Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa
File:                     FCD162AE508511EEBA4C0E2BC4F9AE02.roa (raw, json)
Hash identifier:          59acFeQy4V5pQjYYCiasQgZVB5QvS3oo/PphMyeS6gg=
Subject key identifier:   74:30:BC:FA:14:52:1A:A8:CB:90:BF:0D:25:38:9E:F7:7A:7A:CC:97
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       01DA
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:02:34 +0000
ROA not before:           Thu 31 Jul 2025 04:42:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     32613
IP address blocks:        203.167.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 02:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Jul 31 04:42:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a438e9-40b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:f1:83:f0:63:29:8e:a4:26:18:76:21:9b:
                    97:dc:e9:b9:22:3b:31:ae:32:a9:30:8c:7d:75:61:
                    20:41:7c:1a:25:cd:7d:f6:8c:8e:d2:2f:58:47:98:
                    78:4d:32:78:80:8a:10:d5:33:3d:e5:36:26:39:3f:
                    79:b2:f3:16:0b:1a:3a:d5:e9:1f:c0:9b:ce:75:b8:
                    82:54:2c:17:61:eb:4e:36:40:9e:1e:52:12:f3:56:
                    16:f4:ac:71:83:8b:ca:61:b7:31:a4:eb:3a:58:98:
                    a5:36:69:2b:39:23:d4:1a:a6:82:81:8b:20:8c:09:
                    ad:38:19:6f:51:d9:9d:d7:0b:2f:51:ee:48:1a:ae:
                    83:7c:67:51:55:17:43:01:80:bf:52:e9:36:02:95:
                    d0:e9:f0:89:07:09:88:11:6e:c6:cd:78:4e:6e:39:
                    12:e3:34:41:8f:fd:e2:09:6e:10:de:88:01:42:7f:
                    7b:b0:c0:02:88:4e:f3:33:97:3e:7e:c2:28:35:74:
                    54:e0:35:3d:ea:ff:81:71:80:54:f2:a7:ac:4f:02:
                    f4:81:45:3f:e3:00:58:04:41:99:43:db:07:ce:ee:
                    e9:98:a0:16:fb:dc:8c:40:34:16:e6:29:3f:da:ea:
                    7e:a0:fa:4e:c8:76:54:11:85:e4:71:9e:5f:65:19:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:30:BC:FA:14:52:1A:A8:CB:90:BF:0D:25:38:9E:F7:7A:7A:CC:97
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/FCD162AE508511EEBA4C0E2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:5a:fd:d7:72:1f:78:ed:62:e0:2b:8f:14:fe:58:00:19:b7:
         bb:eb:f9:fb:03:1b:7f:b7:f3:fa:aa:3b:fb:ab:6c:96:d1:e2:
         97:99:f8:f5:54:48:73:b5:6e:31:5b:03:77:28:a3:06:cc:1b:
         30:f5:f8:5d:8c:15:ea:70:2b:0b:2b:fc:34:e0:6d:74:86:51:
         c4:6e:9f:6e:f8:f6:6c:33:67:e7:17:74:49:00:0b:35:f9:9b:
         51:10:44:91:ab:ad:fd:99:3a:ac:a8:61:52:b5:fa:bf:6d:ca:
         10:d6:48:32:94:fd:d5:42:69:54:8d:bd:d9:22:9f:d7:4e:ff:
         28:26:89:e2:09:b7:55:90:90:95:e7:97:1e:1c:a1:cb:00:9e:
         3f:7a:b5:82:e8:7f:fe:87:81:15:4a:e4:bb:73:30:9d:17:bb:
         00:9e:bd:58:c2:0d:37:af:fe:7d:b9:9c:9e:e6:1b:b9:3b:d2:
         5e:4d:96:7a:8f:a3:f8:76:ab:d3:33:7f:76:33:7d:e6:5b:5d:
         89:d8:0a:5f:66:0d:30:22:a8:3e:8d:11:4a:53:b7:88:1a:d6:
         80:79:9e:89:bf:46:20:21:7a:8f:e2:5e:25:b0:2c:61:b5:63:
         5c:fa:f5:69:75:6c:1f:30:59:a1:fb:7d:4a:06:be:c4:16:53:
         b2:a1:5d:49
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4
M0MwRkFBMzIwHhcNMjUwNzMxMDQ0MjAwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzhlOS00MGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdHxg/BjKY6kJhh2IZuX3Om5IjsxrjKpMIx9dWEgQXwaJc199oyO0i9YR5h4
TTJ4gIoQ1TM95TYmOT95svMWCxo61ekfwJvOdbiCVCwXYetONkCeHlIS81YW9Kxx
g4vKYbcxpOs6WJilNmkrOSPUGqaCgYsgjAmtOBlvUdmd1wsvUe5IGq6DfGdRVRdD
AYC/Uuk2ApXQ6fCJBwmIEW7GzXhObjkS4zRBj/3iCW4Q3ogBQn97sMACiE7zM5c+
fsIoNXRU4DU96v+BcYBU8qesTwL0gUU/4wBYBEGZQ9sHzu7pmKAW+9yMQDQW5ik/
2up+oPpOyHZUEYXkcZ5fZRkFswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHQwvPoU
Uhqoy5C/DSU4nvd6esyXMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw
ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTIyNjUvOUE2NkFBREU1MDg1MTFFRUJBM0VGQzExQzRGOUFFMDIvRkNEMTYyQUU1
MDg1MTFFRUJBNEMwRTJCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy6cHMA0GCSqGSIb3DQEBCwUAA4IBAQC5Wv3Xch947WLgK48U/lgA
Gbe76/n7Axt/t/P6qjv7q2yW0eKXmfj1VEhztW4xWwN3KKMGzBsw9fhdjBXqcCsL
K/w04G10hlHEbp9u+PZsM2fnF3RJAAs1+ZtREESRq639mTqsqGFStfq/bcoQ1kgy
lP3VQmlUjb3ZIp/XTv8oJoniCbdVkJCV55ceHKHLAJ4/erWC6H/+h4EVSuS7czCd
F7sAnr1Ywg03r/59uZye5hu5O9JeTZZ6j6P4dqvTM392M33mW12J2ApfZg0wIqg+
jRFKU7eIGtaAeZ6Jv0YgIXqP4l4lsCxhtWNc+vVpdWwfMFmh+31KBr7EFlOyoV1J
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:13:39 2026 by rpki-client