Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/2D55F42CB0F611E5B464E359C4F9AE02.roa
File:                     2D55F42CB0F611E5B464E359C4F9AE02.roa (raw, json)
Hash identifier:          s8TTg9P3l8A2JinlhgnrgySiNnwBKzYcLgd2CwnP9lU=
Subject key identifier:   77:30:36:1B:4F:98:B7:37:F5:5D:1A:B4:0C:C0:3C:2F:A2:2A:5D:AA
Certificate issuer:       /CN=A91FC43D/serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
Certificate serial:       235D
Authority key identifier: AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/2D55F42CB0F611E5B464E359C4F9AE02.roa
Signing time:             Tue 28 Apr 2026 16:20:37 +0000
ROA not before:           Tue 28 Apr 2026 16:20:37 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     56200
IP address blocks:        203.215.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl
                          rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9053 (0x235d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC43D, serialNumber=AC8DF8B407B07B13679B71C5012BACDDE2501E71
        Validity
            Not Before: Apr 28 16:20:37 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f0de54-83ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:99:60:73:6c:19:01:38:94:ad:82:77:e0:
                    55:1b:be:7f:0b:7d:cd:42:89:1f:ff:7e:2b:ce:49:
                    c8:0f:1e:b0:7d:5b:41:bf:28:81:d0:db:c8:74:6d:
                    66:0e:b2:7c:bc:5c:d5:e0:8d:e3:ae:0e:ba:90:83:
                    aa:64:83:44:eb:97:aa:cd:a0:05:d9:c8:a8:fb:f4:
                    c2:e3:4c:a0:ae:3d:df:40:1d:4d:c4:a4:2d:7a:0f:
                    72:71:91:44:fe:ad:f0:88:93:85:70:eb:78:ad:93:
                    3e:a8:f8:d8:ea:b8:c8:48:df:b3:b6:a1:69:ca:e9:
                    1c:27:ad:97:a4:d8:44:23:b5:83:5d:d0:b0:b2:e7:
                    5c:72:82:99:e5:d4:91:af:62:18:1d:3b:d4:33:07:
                    55:32:0e:cf:84:19:bf:fa:52:e5:c8:da:7c:07:ae:
                    d4:d1:49:c7:98:39:08:60:fc:70:ee:7e:82:9e:88:
                    51:32:91:0d:7d:da:1e:8a:42:fa:7c:fd:29:1c:75:
                    e2:c8:98:19:22:bf:7c:dd:e8:66:b8:5f:36:2b:4a:
                    17:1c:01:ce:24:8c:de:e7:0d:a7:64:b8:4c:1a:5e:
                    56:bd:c6:c8:c1:a8:49:26:8f:d9:4b:e9:28:d3:65:
                    ed:78:d7:21:b4:51:7b:64:a4:bf:73:87:72:b5:08:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:30:36:1B:4F:98:B7:37:F5:5D:1A:B4:0C:C0:3C:2F:A2:2A:5D:AA
            X509v3 Authority Key Identifier:
                keyid:AC:8D:F8:B4:07:B0:7B:13:67:9B:71:C5:01:2B:AC:DD:E2:50:1E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/rI34tAewexNnm3HFASus3eJQHnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rI34tAewexNnm3HFASus3eJQHnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC43D/EDB28E7EA48011E583378886C4F9AE02/2D55F42CB0F611E5B464E359C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.215.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:af:4e:dd:10:d3:21:c2:6c:d7:6a:84:b5:5c:13:ce:09:94:
         73:ea:7c:a5:3d:0c:42:8a:6c:2a:d6:d3:37:72:2c:c9:e4:eb:
         15:e3:37:da:ae:9c:96:40:9f:5c:36:99:55:68:73:45:3c:c5:
         7f:0e:4d:66:5d:b9:31:06:f7:56:86:ca:eb:ae:c4:cc:73:92:
         93:7f:71:b3:d0:5a:9e:ed:9d:aa:0c:35:5c:24:ea:9e:14:51:
         92:68:0c:f7:c2:51:5e:9a:ee:d6:51:12:f8:39:ab:c8:d2:14:
         e0:15:21:f3:47:57:25:01:3b:95:92:a9:66:92:ce:06:e7:18:
         b0:46:1a:c1:42:4b:b9:27:21:37:6c:b1:8c:b8:c9:12:6d:3c:
         07:c8:59:ea:47:5d:74:c1:5a:85:30:17:7f:b9:35:a4:39:82:
         c4:39:40:f7:e6:12:9d:ab:47:c8:7f:26:61:b8:15:8a:2e:1d:
         9f:21:f0:31:5d:a2:41:3b:74:7e:51:75:5e:2f:a1:7e:05:0a:
         91:df:69:d1:f5:90:3d:10:92:f2:11:54:97:55:fc:99:1e:a1:
         88:88:df:5c:7a:b7:cd:20:a0:e8:ab:51:b2:1e:e6:78:23:d5:
         90:74:58:be:b0:42:88:72:20:02:67:35:86:eb:a5:ff:8b:d0:
         ce:d6:39:22
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkM0M0QxMTAvBgNVBAUTKEFDOERGOEI0MDdCMDdCMTM2NzlCNzFDNTAxMkJBQ0RE
RTI1MDFFNzEwHhcNMjYwNDI4MTYyMDM3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYwZGU1NC04M2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0XOZYHNsGQE4lK2Cd+BVG75/C33NQokf/34rzknIDx6wfVtBvyiB0NvIdG1m
DrJ8vFzV4I3jrg66kIOqZINE65eqzaAF2cio+/TC40ygrj3fQB1NxKQteg9ycZFE
/q3wiJOFcOt4rZM+qPjY6rjISN+ztqFpyukcJ62XpNhEI7WDXdCwsudccoKZ5dSR
r2IYHTvUMwdVMg7PhBm/+lLlyNp8B67U0UnHmDkIYPxw7n6CnohRMpENfdoeikL6
fP0pHHXiyJgZIr983ehmuF82K0oXHAHOJIze5w2nZLhMGl5WvcbIwahJJo/ZS+ko
02XteNchtFF7ZKS/c4dytQg36QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHcwNhtP
mLc39V0atAzAPC+iKl2qMB8GA1UdIwQYMBaAFKyN+LQHsHsTZ5txxQErrN3iUB5x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQzRC9FREIyOEU3RUE0
ODAxMUU1ODMzNzg4ODZDNEY5QUUwMi9ySTM0dEFld2V4Tm5tM0hGQVN1czNlSlFI
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JJMzR0QWV3ZXhObm0zSEZBU3VzM2VKUUhuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkM0M0QvRURCMjhFN0VBNDgwMTFFNTgzMzc4ODg2QzRGOUFFMDIvMkQ1NUY0MkNC
MEY2MTFFNUI0NjRFMzU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCy9c0MA0GCSqGSIb3DQEBCwUAA4IBAQDJr07dENMhwmzXaoS1XBPO
CZRz6nylPQxCimwq1tM3cizJ5OsV4zfarpyWQJ9cNplVaHNFPMV/Dk1mXbkxBvdW
hsrrrsTMc5KTf3Gz0Fqe7Z2qDDVcJOqeFFGSaAz3wlFemu7WURL4OavI0hTgFSHz
R1clATuVkqlmks4G5xiwRhrBQku5JyE3bLGMuMkSbTwHyFnqR110wVqFMBd/uTWk
OYLEOUD35hKdq0fIfyZhuBWKLh2fIfAxXaJBO3R+UXVeL6F+BQqR32nR9ZA9EJLy
EVSXVfyZHqGIiN9cerfNIKDoq1GyHuZ4I9WQdFi+sEKIciACZzWG66X/i9DO1jki
-----END CERTIFICATE-----
Generated at Wed May 13 07:49:09 2026 by rpki-client