Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/84B9D0540E9711EB9A6C2B3CC4F9AE02.roa
File:                     84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          BmuzrhT/hd6OEuIxeUFgnn3z+wS1dKGLwfT6dDIUDh8=
Subject key identifier:   04:25:07:46:A5:73:07:53:CE:78:DB:09:CD:D3:CC:C6:75:55:31:76
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       088C
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/84B9D0540E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Thu 02 Apr 2026 21:27:44 +0000
ROA not before:           Thu 02 Apr 2026 21:27:44 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45209
IP address blocks:        202.92.144.0/22 maxlen: 22
                          2400:b000:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr  2 21:27:44 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=69cedf50-542a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:ef:53:5d:4d:59:91:75:e5:b2:a9:6b:fc:
                    ca:42:4d:2c:4d:c0:23:28:61:84:83:d3:d8:ee:ae:
                    89:5f:ec:10:bf:07:29:f6:cc:60:e0:09:00:c9:fe:
                    45:29:aa:e4:df:36:15:f5:e6:77:53:98:c6:e2:b0:
                    75:e1:d6:7b:c1:7d:78:fc:f9:a6:b3:f8:ac:62:bb:
                    e0:b4:44:25:4d:c6:78:83:c8:0e:07:d7:87:07:cf:
                    d1:bd:5f:4e:40:74:2b:0e:3d:f9:58:0a:10:7d:0b:
                    2b:17:5b:73:c3:8b:b3:2d:a2:bd:d1:c6:11:7f:9f:
                    01:9d:ea:3a:93:41:b2:da:ab:c5:ea:68:a9:d7:23:
                    7b:02:58:5d:5f:62:f3:18:c0:e2:fc:80:67:de:e5:
                    c6:8c:8a:bc:75:c9:ac:e5:96:c1:27:19:aa:53:01:
                    92:21:f5:b9:0b:23:bf:57:6c:d3:73:8f:66:3b:f2:
                    02:16:df:47:1d:79:60:10:19:83:89:8c:64:f0:39:
                    a7:d5:35:9b:88:8f:55:b4:c1:1e:da:c0:a9:6e:86:
                    ec:7f:49:be:d6:6e:46:2e:63:c7:35:02:d5:1e:f8:
                    2b:2b:37:ca:f6:f6:39:f0:6c:c7:90:ab:6d:b2:a8:
                    b6:21:85:06:95:c5:9e:03:bd:02:a0:a8:38:8c:cf:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:25:07:46:A5:73:07:53:CE:78:DB:09:CD:D3:CC:C6:75:55:31:76
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/84B9D0540E9711EB9A6C2B3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.144.0/22
                IPv6:
                  2400:b000:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:ac:bf:de:ea:e9:13:e5:54:88:79:b7:98:61:a8:6c:12:ea:
         61:c5:c3:3f:07:97:23:b9:e5:b6:68:ba:02:50:78:30:aa:97:
         13:79:02:f7:87:76:57:82:73:53:86:69:5e:a0:15:4d:05:ff:
         bf:10:b0:e0:9e:88:5e:f7:a0:b0:dc:2d:65:86:e7:28:36:5b:
         45:8f:2f:ca:9b:32:b4:b1:6c:49:3f:15:fa:e7:b0:71:ca:43:
         63:af:ce:da:3d:12:a2:a5:3a:53:52:17:18:5c:47:34:e5:56:
         1c:b6:a1:f6:0d:fe:c7:89:84:2c:f5:c6:ca:da:6e:3e:28:92:
         42:c8:61:ae:c7:d8:bc:3c:e3:05:50:b5:6f:ab:6c:a3:a1:39:
         21:63:0c:01:e9:f1:33:f1:db:a1:7d:d8:05:6a:1d:d0:0d:07:
         e3:ce:5b:86:03:2e:f6:b5:3f:a3:56:1b:a4:43:b0:a1:e9:96:
         69:8f:6a:50:8d:e3:0d:67:3d:94:ba:e1:44:80:67:48:89:ec:
         82:84:ca:52:bf:d6:ad:80:0c:52:02:d1:53:57:59:ab:8b:fd:
         38:04:5c:05:19:9f:55:df:18:22:25:16:45:3d:92:d3:37:ba:
         d5:99:93:bb:8d:ae:7b:fc:3a:61:db:14:db:5a:da:50:c3:e2:
         f2:c2:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:28:00 2026 by rpki-client