
            X509v3 Authority Key Identifier:
                keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/70783ACCAF3411E99DF2F83EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:b4:2b:b5:87:48:95:f1:ae:b2:de:be:5b:a7:48:7f:b6:
         76:70:08:3d:bf:c3:70:4c:4f:8a:bf:be:01:24:3c:f5:ba:d3:
         06:c9:b4:db:28:c9:43:cb:d1:57:bf:5c:40:e0:38:30:5d:26:
         83:7b:42:16:d2:69:38:b2:a0:09:d3:b4:d0:27:fb:36:c8:a3:
         95:90:ad:b3:17:8f:ec:81:8d:62:8e:3a:7d:70:2c:4f:9c:48:
         38:f6:1d:f4:31:7d:ba:e6:c9:91:43:0d:ff:dd:43:bf:41:99:
         53:3e:34:7e:11:64:62:a0:3c:f3:d8:21:ef:67:8f:0f:40:87:
         cc:01:29:cf:7d:9e:dd:34:88:f3:be:11:a7:41:63:ef:e7:b4:
         e9:05:f0:62:93:97:0b:2b:de:31:33:7a:7b:a1:67:86:7d:16:
         75:bc:66:a1:fe:ef:ae:da:96:73:cc:1c:f2:93:af:15:13:90:
         51:8c:b9:8b:48:49:fb:d4:3f:d9:50:dd:be:2e:42:07:0e:ae:
         da:12:fb:2e:d9:84:33:67:03:4e:f9:e6:e4:87:a3:31:f7:53:
         16:f8:88:50:e7:8b:c9:98:e0:78:74:71:18:0e:b5:18:7f:67:
         48:90:35:c6:bb:7f:84:75:e6:a7:74:fc:1c:fc:3c:0f:ac:3c:
         f3:74:9e:59
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc3RkMxMTAvBgNVBAUTKEFCQTRDMzk0QzhCOUJEMTUxQjNCMzg5NjM5QjhDNkZG
ODA3MDQ5RjIwHhcNMjUwNjE4MTgyMTE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjRkZi01NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq4qC4PLJPKHXBa8K9oLTW3/VHSAmusR71UwDq/U6R3qm/aeWvnLuvb4X4yWl
e25smjAFIfIpTpvlL4yxJsF8f5zCA+KPmNmE9XYFBWVASBgqxaeW1QAyjmGxg544
nvzt8dkLw0eG7UmjstqiAHo3qxBz32qcC4lCwrCam8hf5/RtpZgPb0/xq07DhzdU
3IppK/d+ojJQGjTcdG4pFvyslfHECaKPd8iBEu3jTzZcI/HOS6YiBsaTbWkHt5AC
6d9ftfiPgbUdiJRyQwODXywsl0P6+aXx/D1n9u6kfqkmPpkPSVH6WHtsSxN5PLzM
Y780Tj+fP8nAYUHzutxg7FrynwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ9gZRWg
jwr/rilfYsId06l0cZraMB8GA1UdIwQYMBaAFKukw5TIub0VGzs4ljm4xv+AcEny
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzdGQy9GRUQ5MDE1NkFG
MzAxMUU5QUVFMTNFMzRDNEY5QUUwMi9xNlREbE1pNXZSVWJPemlXT2JqR180QndT
ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E2VERsTWk1dlJVYk96aVdPYmpHXzRCd1NmSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjc3RkMvRkVEOTAxNTZBRjMwMTFFOUFFRTEzRTM0QzRGOUFFMDIvNzA3ODNBQ0NB
RjM0MTFFOTlERjJGODNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyiQvMA0GCSqGSIb3DQEBCwUAA4IBAQAc9bQrtYdIlfGust6+W6dI
f7Z2cAg9v8NwTE+Kv74BJDz1utMGybTbKMlDy9FXv1xA4DgwXSaDe0IW0mk4sqAJ
07TQJ/s2yKOVkK2zF4/sgY1ijjp9cCxPnEg49h30MX265smRQw3/3UO/QZlTPjR+
EWRioDzz2CHvZ48PQIfMASnPfZ7dNIjzvhGnQWPv57TpBfBik5cLK94xM3p7oWeG
fRZ1vGah/u+u2pZzzBzyk68VE5BRjLmLSEn71D/ZUN2+LkIHDq7aEvsu2YQzZwNO
+ebkh6Mx91MW+IhQ54vJmOB4dHEYDrUYf2dIkDXGu3+EdeandPwc/DwPrDzzdJ5Z
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:07 2026 by rpki-client