Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa
File:                     9052A59870AF11EF87B5DA0DC4F9AE02.roa (raw, json)
Hash identifier:          Xp2kZwTI/Ulm1FSMvB8uIy/q/Twdd9bs92yBpmukUiI=
Subject key identifier:   28:57:7F:C7:77:CA:C0:30:BB:0E:AF:74:7F:C1:BD:B6:99:82:FF:EF
Certificate issuer:       /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial:       0184
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 05:36:44 +0000
ROA not before:           Fri 05 Jun 2026 05:36:44 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     38809
IP address blocks:        202.12.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
                          rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 06:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
        Validity
            Not Before: Jun  5 05:36:44 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a22606c-3ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:22:ae:fd:93:6b:da:2b:64:5f:6b:05:8b:
                    12:e7:70:e3:17:4c:75:44:e7:1a:e3:4e:d1:b7:77:
                    f5:12:60:d5:3d:70:9a:53:ac:3e:cb:60:9b:57:54:
                    17:0a:c1:f1:65:f6:17:58:98:29:58:6a:f1:b4:98:
                    ea:68:cf:43:36:5e:cc:08:4a:44:4e:f7:7e:c5:6b:
                    6a:af:87:00:ad:f4:9e:3f:30:96:d6:03:76:19:e9:
                    fe:6f:7b:63:ea:8c:1c:66:c2:aa:31:10:d6:e9:a2:
                    01:94:4b:bf:84:0a:ea:f5:2a:98:74:3c:b9:fc:b0:
                    8e:42:c4:cd:9e:fb:07:ea:58:d4:e2:9b:73:ad:84:
                    0a:19:a8:b0:b5:c2:bb:2b:71:9c:93:3b:bd:9e:f1:
                    8d:5f:c0:7d:64:e3:04:12:62:2e:fb:7f:7e:39:ab:
                    4f:ac:e9:bd:e6:e0:9f:6e:02:54:b8:fc:d4:59:74:
                    47:4b:cc:b4:88:b4:f1:32:9c:3c:af:5b:78:bb:eb:
                    3c:9b:3e:38:dc:dc:d1:fc:a0:55:ea:be:76:ea:41:
                    4b:07:42:ef:9a:67:42:13:fc:de:07:f5:83:57:2d:
                    14:6f:07:45:5a:1a:99:55:21:1e:75:f6:9a:7c:e5:
                    b7:40:94:5c:7b:a0:28:8c:bc:35:76:69:c4:af:c1:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:57:7F:C7:77:CA:C0:30:BB:0E:AF:74:7F:C1:BD:B6:99:82:FF:EF
            X509v3 Authority Key Identifier:
                keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/9052A59870AF11EF87B5DA0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:53:b5:55:18:b5:46:7d:cb:52:47:19:e8:79:d4:d5:4b:a8:
         39:82:a9:8c:8c:f8:c2:42:88:bf:a0:51:32:a9:58:23:62:5b:
         b5:b4:48:6a:d9:82:b1:29:03:1a:8b:7d:86:8c:d9:f7:cd:fc:
         74:9e:9c:99:86:d8:ec:3c:ba:6f:ec:06:9f:80:83:a1:25:08:
         1a:aa:b1:ed:ac:a2:1d:29:5e:84:84:e4:ec:b3:bd:de:29:c4:
         5c:55:0c:c8:c9:c5:62:73:f6:32:5d:24:ac:3b:60:a6:3a:18:
         35:be:25:0a:84:0a:03:10:94:ef:87:99:75:40:81:0f:c3:a6:
         5e:42:de:2d:42:58:9e:04:00:cf:be:90:85:0b:a7:3d:80:3e:
         b3:d6:62:4b:0c:2f:64:2c:d2:73:2a:6b:d2:b6:f6:67:60:c4:
         f5:93:1f:4c:dd:be:86:bd:af:27:c8:35:4b:ae:5d:5b:e4:b5:
         fb:18:cc:84:ad:d4:dc:0f:3e:8b:41:5f:4e:17:32:af:f0:2c:
         cd:28:b4:47:6a:a0:a7:a3:93:25:22:7f:f6:ba:f4:65:f3:b0:
         19:ee:6e:1e:0e:7c:da:fb:65:84:73:6c:07:fa:4a:f0:6a:e7:
         35:80:90:c4:f9:54:a1:e6:1a:53:82:a6:92:c6:1a:3c:96:9b:
         5d:fb:93:95
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC
NkE2NTkzQUEwHhcNMjYwNjA1MDUzNjQ0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyNjA2Yy0zYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwo0irv2Ta9orZF9rBYsS53DjF0x1ROca407Rt3f1EmDVPXCaU6w+y2CbV1QX
CsHxZfYXWJgpWGrxtJjqaM9DNl7MCEpETvd+xWtqr4cArfSePzCW1gN2Gen+b3tj
6owcZsKqMRDW6aIBlEu/hArq9SqYdDy5/LCOQsTNnvsH6ljU4ptzrYQKGaiwtcK7
K3Gckzu9nvGNX8B9ZOMEEmIu+39+OatPrOm95uCfbgJUuPzUWXRHS8y0iLTxMpw8
r1t4u+s8mz443NzR/KBV6r526kFLB0LvmmdCE/zeB/WDVy0UbwdFWhqZVSEedfaa
fOW3QJRce6AojLw1dmnEr8HFHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFChXf8d3
ysAwuw6vdH/BvbaZgv/vMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz
QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUYyREYvMEE5ODg3OUEyM0FFMTFFRjk0OTNGNDVDQzRGOUFFMDIvOTA1MkE1OTg3
MEFGMTFFRjg3QjVEQTBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAygx3MA0GCSqGSIb3DQEBCwUAA4IBAQC+U7VVGLVGfctSRxnoedTV
S6g5gqmMjPjCQoi/oFEyqVgjYlu1tEhq2YKxKQMai32GjNn3zfx0npyZhtjsPLpv
7AafgIOhJQgaqrHtrKIdKV6EhOTss73eKcRcVQzIycVic/YyXSSsO2CmOhg1viUK
hAoDEJTvh5l1QIEPw6ZeQt4tQlieBADPvpCFC6c9gD6z1mJLDC9kLNJzKmvStvZn
YMT1kx9M3b6Gva8nyDVLrl1b5LX7GMyErdTcDz6LQV9OFzKv8CzNKLRHaqCno5Ml
In/2uvRl87AZ7m4eDnza+2WEc2wH+krwauc1gJDE+VSh5hpTgqaSxho8lptd+5OV
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:43:33 2026 by rpki-client