Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa
File:                     DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (raw, json)
Hash identifier:          TqrO1YIuqGOZfHc1Ju3tsrCSx7qYr00Z9p4jjo73kAg=
Subject key identifier:   11:B2:34:E7:0E:9C:02:51:D1:0B:FA:71:57:05:B1:9D:EB:9F:8D:B0
Certificate issuer:       /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22
Certificate serial:       068C
Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:48:54 +0000
ROA not before:           Sat 06 Sep 2025 23:03:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        203.30.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl
                          rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 22:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22
        Validity
            Not Before: Sep  6 23:03:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a40b86-03b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:e6:32:c9:72:cc:72:4d:de:c5:4b:82:0a:
                    d0:3b:2b:c4:4b:c3:7b:fc:88:c9:b0:e0:27:38:5a:
                    ec:fd:39:0e:a0:2a:d0:57:81:68:83:07:be:27:05:
                    68:2c:4a:5c:bb:90:62:7b:7e:81:10:08:98:6b:ab:
                    1e:c8:f1:af:85:3b:9b:31:08:91:e9:56:6a:f6:f1:
                    61:75:ed:96:7e:02:14:04:f4:e4:f1:5f:53:99:2f:
                    01:25:f4:d8:e2:dd:c7:ba:21:6c:28:54:d2:e4:f7:
                    16:1b:6f:b6:00:16:96:81:14:62:38:0c:42:02:1c:
                    f0:f0:80:ca:c9:c1:4e:be:fb:b2:04:d0:41:c1:be:
                    6e:44:1f:3f:17:51:8c:41:dd:9c:9b:3e:30:dc:df:
                    97:e6:a3:23:17:59:7b:0c:49:f9:ab:9f:a6:d9:4c:
                    1c:cd:93:8c:7a:bb:ca:fc:b9:91:f5:9b:d3:50:3a:
                    98:00:04:e0:1f:85:54:9c:43:f0:ff:55:04:31:91:
                    d8:84:12:3d:f5:5f:2a:f5:40:7e:09:8c:54:d9:5f:
                    ad:8f:d8:35:d9:be:af:99:99:e5:43:60:a1:9f:53:
                    2f:cf:2b:47:05:35:83:a3:40:1c:51:e0:f2:f4:18:
                    ec:22:04:b0:78:5a:ec:c9:84:e1:b0:97:e6:f8:43:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:34:E7:0E:9C:02:51:D1:0B:FA:71:57:05:B1:9D:EB:9F:8D:B0
            X509v3 Authority Key Identifier:
                keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d4:71:c4:6c:a2:ac:61:a7:68:5e:b0:f9:18:2f:13:2f:08:
         69:c4:9c:7d:05:ec:7d:89:e0:65:e7:54:47:3f:c3:60:15:24:
         78:74:54:00:9d:3f:0a:0c:2a:5b:cb:75:9b:07:11:c5:2d:24:
         c8:d0:43:be:69:df:8f:cf:6b:3a:2f:ed:8c:96:83:0b:b4:b7:
         3f:3f:f1:89:fd:f3:23:01:62:d0:5f:5d:37:f4:1e:a2:2b:a8:
         73:39:1e:3e:97:e7:47:29:46:94:fa:69:fa:fc:f5:b7:2c:24:
         c6:c8:77:88:e3:ef:7f:97:dc:5e:dc:5d:9a:45:6a:81:ac:4a:
         c5:ef:66:ac:e8:6d:ce:b4:fb:8e:7b:29:ec:a6:90:95:e9:67:
         2a:01:a3:07:ca:d4:08:db:47:57:07:fd:ee:a4:41:f0:5e:5c:
         9a:ea:15:fd:9d:19:76:fe:45:98:74:34:ac:36:7e:6c:ca:cb:
         74:61:5d:33:7e:93:82:9d:71:3f:6a:c4:7b:af:16:a1:0d:21:
         68:2f:b3:31:4e:ce:bc:2e:d2:68:f6:21:86:a1:ca:f1:f3:91:
         8f:d0:bb:dc:aa:f4:1e:87:01:df:00:0e:c0:04:c7:28:d2:e3:
         ba:05:50:3f:9b:61:73:6f:65:a4:bc:92:4a:27:eb:62:9d:05:
         91:23:07:fc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5
MTE4OUZBMjIwHhcNMjUwOTA2MjMwMzQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGI4Ni0wM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKHmMslyzHJN3sVLggrQOyvES8N7/IjJsOAnOFrs/TkOoCrQV4Fogwe+JwVo
LEpcu5Bie36BEAiYa6seyPGvhTubMQiR6VZq9vFhde2WfgIUBPTk8V9TmS8BJfTY
4t3HuiFsKFTS5PcWG2+2ABaWgRRiOAxCAhzw8IDKycFOvvuyBNBBwb5uRB8/F1GM
Qd2cmz4w3N+X5qMjF1l7DEn5q5+m2UwczZOMervK/LmR9ZvTUDqYAATgH4VUnEPw
/1UEMZHYhBI99V8q9UB+CYxU2V+tj9g12b6vmZnlQ2Chn1MvzytHBTWDo0AcUeDy
9BjsIgSweFrsyYThsJfm+EMqHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBGyNOcO
nAJR0Qv6cVcFsZ3rn42wMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD
NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTAwMDkvQ0M4MTAxMjBBQzZBMTFFQkE1NEFGODdBQzRGOUFFMDIvRERFRjc1MzRB
QzZDMTFFQkI2QjFFMTdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyx4YMA0GCSqGSIb3DQEBCwUAA4IBAQBR1HHEbKKsYadoXrD5GC8T
LwhpxJx9Bex9ieBl51RHP8NgFSR4dFQAnT8KDCpby3WbBxHFLSTI0EO+ad+Pz2s6
L+2MloMLtLc/P/GJ/fMjAWLQX1039B6iK6hzOR4+l+dHKUaU+mn6/PW3LCTGyHeI
4+9/l9xe3F2aRWqBrErF72as6G3OtPuOeynsppCV6WcqAaMHytQI20dXB/3upEHw
Xlya6hX9nRl2/kWYdDSsNn5syst0YV0zfpOCnXE/asR7rxahDSFoL7MxTs68LtJo
9iGGocrx85GP0LvcqvQehwHfAA7ABMco0uO6BVA/m2Fzb2WkvJJKJ+tinQWRIwf8
-----END CERTIFICATE-----
Generated at Sun Mar 8 00:04:31 2026 by rpki-client