Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/C3876BD8589D11EC9CF19A41C4F9AE02.roa
File:                     C3876BD8589D11EC9CF19A41C4F9AE02.roa (raw, json)
Hash identifier:          er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=
Subject key identifier:   5B:1B:1B:CF:18:1A:16:8E:8F:D4:81:A8:01:57:F2:71:66:F8:87:A6
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       29A2
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/C3876BD8589D11EC9CF19A41C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:41:10 +0000
ROA not before:           Sat 20 Dec 2025 16:12:55 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        202.84.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10658 (0x29a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Dec 20 16:12:55 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46c26-a920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:ca:a1:c5:80:6b:bc:b9:7d:5c:3b:a4:5b:
                    84:a4:0e:87:3a:67:5c:77:ed:de:b2:03:d2:6d:1e:
                    28:a4:33:cb:ed:d4:1d:7c:25:ea:27:b0:3b:ff:fb:
                    35:50:81:46:9c:22:ba:23:89:47:d1:2e:d8:59:13:
                    63:a6:ab:73:25:8f:d2:db:2a:e3:62:fe:17:34:06:
                    6d:20:63:30:09:9d:90:21:6a:30:e8:f1:4e:1a:17:
                    3e:6d:04:4b:60:cf:32:59:39:2c:66:54:ea:e9:c3:
                    18:d8:12:ea:5f:82:00:e0:8a:32:46:1c:27:69:b1:
                    28:87:5e:79:2d:ac:44:42:bb:2f:eb:c7:b8:5c:53:
                    82:ac:dc:00:a8:e3:25:39:24:67:0f:d1:87:41:98:
                    b9:51:43:f0:ca:ec:21:ed:1e:77:c9:7e:9a:04:36:
                    c4:5c:72:5b:08:46:cb:73:b5:27:f5:06:2b:91:15:
                    95:40:7e:3b:a1:56:fb:63:66:3a:c5:76:32:2d:9c:
                    38:a0:ea:46:f0:93:0e:6d:8f:5f:d6:67:a2:09:d3:
                    14:6c:c6:43:a6:31:de:c3:bc:83:ea:16:0b:70:6f:
                    07:b8:34:46:3c:58:a8:93:65:7f:2c:1e:fd:3a:11:
                    a3:d9:8f:4d:e4:1e:9d:16:e1:57:99:9c:bf:50:2d:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1B:1B:CF:18:1A:16:8E:8F:D4:81:A8:01:57:F2:71:66:F8:87:A6
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/C3876BD8589D11EC9CF19A41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.84.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:33:34:bc:67:86:9f:00:a6:4f:be:a4:72:a2:9e:a6:64:dc:
         00:9f:39:66:a8:95:96:f2:0f:00:6f:3b:df:a4:66:a5:b1:4c:
         21:17:9f:c8:78:e4:e4:5c:94:fa:6f:9b:61:df:a3:b1:0f:30:
         3a:47:3c:c7:ae:d1:52:23:aa:66:f6:45:ba:fd:f4:ee:c2:ce:
         f4:48:62:51:1c:11:db:66:76:30:4d:ef:2a:a8:c1:34:49:7c:
         c6:5d:4b:fb:ab:df:9a:0f:cd:28:48:4c:b7:f7:6e:ff:b7:d5:
         22:ea:1c:45:da:9d:74:91:93:40:da:78:04:3f:d1:f2:12:10:
         c0:68:d5:18:da:a7:af:48:c5:b3:e4:cd:39:4a:e7:72:53:0f:
         f2:df:01:4f:d7:4a:f4:da:0d:64:12:a0:09:22:df:49:59:d0:
         76:c0:18:48:ca:98:b4:e7:ee:64:63:6a:2b:f1:5f:bf:e5:fd:
         4e:82:92:58:34:c1:22:bd:ae:e6:d0:86:b6:fe:b9:75:6f:48:
         8f:94:3b:4c:6d:56:f4:d7:3c:ae:5c:51:38:c4:12:08:9e:3c:
         ea:33:4c:e2:3d:d7:b4:09:1c:40:b8:6c:d3:c2:a6:18:0f:04:
         14:16:51:f8:73:bd:89:5b:f4:aa:3a:7c:97:3a:2d:13:24:14:
         d0:97:4b:0e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2
NzIzQjYwQUQwHhcNMjUxMjIwMTYxMjU1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmMyNi1hOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAul/KocWAa7y5fVw7pFuEpA6HOmdcd+3esgPSbR4opDPL7dQdfCXqJ7A7//s1
UIFGnCK6I4lH0S7YWRNjpqtzJY/S2yrjYv4XNAZtIGMwCZ2QIWow6PFOGhc+bQRL
YM8yWTksZlTq6cMY2BLqX4IA4IoyRhwnabEoh155LaxEQrsv68e4XFOCrNwAqOMl
OSRnD9GHQZi5UUPwyuwh7R53yX6aBDbEXHJbCEbLc7Un9QYrkRWVQH47oVb7Y2Y6
xXYyLZw4oOpG8JMObY9f1meiCdMUbMZDpjHew7yD6hYLcG8HuDRGPFiok2V/LB79
OhGj2Y9N5B6dFuFXmZy/UC1T9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFsbG88Y
GhaOj9SBqAFX8nFm+IemMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw
QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI3MDcvQjRBQ0UxNjQ3MEI2MTFFNDlDQ0FGMTZGQzRGOUFFMDIvQzM4NzZCRDg1
ODlEMTFFQzlDRjE5QTQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBylQUMA0GCSqGSIb3DQEBCwUAA4IBAQCVMzS8Z4afAKZPvqRyop6m
ZNwAnzlmqJWW8g8AbzvfpGalsUwhF5/IeOTkXJT6b5th36OxDzA6RzzHrtFSI6pm
9kW6/fTuws70SGJRHBHbZnYwTe8qqME0SXzGXUv7q9+aD80oSEy3927/t9Ui6hxF
2p10kZNA2ngEP9HyEhDAaNUY2qevSMWz5M05SudyUw/y3wFP10r02g1kEqAJIt9J
WdB2wBhIypi05+5kY2or8V+/5f1OgpJYNMEiva7m0Ia2/rl1b0iPlDtMbVb01zyu
XFE4xBIInjzqM0ziPde0CRxAuGzTwqYYDwQUFlH4c72JW/SqOnyXOi0TJBTQl0sO
-----END CERTIFICATE-----
Generated at Sun Mar 8 00:04:36 2026 by rpki-client