Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/434B951C541911F1A205AA4996833773.roa
File:                     434B951C541911F1A205AA4996833773.roa (raw, json)
Hash identifier:          M7rzen4ve19DhDEBu/8OkXFTRebAryZoqY9bg5GuIQk=
Subject key identifier:   4B:7A:13:25:66:1F:3E:26:F7:E6:4F:49:8C:14:14:92:E1:A3:63:69
Certificate issuer:       /CN=A9118572/serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3
Certificate serial:       02
Authority key identifier: 84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/434B951C541911F1A205AA4996833773.roa
Signing time:             Wed 20 May 2026 06:58:11 +0000
ROA not before:           Wed 20 May 2026 06:58:10 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38880
IP address blocks:        203.28.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.crl
                          rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Jun 2026 09:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118572, serialNumber=84D2E23EF0A5BBB0BD5781118C5ECE658770D0F3
        Validity
            Not Before: May 20 06:58:10 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a0d5b82-4e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:ab:13:84:08:24:ec:e1:4c:1b:9e:c6:ce:
                    98:1b:01:95:f9:e0:36:76:be:4a:42:e9:c0:95:9b:
                    e5:a8:f9:d1:42:72:ab:87:62:8e:c0:b5:0f:f6:d7:
                    bf:df:7a:76:f3:7c:10:00:65:e1:0a:69:ed:f7:da:
                    08:20:8d:8e:e0:77:a2:85:a4:d0:05:30:39:a0:75:
                    2e:dc:99:5d:26:96:7c:8f:0b:0c:bc:b6:27:d3:f3:
                    b6:29:c9:f8:17:fc:b7:bb:05:c7:eb:b3:a5:80:4e:
                    94:4d:72:a0:63:16:b6:ea:0e:bb:9b:de:53:02:93:
                    3e:d6:92:a3:87:9c:86:36:be:81:56:4c:6f:66:e8:
                    ea:54:15:7e:72:4a:34:2f:b9:1e:cc:ab:8d:06:e2:
                    5d:04:1b:62:98:15:fe:69:0f:b6:f9:42:82:a3:27:
                    3e:9f:71:d7:67:03:a5:28:c8:c7:0f:c6:fe:b6:11:
                    47:3a:f2:af:97:88:7e:c4:ae:f8:e2:07:91:ae:f5:
                    37:93:44:e1:b9:ac:f4:db:6f:76:b2:6c:c5:59:83:
                    08:de:e1:98:51:62:7a:2c:7d:82:81:a1:d5:9b:20:
                    29:d2:4d:ec:ef:3e:6e:0c:bb:99:01:33:85:93:63:
                    4e:e6:b2:b6:0a:de:d8:05:16:18:69:5a:45:8c:e6:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7A:13:25:66:1F:3E:26:F7:E6:4F:49:8C:14:14:92:E1:A3:63:69
            X509v3 Authority Key Identifier:
                keyid:84:D2:E2:3E:F0:A5:BB:B0:BD:57:81:11:8C:5E:CE:65:87:70:D0:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/hNLiPvClu7C9V4ERjF7OZYdw0PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNLiPvClu7C9V4ERjF7OZYdw0PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118572/58AA6A7E541311F19445F17794833773/434B951C541911F1A205AA4996833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:ec:a2:90:6b:8b:e6:60:fd:2f:47:6e:14:ac:b8:21:99:4a:
         3a:e8:dc:11:f6:01:5e:02:0f:45:85:ca:82:8e:fc:ce:61:56:
         0d:12:a5:2e:be:a3:5a:83:55:0e:8e:84:73:05:b9:e8:c6:ed:
         18:ed:7a:ad:7f:1f:56:ea:84:e5:6c:e1:e1:47:65:91:30:82:
         36:0d:b1:6f:49:33:c8:ed:80:03:88:52:9b:ba:aa:38:1a:89:
         9e:a4:6e:38:8a:e0:95:a4:e8:1f:22:88:27:d0:a2:ba:ca:f8:
         81:cb:66:9a:64:0d:93:3e:b7:73:37:a5:26:a2:80:5b:27:1d:
         fa:c1:f0:84:d7:fe:ef:59:fa:67:40:f6:d0:d4:e8:4b:f4:51:
         0d:4e:a7:53:21:cf:5b:be:e7:04:c6:27:0f:84:6e:2a:2a:3e:
         9e:1e:a4:72:de:51:4e:bd:0b:a2:de:eb:df:6b:5a:05:3e:8e:
         2c:26:bd:75:ea:80:d2:b7:ea:d0:ed:e0:ce:98:76:b5:a7:ea:
         49:a8:14:5e:42:c9:3a:b1:0c:7b:f6:00:ed:8b:ac:fa:0f:16:
         92:8b:6a:04:3d:91:87:22:7f:be:00:cf:35:7f:f4:89:f8:00:
         2f:8c:a8:ee:76:99:dc:48:07:a9:8b:97:82:62:4a:13:7a:3d:
         34:c2:5b:11
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
ODU3MjExMC8GA1UEBRMoODREMkUyM0VGMEE1QkJCMEJENTc4MTExOEM1RUNFNjU4
NzcwRDBGMzAeFw0yNjA1MjAwNjU4MTBaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMGQ1YjgyLTRlNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChQKsThAgk7OFMG57GzpgbAZX54DZ2vkpC6cCVm+Wo+dFCcquHYo7AtQ/217/f
enbzfBAAZeEKae332gggjY7gd6KFpNAFMDmgdS7cmV0mlnyPCwy8tifT87YpyfgX
/Le7Bcfrs6WATpRNcqBjFrbqDrub3lMCkz7WkqOHnIY2voFWTG9m6OpUFX5ySjQv
uR7Mq40G4l0EG2KYFf5pD7b5QoKjJz6fcddnA6UoyMcPxv62EUc68q+XiH7Ervji
B5Gu9TeTROG5rPTbb3aybMVZgwje4ZhRYnosfYKBodWbICnSTezvPm4Mu5kBM4WT
Y07msrYK3tgFFhhpWkWM5lMVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUS3oTJWYf
Pib35k9JjBQUkuGjY2kwHwYDVR0jBBgwFoAUhNLiPvClu7C9V4ERjF7OZYdw0PMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NTcyLzU4QUE2QTdFNTQx
MzExRjE5NDQ1RjE3Nzk0ODMzNzczL2hOTGlQdkNsdTdDOVY0RVJqRjdPWllkdzBQ
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaE5MaVB2Q2x1N0M5VjRFUmpGN09aWWR3MFBNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODU3Mi81OEFBNkE3RTU0MTMxMUYxOTQ0NUYxNzc5NDgzMzc3My80MzRCOTUxQzU0
MTkxMUYxQTIwNUFBNDk5NjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADLHFowDQYJKoZIhvcNAQELBQADggEBAM/sopBri+Zg/S9HbhSsuCGZ
Sjro3BH2AV4CD0WFyoKO/M5hVg0SpS6+o1qDVQ6OhHMFuejG7Rjteq1/H1bqhOVs
4eFHZZEwgjYNsW9JM8jtgAOIUpu6qjgaiZ6kbjiK4JWk6B8iiCfQorrK+IHLZppk
DZM+t3M3pSaigFsnHfrB8ITX/u9Z+mdA9tDU6Ev0UQ1Op1Mhz1u+5wTGJw+Ebioq
Pp4epHLeUU69C6Le699rWgU+jiwmvXXqgNK36tDt4M6YdrWn6kmoFF5CyTqxDHv2
AO2LrPoPFpKLagQ9kYcif74AzzV/9In4AC+MqO52mdxIB6mLl4JiShN6PTTCWxE=
-----END CERTIFICATE-----
Generated at Wed Jun 10 05:08:46 2026 by rpki-client