Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa
File:                     37D5EC8CB68A11F09D04E950C4F9AE02.roa (raw, json)
Hash identifier:          6aVnE8xoctQeLsx9ZDOTJHTWJS72yU7v5odJKGzLwnc=
Subject key identifier:   B0:AC:E6:72:E5:34:03:FB:54:BC:79:A6:C6:98:0F:AD:54:6A:DB:62
Certificate issuer:       /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial:       055E
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:49:07 +0000
ROA not before:           Mon 03 Nov 2025 00:44:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     5065
IP address blocks:        223.29.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
                          rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 23:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
        Validity
            Not Before: Nov  3 00:44:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48a23-a4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:27:79:ed:9c:d0:f7:d6:92:bf:47:93:2c:e5:
                    a9:19:34:8f:5c:8d:2f:76:3a:40:9e:f4:1d:48:33:
                    c1:57:7c:aa:ca:b7:5d:f5:8a:67:d9:a3:9a:dd:2b:
                    28:22:a0:49:6a:1e:88:1f:c0:32:80:d4:28:df:9a:
                    76:e8:a7:26:a4:78:62:f1:7e:4c:52:1e:24:ec:99:
                    39:25:46:fd:36:e7:94:4b:0c:89:c7:f5:7d:b3:34:
                    6f:3a:3f:7c:ce:05:07:2a:4b:b6:3e:0b:ef:ff:1a:
                    a0:82:65:f3:a5:2a:44:15:04:63:e8:4c:0a:c1:85:
                    6b:be:4a:54:59:ea:6d:f7:28:89:83:f3:5f:97:b3:
                    49:ea:4c:e0:1e:48:f1:78:24:a3:18:7c:1e:6a:7c:
                    2b:eb:c9:c3:f3:24:97:3f:24:16:47:54:d9:fd:7e:
                    2d:4a:f2:55:4d:65:79:a5:b0:e9:df:d3:b7:af:bc:
                    f9:0f:0a:19:01:59:e5:73:04:7b:89:f1:a2:d3:e5:
                    97:77:41:f1:e7:25:8c:3d:9f:b4:6c:b8:e4:47:21:
                    df:85:96:0c:e8:c9:47:31:3c:5e:f0:b2:de:e5:de:
                    00:1a:74:d6:e9:da:ee:50:b4:d5:bb:4f:8c:09:32:
                    fd:65:64:bd:a6:31:d4:3e:53:69:46:13:27:22:8b:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:E6:72:E5:34:03:FB:54:BC:79:A6:C6:98:0F:AD:54:6A:DB:62
            X509v3 Authority Key Identifier:
                keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/37D5EC8CB68A11F09D04E950C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:d1:7f:5f:37:ea:0b:7b:a4:87:7f:c1:52:ef:dc:40:73:
         ea:e1:d0:0b:7f:58:7f:4b:4a:a3:37:03:4d:89:8e:af:8a:be:
         80:a6:f5:57:0a:59:ca:6e:e6:78:69:35:37:5c:08:b8:b8:fb:
         e2:13:6f:65:28:3f:ff:be:7e:04:e1:e2:0e:92:3a:e6:ca:6f:
         e4:d7:30:37:d2:f9:a7:56:cb:b7:7f:cf:75:66:50:fc:30:dd:
         12:38:ef:b3:bf:38:0e:d1:b9:71:ea:6b:14:fe:4d:a3:22:21:
         7d:2f:d3:a2:e3:c5:f4:f5:be:90:d3:cf:18:a2:ea:4f:7d:a8:
         8f:36:c5:5b:3e:59:97:e1:de:49:80:3b:a8:10:92:1e:d5:53:
         fc:9c:9c:63:40:ee:72:94:e1:13:22:9b:8e:3c:55:bd:dc:de:
         f2:cb:c3:2c:a3:18:52:dc:a7:8e:b4:49:2c:5c:d0:50:1b:8a:
         4d:49:f1:30:2f:79:bf:8f:14:99:d3:b5:29:70:05:a2:e5:a5:
         08:5b:05:57:be:95:ac:ea:85:c5:52:15:f8:ea:95:3d:63:96:
         a6:5a:c2:a4:2c:58:a4:1b:02:45:fd:44:1f:6f:f4:fc:5d:e5:
         c6:79:d3:37:4d:90:d6:af:7b:8b:3c:aa:d8:09:c6:82:fd:fe:
         9c:04:37:4d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD
RUZBRjVBQkMwHhcNMjUxMTAzMDA0NDU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGEyMy1hNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Sd57ZzQ99aSv0eTLOWpGTSPXI0vdjpAnvQdSDPBV3yqyrdd9Ypn2aOa3Sso
IqBJah6IH8AygNQo35p26KcmpHhi8X5MUh4k7Jk5JUb9NueUSwyJx/V9szRvOj98
zgUHKku2Pgvv/xqggmXzpSpEFQRj6EwKwYVrvkpUWept9yiJg/Nfl7NJ6kzgHkjx
eCSjGHweanwr68nD8ySXPyQWR1TZ/X4tSvJVTWV5pbDp39O3r7z5DwoZAVnlcwR7
ifGi0+WXd0Hx5yWMPZ+0bLjkRyHfhZYM6MlHMTxe8LLe5d4AGnTW6druULTVu0+M
CTL9ZWS9pjHUPlNpRhMnIovv2QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLCs5nLl
NAP7VLx5psaYD61UattiMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG
MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvMzdENUVDOENC
NjhBMTFGMDlEMDRFOTUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC3x2IMA0GCSqGSIb3DQEBCwUAA4IBAQAdNdF/XzfqC3ukh3/BUu/c
QHPq4dALf1h/S0qjNwNNiY6vir6ApvVXClnKbuZ4aTU3XAi4uPviE29lKD//vn4E
4eIOkjrmym/k1zA30vmnVsu3f891ZlD8MN0SOO+zvzgO0blx6msU/k2jIiF9L9Oi
48X09b6Q088YoupPfaiPNsVbPlmX4d5JgDuoEJIe1VP8nJxjQO5ylOETIpuOPFW9
3N7yy8MsoxhS3KeOtEksXNBQG4pNSfEwL3m/jxSZ07UpcAWi5aUIWwVXvpWs6oXF
UhX46pU9Y5amWsKkLFikGwJF/UQfb/T8XeXGedM3TZDWr3uLPKrYCcaC/f6cBDdN
-----END CERTIFICATE-----
Generated at Thu Mar 5 14:02:45 2026 by rpki-client