Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa
File:                     2EDEA8344A5711F0BD4BC13AC4F9AE02.roa (raw, json)
Hash identifier:          Oq5n7YTpwRwxE6QPyxWPtqKwDnI0oieXsSLQCrD8sXk=
Subject key identifier:   F6:9B:5B:67:BA:AC:5D:38:14:52:7D:E7:3B:A6:77:B9:F5:C3:AC:E3
Certificate issuer:       /CN=A9120522/serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
Certificate serial:       08BD
Authority key identifier: 4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa
Signing time:             Mon 10 Aug 2026 20:41:04 +0000
ROA not before:           Mon 10 Aug 2026 20:41:04 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     4049
IP address blocks:        202.49.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl
                          rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237 (0x8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120522, serialNumber=4DBFB7C0F2D8576BA508F36369198B8491C2B334
        Validity
            Not Before: Aug 10 20:41:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7a3760-f9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ba:30:a9:2f:95:8f:c0:0f:36:43:b7:10:ec:
                    e2:a3:50:b6:e2:95:fb:47:7a:d9:8d:72:06:6b:7e:
                    c6:08:6c:24:e1:e0:d0:11:5f:1c:5a:4b:be:40:6b:
                    05:83:58:66:69:e4:33:0d:2a:57:f8:30:af:f2:f9:
                    3f:72:83:5e:0d:a6:3f:a2:0c:6e:44:63:42:0e:f4:
                    41:d2:0c:4b:58:7b:1b:aa:a6:23:ac:db:77:cf:86:
                    08:5a:cb:fa:3f:c9:06:11:6e:99:3d:0c:4a:23:b5:
                    60:73:8d:72:cc:5c:a2:1b:c7:96:9f:63:56:71:bf:
                    06:8b:97:14:7a:90:ca:3e:24:75:0d:2b:5b:fa:f2:
                    bf:be:2f:20:61:80:07:ab:8e:87:a5:eb:35:17:e3:
                    19:b3:09:e2:5e:d3:74:b9:12:33:63:71:a7:6c:ea:
                    24:2a:29:ff:cb:cb:83:a0:5c:55:d4:cc:e6:52:00:
                    b4:9d:a1:67:3f:f0:63:87:17:fd:1f:04:4b:a6:a5:
                    08:51:f2:d0:c4:33:85:07:65:c5:a9:33:bc:ef:55:
                    93:37:c7:30:64:98:86:ba:48:df:96:a9:77:2d:10:
                    a9:e6:9c:97:f0:b0:38:64:c0:e6:14:ae:72:b4:25:
                    96:ea:8b:d7:58:ad:c0:83:ba:1c:13:9e:c1:eb:0b:
                    20:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:5B:67:BA:AC:5D:38:14:52:7D:E7:3B:A6:77:B9:F5:C3:AC:E3
            X509v3 Authority Key Identifier:
                keyid:4D:BF:B7:C0:F2:D8:57:6B:A5:08:F3:63:69:19:8B:84:91:C2:B3:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tb-3wPLYV2ulCPNjaRmLhJHCszQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120522/1C3DA3ACF0A611EA959D764AC4F9AE02/2EDEA8344A5711F0BD4BC13AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.49.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:4e:83:12:f2:33:63:58:a4:69:4d:88:5d:0f:08:6a:54:cd:
         46:4b:d5:a0:34:bd:59:be:47:11:fa:9b:70:19:8c:54:bb:6f:
         1f:7d:e9:88:94:6e:39:d4:93:26:50:4b:b3:76:3c:32:c0:93:
         22:3d:1f:5f:ce:e9:28:0f:f5:55:02:d2:22:b0:94:84:ef:78:
         62:6e:60:5f:1a:74:dc:e8:5f:13:74:e7:22:80:4e:7b:eb:78:
         f5:4a:84:90:ba:04:38:e2:63:c4:75:a3:fc:a1:ac:1c:25:5d:
         e9:67:b0:aa:8b:3f:b9:ab:c6:b8:b8:be:fa:2f:5c:dc:e0:96:
         4f:0b:7b:2a:04:ee:b3:67:24:09:ee:21:72:a9:41:0a:57:fc:
         64:50:c6:f5:84:ec:ab:2b:7a:5b:1a:4b:c4:f6:b2:78:2e:6d:
         f8:41:75:5b:f0:cf:83:40:d6:88:e8:5a:bf:7c:10:ca:68:15:
         97:fd:45:ee:65:eb:85:5d:cd:98:32:36:f5:49:d2:0d:d9:46:
         fc:71:5a:67:b6:74:59:f7:4f:1e:dc:09:b2:c2:4f:81:0e:8a:
         88:3b:03:da:3a:f0:ee:bf:c2:cf:13:bc:24:43:a2:42:04:c4:
         bb:99:7a:69:77:2f:b4:5f:c7:29:da:06:9c:3f:6c:f8:43:9d:
         59:f6:b4:3b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA1MjIxMTAvBgNVBAUTKDREQkZCN0MwRjJEODU3NkJBNTA4RjM2MzY5MTk4Qjg0
OTFDMkIzMzQwHhcNMjYwODEwMjA0MTA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdhMzc2MC1mOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5rowqS+Vj8APNkO3EOzio1C24pX7R3rZjXIGa37GCGwk4eDQEV8cWku+QGsF
g1hmaeQzDSpX+DCv8vk/coNeDaY/ogxuRGNCDvRB0gxLWHsbqqYjrNt3z4YIWsv6
P8kGEW6ZPQxKI7Vgc41yzFyiG8eWn2NWcb8Gi5cUepDKPiR1DStb+vK/vi8gYYAH
q46Hpes1F+MZswniXtN0uRIzY3GnbOokKin/y8uDoFxV1MzmUgC0naFnP/Bjhxf9
HwRLpqUIUfLQxDOFB2XFqTO871WTN8cwZJiGukjflql3LRCp5pyX8LA4ZMDmFK5y
tCWW6ovXWK3Ag7ocE57B6wsgrwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPabW2e6
rF04FFJ95zumd7n1w6zjMB8GA1UdIwQYMBaAFE2/t8Dy2FdrpQjzY2kZi4SRwrM0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDUyMi8xQzNEQTNBQ0Yw
QTYxMUVBOTU5RDc2NEFDNEY5QUUwMi9UYi0zd1BMWVYydWxDUE5qYVJtTGhKSENz
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RiLTN3UExZVjJ1bENQTmphUm1MaEpIQ3N6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjA1MjIvMUMzREEzQUNGMEE2MTFFQTk1OUQ3NjRBQzRGOUFFMDIvMkVERUE4MzQ0
QTU3MTFGMEJENEJDMTNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCyjEQMA0GCSqGSIb3DQEBCwUAA4IBAQDSToMS8jNjWKRpTYhdDwhq
VM1GS9WgNL1ZvkcR+ptwGYxUu28ffemIlG451JMmUEuzdjwywJMiPR9fzukoD/VV
AtIisJSE73hibmBfGnTc6F8TdOcigE5763j1SoSQugQ44mPEdaP8oawcJV3pZ7Cq
iz+5q8a4uL76L1zc4JZPC3sqBO6zZyQJ7iFyqUEKV/xkUMb1hOyrK3pbGkvE9rJ4
Lm34QXVb8M+DQNaI6Fq/fBDKaBWX/UXuZeuFXc2YMjb1SdIN2Ub8cVpntnRZ908e
3Amywk+BDoqIOwPaOvDuv8LPE7wkQ6JCBMS7mXppdy+0X8cp2gacP2z4Q51Z9rQ7
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:21:54 2026 by rpki-client