Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74CECB38FBF711F0B6045B12716F56BC.roa
File:                     74CECB38FBF711F0B6045B12716F56BC.roa (raw, json)
Hash identifier:          Bv51uaU6ai7ZI7PW+lbOZoQaIyNbdcahpMhYAtQCIyM=
Subject key identifier:   6D:C0:C3:78:A8:0E:54:B9:76:17:32:20:A1:55:4E:94:2F:64:C6:0D
Certificate issuer:       /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
Certificate serial:       05C3
Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74CECB38FBF711F0B6045B12716F56BC.roa
Signing time:             Wed 28 Jan 2026 03:14:28 +0000
ROA not before:           Wed 28 Jan 2026 03:14:28 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9291
IP address blocks:        202.43.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 22:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B
        Validity
            Not Before: Jan 28 03:14:28 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69797f14-8275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:a5:17:8e:9a:3e:7c:ba:81:0e:5f:62:d4:
                    24:4d:49:79:e5:6e:cf:9c:c9:6a:d9:72:7e:3e:7d:
                    09:20:33:bf:70:f4:9e:2d:dd:ee:cc:75:17:3e:86:
                    fc:8f:10:d4:73:6e:a8:ab:e4:1d:16:7b:9c:cc:1f:
                    3d:f6:7f:46:6b:4c:99:12:2e:ce:ce:80:31:45:35:
                    00:1e:ef:c8:81:3a:b1:14:db:7f:50:77:eb:92:14:
                    1d:93:f0:d8:1b:ff:6b:c6:54:06:0a:4a:b9:7c:c7:
                    f0:44:59:4a:a8:05:84:8e:f9:de:f0:ac:ae:76:45:
                    d2:43:e7:20:1c:df:d2:fb:1f:18:bd:75:a9:80:3e:
                    94:7c:96:cb:34:af:a8:39:33:d8:38:09:1f:7c:d0:
                    7f:db:33:d0:4c:dc:fc:c3:3c:ea:47:1d:4c:2c:22:
                    ed:f0:bd:98:e4:92:1d:ac:c1:8c:0f:58:12:f6:98:
                    51:6e:b0:e4:d6:d1:0a:e4:cf:cc:9f:49:55:08:19:
                    ff:ef:5a:74:55:ce:ab:9c:bd:1e:2c:5e:02:bc:dc:
                    17:f6:0f:28:ee:41:83:83:13:a3:95:3b:e3:39:fa:
                    10:81:dd:6d:98:ed:f1:b3:12:0a:b7:0b:8e:56:37:
                    21:88:75:24:34:81:ee:77:a6:30:e3:d6:df:5d:d0:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C0:C3:78:A8:0E:54:B9:76:17:32:20:A1:55:4E:94:2F:64:C6:0D
            X509v3 Authority Key Identifier:
                keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/74CECB38FBF711F0B6045B12716F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:3d:6f:b8:e3:b4:99:5c:bf:a7:da:62:ef:8e:08:df:ba:
         83:94:2f:ff:55:50:60:6d:06:81:a4:ec:c4:09:84:bd:81:3c:
         c3:82:b7:d3:99:15:88:3f:1d:e1:c7:12:aa:6f:54:97:ee:25:
         b4:c4:e2:35:9d:8a:bb:2a:e9:c6:13:85:5f:ca:aa:ba:ca:f2:
         17:91:ef:59:bf:51:91:4a:61:14:ba:bd:bc:24:39:79:50:a8:
         ab:13:1a:4b:5d:ca:12:36:0a:66:53:70:d2:6b:e7:d8:d7:7a:
         bc:4c:d0:d5:03:4c:4a:c5:62:b8:ea:22:42:a9:95:20:12:4c:
         5a:74:cc:00:31:66:ad:10:75:9e:63:93:d6:a0:1c:c2:20:fb:
         1f:05:b5:ab:c5:53:d2:39:91:3b:19:f8:0f:c7:06:b7:a5:1a:
         70:29:38:03:9b:63:78:46:ca:2d:c2:47:fa:86:00:34:e1:6f:
         e9:79:08:9b:8f:0b:5a:2c:30:7b:82:e9:9e:31:51:07:16:cc:
         71:5b:5c:7b:e4:44:7f:34:69:0a:6a:3a:15:b9:8d:6b:04:2a:
         dc:fc:f8:2a:26:27:c2:b1:97:99:a0:70:dc:dc:f8:b2:81:1b:
         14:2e:30:d3:70:78:03:0a:fc:e5:de:1e:59:0c:49:b9:f0:62:
         49:51:ed:45
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy
MEM4RkQ1N0IwHhcNMjYwMTI4MDMxNDI4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTc5N2YxNC04Mjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBSlF46aPny6gQ5fYtQkTUl55W7PnMlq2XJ+Pn0JIDO/cPSeLd3uzHUXPob8
jxDUc26oq+QdFnuczB899n9Ga0yZEi7OzoAxRTUAHu/IgTqxFNt/UHfrkhQdk/DY
G/9rxlQGCkq5fMfwRFlKqAWEjvne8KyudkXSQ+cgHN/S+x8YvXWpgD6UfJbLNK+o
OTPYOAkffNB/2zPQTNz8wzzqRx1MLCLt8L2Y5JIdrMGMD1gS9phRbrDk1tEK5M/M
n0lVCBn/71p0Vc6rnL0eLF4CvNwX9g8o7kGDgxOjlTvjOfoQgd1tmO3xsxIKtwuO
VjchiHUkNIHud6Yw49bfXdCJsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG3Aw3io
DlS5dhcyIKFVTpQvZMYNMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2
MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUNENzIvNDU3NkE2NzIyNjEyMTFFQ0I5MzE5OTQyQzRGOUFFMDIvNzRDRUNCMzhG
QkY3MTFGMEI2MDQ1QjEyNzE2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKKwUwDQYJKoZIhvcNAQELBQADggEBADt4PW+447SZXL+n
2mLvjgjfuoOUL/9VUGBtBoGk7MQJhL2BPMOCt9OZFYg/HeHHEqpvVJfuJbTE4jWd
irsq6cYThV/KqrrK8heR71m/UZFKYRS6vbwkOXlQqKsTGktdyhI2CmZTcNJr59jX
erxM0NUDTErFYrjqIkKplSASTFp0zAAxZq0QdZ5jk9agHMIg+x8FtavFU9I5kTsZ
+A/HBrelGnApOAObY3hGyi3CR/qGADThb+l5CJuPC1osMHuC6Z4xUQcWzHFbXHvk
RH80aQpqOhW5jWsEKtz8+ComJ8Kxl5mgcNzc+LKBGxQuMNNweAMK/OXeHlkMSbnw
YklR7UU=
-----END CERTIFICATE-----
Generated at Thu Feb 19 21:23:02 2026 by rpki-client