Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/9E1A4B86526511EE869BEC82C4F9AE02.roa
File:                     9E1A4B86526511EE869BEC82C4F9AE02.roa (raw, json)
Hash identifier:          mmFhk9zuleyk+Z7avHwEC86my2HqXI9Jsw8bW9a65SQ=
Subject key identifier:   FC:DF:E6:0E:8C:63:4D:83:71:7F:59:03:C3:F0:CE:D3:D2:19:F2:0C
Certificate issuer:       /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial:       0809
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/9E1A4B86526511EE869BEC82C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:43:04 +0000
ROA not before:           Wed 31 Dec 2025 18:15:33 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141731
IP address blocks:        223.29.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
                          rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 17:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
        Validity
            Not Before: Dec 31 18:15:33 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a488b8-e20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:79:c3:b8:a4:04:00:d8:16:39:27:46:f5:
                    73:4f:36:8f:80:73:08:32:4c:8c:57:32:80:ab:97:
                    ff:57:8e:a4:58:bc:8a:20:da:9a:ff:99:96:96:5c:
                    77:4d:5b:10:c3:03:63:09:33:5a:53:5d:11:64:10:
                    f1:fb:25:7b:2d:8e:46:fa:ad:37:5e:17:b6:96:bf:
                    c2:cc:9a:07:2d:d0:da:37:f6:d0:f9:66:6e:07:cd:
                    ff:e6:90:a0:70:98:66:d3:88:4b:29:4f:f1:b2:42:
                    6a:16:dd:0d:0d:a7:23:3b:1f:05:fa:88:8a:27:19:
                    0d:12:ba:fe:3f:e6:15:7d:e1:87:b7:5e:1f:11:48:
                    f0:29:e2:bb:b0:02:3a:95:9a:c2:f0:31:5a:26:af:
                    bd:ee:90:2a:2c:84:57:18:fc:5a:7b:a7:ec:84:d2:
                    c8:3f:6f:c3:ca:f4:cd:bd:9a:58:bf:6b:8d:12:39:
                    a7:72:04:a4:11:ae:e0:09:1f:59:35:47:fb:cb:ce:
                    ef:ce:ba:88:99:7b:b1:a9:22:82:9b:ae:b3:6e:74:
                    ed:1c:e8:ea:10:00:5b:c8:3a:a5:52:0e:9c:70:58:
                    aa:37:cd:51:f6:62:7f:b8:26:11:6a:a4:04:6d:87:
                    59:1c:22:16:15:02:c4:bc:16:b8:01:58:fa:0f:3a:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DF:E6:0E:8C:63:4D:83:71:7F:59:03:C3:F0:CE:D3:D2:19:F2:0C
            X509v3 Authority Key Identifier:
                keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/9E1A4B86526511EE869BEC82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:43:85:c1:5f:80:c1:02:e8:47:90:a7:9c:94:9e:ab:4a:
         9c:76:28:98:f5:f8:04:ee:9c:7d:ab:92:86:b2:05:2a:40:c6:
         60:18:35:4d:66:2a:7c:09:74:4e:29:34:39:01:9e:57:5f:af:
         20:21:97:aa:b0:35:58:57:e6:30:b1:2d:d8:27:19:32:25:84:
         05:44:40:84:5b:12:20:2f:5e:4e:a1:69:c0:db:2c:e1:bf:45:
         08:eb:e6:f7:9c:34:3a:5e:b6:3d:a1:fd:ce:db:69:c0:03:28:
         da:e8:80:25:39:f7:d9:12:4f:de:c8:1a:9f:44:7d:bc:44:3b:
         cf:ff:e0:19:bb:1f:90:32:46:2b:33:46:d7:d4:f7:e8:d0:b3:
         d1:63:1a:3a:f8:a1:a8:3b:0e:45:ac:4a:d0:fa:6c:ac:e8:63:
         a5:49:3c:0e:5e:74:72:11:dd:f4:96:ac:cd:1e:2a:81:46:c1:
         41:3c:b4:29:c4:3a:8f:94:7e:86:35:7d:8f:c2:05:df:ed:45:
         13:87:9d:63:67:ea:e9:00:0a:36:f7:7c:5f:b3:70:3c:20:1e:
         3c:bf:90:05:5e:34:42:76:54:ee:8e:8f:4c:a7:8f:1d:04:ed:
         51:e7:cc:3e:e1:da:6e:66:f3:cc:5d:53:a1:fa:9b:90:9b:cf:
         1c:ab:c3:07
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC
QTI0QTFFMDYwHhcNMjUxMjMxMTgxNTMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODhiOC1lMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlEp5w7ikBADYFjknRvVzTzaPgHMIMkyMVzKAq5f/V46kWLyKINqa/5mWllx3
TVsQwwNjCTNaU10RZBDx+yV7LY5G+q03Xhe2lr/CzJoHLdDaN/bQ+WZuB83/5pCg
cJhm04hLKU/xskJqFt0NDacjOx8F+oiKJxkNErr+P+YVfeGHt14fEUjwKeK7sAI6
lZrC8DFaJq+97pAqLIRXGPxae6fshNLIP2/DyvTNvZpYv2uNEjmncgSkEa7gCR9Z
NUf7y87vzrqImXuxqSKCm66zbnTtHOjqEABbyDqlUg6ccFiqN81R9mJ/uCYRaqQE
bYdZHCIWFQLEvBa4AVj6Dzrw+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPzf5g6M
Y02DcX9ZA8PwztPSGfIMMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG
OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM2NDYvNkI4RUZBNUFGRjk4MTFFOTg3QzgwQTZBQzRGOUFFMDIvOUUxQTRCODY1
MjY1MTFFRTg2OUJFQzgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA3x3WMA0GCSqGSIb3DQEBCwUAA4IBAQAfeUOFwV+AwQLoR5CnnJSe
q0qcdiiY9fgE7px9q5KGsgUqQMZgGDVNZip8CXROKTQ5AZ5XX68gIZeqsDVYV+Yw
sS3YJxkyJYQFRECEWxIgL15OoWnA2yzhv0UI6+b3nDQ6XrY9of3O22nAAyja6IAl
OffZEk/eyBqfRH28RDvP/+AZux+QMkYrM0bX1Pfo0LPRYxo6+KGoOw5FrErQ+mys
6GOlSTwOXnRyEd30lqzNHiqBRsFBPLQpxDqPlH6GNX2PwgXf7UUTh51jZ+rpAAo2
93xfs3A8IB48v5AFXjRCdlTujo9Mp48dBO1R58w+4dpuZvPMXVOh+puQm88cq8MH
-----END CERTIFICATE-----
Generated at Fri Mar 13 18:58:14 2026 by rpki-client