Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa
File:                     6DE5D7943FA311EDABCBBA25C4F9AE02.roa (raw, json)
Hash identifier:          opYG/THp6f3xNs9Il1aHZ0xQHhnpdVv74lxCqnBEIkw=
Subject key identifier:   8B:83:D0:FF:02:B2:42:BF:DB:22:A5:1B:18:6A:20:20:05:3E:B7:7C
Certificate issuer:       /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial:       04D7
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:08:55 +0000
ROA not before:           Tue 01 Jul 2025 01:05:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        202.50.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
                          rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
        Validity
            Not Before: Jul  1 01:05:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a46497-637d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e1:2b:d5:59:61:df:65:f4:bd:37:2e:01:02:
                    c5:18:0c:cc:32:49:65:a9:a3:60:0a:10:74:ce:b8:
                    e6:c8:aa:15:47:fa:b5:6c:4b:89:57:f4:6e:ee:66:
                    8d:0e:94:2f:16:9e:d7:8e:99:b3:9b:b5:00:f9:46:
                    83:eb:5b:52:53:62:4f:c1:88:f7:0e:a4:90:65:bc:
                    05:3d:3e:07:e7:fa:e0:2d:86:2c:6a:8c:f7:5d:99:
                    c5:e3:a0:1a:a5:f8:de:b2:67:1d:1e:f5:27:89:1d:
                    4d:01:be:5a:2e:47:2f:f1:32:5d:9a:45:61:ae:9d:
                    68:58:be:3a:97:a8:96:e4:5f:b1:14:4a:ef:68:2e:
                    13:34:d0:fc:7e:f8:f3:f4:1f:47:df:58:fa:b6:e1:
                    41:1d:16:09:06:ce:e3:47:a7:09:27:42:06:a9:be:
                    13:04:2e:cd:94:ba:7d:e0:18:31:cf:91:1e:59:6e:
                    80:99:9c:30:fe:16:83:33:43:74:93:07:8b:74:39:
                    c2:88:19:85:bd:c9:8a:e7:72:28:cb:83:f2:41:03:
                    56:da:8d:03:6d:99:e9:9c:65:6c:c0:38:9f:7d:b1:
                    53:5f:91:32:7f:dd:cd:b9:08:29:68:e6:ba:e5:ce:
                    01:de:b6:57:b9:a9:49:e0:7f:84:af:80:c0:ff:fe:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:83:D0:FF:02:B2:42:BF:DB:22:A5:1B:18:6A:20:20:05:3E:B7:7C
            X509v3 Authority Key Identifier:
                keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:50:94:f2:f4:14:ee:92:66:39:0a:26:78:d4:f0:52:5a:2e:
         09:ec:6b:ff:47:37:06:71:ee:85:9d:0f:6d:35:50:33:6b:99:
         48:7c:7b:d4:54:fb:aa:86:6f:43:a9:ff:41:84:63:4c:8c:a1:
         0c:66:72:66:a9:49:db:d6:93:fb:78:9b:e6:56:36:68:6a:c4:
         b9:d3:fd:19:90:b4:36:9f:9a:28:32:d9:de:8d:d6:9e:4d:0c:
         8b:d6:c3:6a:c8:91:b7:e6:5e:f1:6e:26:0e:85:06:03:30:02:
         1c:24:6b:b1:90:58:74:e4:71:40:1e:f6:1b:16:b2:e5:63:9a:
         44:95:a4:8a:aa:e6:6a:25:e2:31:0a:a0:69:42:89:f4:f3:4c:
         4e:55:f8:5d:57:21:70:69:69:86:48:e7:10:d5:0d:b3:98:3b:
         cc:88:0d:7e:be:2f:25:50:50:53:d9:5d:07:e0:07:5e:d1:be:
         b2:cf:0b:80:8d:34:07:18:dd:17:29:89:e3:de:40:59:99:90:
         87:23:bf:b4:12:85:a8:a3:78:0e:41:02:76:e0:50:06:c9:23:
         ec:cb:31:1d:43:2b:28:cc:79:6d:75:09:62:7a:7d:89:b2:8b:
         d6:fe:f7:4d:13:13:fe:24:19:e8:ee:d7:e0:9e:31:db:d2:2a:
         b7:3f:69:1a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCRDQxMTAvBgNVBAUTKEYxM0JDQTgwNEY4RjE5ODE3NkY5OUU3QkM5QUVBOThD
QUZDMEI4QjEwHhcNMjUwNzAxMDEwNTQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjQ5Ny02MzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5OEr1Vlh32X0vTcuAQLFGAzMMkllqaNgChB0zrjmyKoVR/q1bEuJV/Ru7maN
DpQvFp7Xjpmzm7UA+UaD61tSU2JPwYj3DqSQZbwFPT4H5/rgLYYsaoz3XZnF46Aa
pfjesmcdHvUniR1NAb5aLkcv8TJdmkVhrp1oWL46l6iW5F+xFErvaC4TNND8fvjz
9B9H31j6tuFBHRYJBs7jR6cJJ0IGqb4TBC7NlLp94Bgxz5EeWW6AmZww/haDM0N0
kweLdDnCiBmFvcmK53Ioy4PyQQNW2o0DbZnpnGVswDiffbFTX5Eyf93NuQgpaOa6
5c4B3rZXualJ4H+Er4DA//7/DwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIuD0P8C
skK/2yKlGxhqICAFPrd8MB8GA1UdIwQYMBaAFPE7yoBPjxmBdvmee8muqYyvwLix
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJENC80ODY1QkQ0ODYx
MTExMUVDOTg0RTNFN0ZDNEY5QUUwMi84VHZLZ0UtUEdZRjItWjU3eWE2cGpLX0F1
TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhUdktnRS1QR1lGMi1aNTd5YTZwaktfQXVMRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDBCRDQvNDg2NUJENDg2MTExMTFFQzk4NEUzRTdGQzRGOUFFMDIvNkRFNUQ3OTQz
RkEzMTFFREFCQ0JCQTI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyjLCMA0GCSqGSIb3DQEBCwUAA4IBAQBtUJTy9BTukmY5CiZ41PBS
Wi4J7Gv/RzcGce6FnQ9tNVAza5lIfHvUVPuqhm9Dqf9BhGNMjKEMZnJmqUnb1pP7
eJvmVjZoasS50/0ZkLQ2n5ooMtnejdaeTQyL1sNqyJG35l7xbiYOhQYDMAIcJGux
kFh05HFAHvYbFrLlY5pElaSKquZqJeIxCqBpQon080xOVfhdVyFwaWmGSOcQ1Q2z
mDvMiA1+vi8lUFBT2V0H4Ade0b6yzwuAjTQHGN0XKYnj3kBZmZCHI7+0EoWoo3gO
QQJ24FAGySPsyzEdQysozHltdQlien2JsovW/vdNExP+JBno7tfgnjHb0iq3P2ka
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:24 2026 by rpki-client