Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/3F981D2E9BC611F1BF28F2DA5711F970.roa
File:                     3F981D2E9BC611F1BF28F2DA5711F970.roa (raw, json)
Hash identifier:          sKVxProcEOHvrgAV+/slNwjk7EfvxI0MK4OVX+Z8sEw=
Subject key identifier:   99:BD:8D:24:CF:48:68:18:3D:2D:EF:90:A2:1E:26:25:F3:BE:39:0D
Certificate issuer:       /CN=A91448CB/serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E
Certificate serial:       02
Authority key identifier: B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/3F981D2E9BC611F1BF28F2DA5711F970.roa
Signing time:             Wed 19 Aug 2026 12:05:20 +0000
ROA not before:           Wed 19 Aug 2026 12:05:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     14742
IP address blocks:        202.9.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl
                          rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91448CB, serialNumber=B19C324C4679D2E456834389AFFB7504EDF0971E
        Validity
            Not Before: Aug 19 12:05:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a859c00-90c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:64:cd:80:9b:a1:04:fc:a4:ed:52:b9:7a:ef:
                    8d:b7:53:68:3e:86:00:5a:75:7c:3e:02:7f:35:97:
                    ca:5e:ca:97:8b:8f:4d:00:45:a6:8e:a3:6c:d8:a1:
                    cb:c0:a7:60:85:0f:0f:78:67:6c:81:06:a5:c5:fd:
                    67:4f:81:b0:ed:cb:ea:bc:08:bf:37:fb:95:4b:cd:
                    e0:e6:90:3b:7f:3d:07:ae:fd:bc:62:43:35:21:4b:
                    f9:7c:7b:c9:fd:f9:1e:4f:a5:cf:ce:e7:5e:db:59:
                    7e:7f:90:b6:54:59:9a:35:03:d8:2a:a1:3b:0e:41:
                    87:6a:9b:4d:c8:ac:fe:55:b3:64:61:4a:28:63:fb:
                    cb:9c:4a:09:27:ad:c8:e8:43:11:fd:e5:a4:26:52:
                    a8:8e:3c:ca:f2:76:b8:76:49:51:79:98:da:d4:4e:
                    4b:dd:a2:2f:6c:09:1a:e8:91:0b:51:8d:b2:c5:71:
                    c9:d5:c3:aa:6d:fc:f5:96:67:d3:3e:fa:1c:cf:8f:
                    aa:fe:9c:c4:86:d9:ab:41:0a:44:56:d4:a5:4d:b1:
                    17:c9:7d:44:3d:fc:3e:3b:cc:d8:20:f5:26:f6:d4:
                    4f:06:e4:95:ba:48:4a:aa:44:29:f2:ab:45:fc:d5:
                    2a:27:c6:37:e0:37:35:19:7d:0f:3f:31:6e:ff:83:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BD:8D:24:CF:48:68:18:3D:2D:EF:90:A2:1E:26:25:F3:BE:39:0D
            X509v3 Authority Key Identifier:
                keyid:B1:9C:32:4C:46:79:D2:E4:56:83:43:89:AF:FB:75:04:ED:F0:97:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/sZwyTEZ50uRWg0OJr_t1BO3wlx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZwyTEZ50uRWg0OJr_t1BO3wlx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/DC56DEBC9BC511F18FE0376C5711F970/3F981D2E9BC611F1BF28F2DA5711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:fc:83:b8:6c:08:09:6a:72:a8:ce:1e:d6:3f:ea:a8:80:4d:
         1e:b6:c4:2c:5b:82:cc:41:8d:c1:bd:94:73:82:e7:58:7e:41:
         db:17:6c:20:08:1d:64:03:35:82:7e:c4:09:6d:12:6a:2a:c1:
         a2:66:bd:b2:b5:05:20:d9:0f:d2:c3:46:11:c6:1c:c9:89:57:
         dc:2c:d5:1c:c4:0d:87:01:9f:52:d9:52:c5:6d:db:35:7a:06:
         e3:cb:d7:fa:b5:1d:39:9d:68:80:fb:10:1d:c5:2f:9d:ae:79:
         8f:89:a1:fc:09:6b:4c:1b:64:5d:cc:62:56:c9:8e:fd:5e:06:
         33:16:bb:b7:76:10:00:b0:52:76:c8:59:21:a1:38:e1:d3:57:
         6a:12:36:4f:7f:02:98:01:3a:67:16:65:7a:a1:8d:2d:96:18:
         d3:19:3e:3d:bf:4f:06:6c:d2:46:e5:5d:90:fd:1c:7b:4c:d1:
         f3:d7:54:a5:4f:e4:a8:19:b4:b9:ee:3d:19:d4:cf:82:96:67:
         af:7c:63:1c:0d:9f:91:3e:4b:13:ad:d5:b5:48:20:b5:78:5a:
         a8:2b:b9:46:4a:7e:96:ba:ac:90:09:60:07:87:ba:0c:00:b9:
         76:46:41:e3:6c:e6:14:18:db:7b:fc:dd:d5:ce:cc:88:43:a4:
         1f:ea:76:54
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NDhDQjExMC8GA1UEBRMoQjE5QzMyNEM0Njc5RDJFNDU2ODM0Mzg5QUZGQjc1MDRF
REYwOTcxRTAeFw0yNjA4MTkxMjA1MjBaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhODU5YzAwLTkwYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXZM2Am6EE/KTtUrl67423U2g+hgBadXw+An81l8peypeLj00ARaaOo2zYocvA
p2CFDw94Z2yBBqXF/WdPgbDty+q8CL83+5VLzeDmkDt/PQeu/bxiQzUhS/l8e8n9
+R5Ppc/O517bWX5/kLZUWZo1A9gqoTsOQYdqm03IrP5Vs2RhSihj+8ucSgknrcjo
QxH95aQmUqiOPMrydrh2SVF5mNrUTkvdoi9sCRrokQtRjbLFccnVw6pt/PWWZ9M+
+hzPj6r+nMSG2atBCkRW1KVNsRfJfUQ9/D47zNgg9Sb21E8G5JW6SEqqRCnyq0X8
1SonxjfgNzUZfQ8/MW7/g1plAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUmb2NJM9I
aBg9Le+Qoh4mJfO+OQ0wHwYDVR0jBBgwFoAUsZwyTEZ50uRWg0OJr/t1BO3wlx4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0OENCL0RDNTZERUJDOUJD
NTExRjE4RkUwMzc2QzU3MTFGOTcwL3Nad3lURVo1MHVSV2cwT0pyX3QxQk8zd2x4
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc1p3eVRFWjUwdVJXZzBPSnJfdDFCTzN3bHg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDhDQi9EQzU2REVCQzlCQzUxMUYxOEZFMDM3NkM1NzExRjk3MC8zRjk4MUQyRTlC
QzYxMUYxQkYyOEYyREE1NzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADKCTIwDQYJKoZIhvcNAQELBQADggEBAHb8g7hsCAlqcqjOHtY/6qiA
TR62xCxbgsxBjcG9lHOC51h+QdsXbCAIHWQDNYJ+xAltEmoqwaJmvbK1BSDZD9LD
RhHGHMmJV9ws1RzEDYcBn1LZUsVt2zV6BuPL1/q1HTmdaID7EB3FL52ueY+JofwJ
a0wbZF3MYlbJjv1eBjMWu7d2EACwUnbIWSGhOOHTV2oSNk9/ApgBOmcWZXqhjS2W
GNMZPj2/TwZs0kblXZD9HHtM0fPXVKVP5KgZtLnuPRnUz4KWZ698YxwNn5E+SxOt
1bVIILV4WqgruUZKfpa6rJAJYAeHugwAuXZGQeNs5hQY23v83dXOzIhDpB/qdlQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:46:16 2026 by rpki-client