Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa
File:                     574E0B4810E111F09B0FF441C4F9AE02.roa (raw, json)
Hash identifier:          O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=
Subject key identifier:   DE:6F:AA:63:E8:BE:42:01:33:E2:61:BD:DC:5E:75:19:D1:1C:C5:FE
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       07D4
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:03:58 +0000
ROA not before:           Mon 16 Feb 2026 21:18:22 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        202.87.132.0/24 maxlen: 24
                          2404:2200:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Feb 16 21:18:22 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4717e-90e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:5c:50:d6:2c:3b:75:79:e3:dd:34:b5:3a:
                    9d:c5:ad:57:58:ae:22:fd:7a:2f:98:1e:15:34:fd:
                    a1:47:5e:39:f6:91:fc:f5:c6:88:c7:ad:b2:ca:8f:
                    b1:5b:cc:dd:cc:25:5e:e0:d2:31:6c:3d:3e:4e:e8:
                    6b:c1:a0:dc:14:10:b6:0e:14:98:60:5f:93:b6:64:
                    50:9e:0e:f2:e6:be:38:4a:53:38:7f:90:84:c6:2e:
                    cf:8c:c5:4c:0c:42:63:68:fa:67:3c:f9:ad:a4:82:
                    af:21:0b:dd:93:a8:f5:fd:f5:89:79:73:d1:96:64:
                    99:e7:77:24:03:9f:22:9a:c7:76:b2:7f:e1:03:9c:
                    fa:10:d1:0a:fe:a8:32:0e:f9:b3:b6:0b:8e:ea:c8:
                    c7:da:35:42:b9:40:43:66:78:0b:89:07:a1:9a:96:
                    4a:b5:5d:8d:d3:b8:65:0a:4e:a0:f0:41:ca:64:39:
                    0a:03:1b:fa:14:13:6d:99:75:70:a4:ac:78:27:0d:
                    f9:88:0f:f3:70:fe:57:05:8c:1f:fb:ed:17:88:ed:
                    68:32:bc:f1:33:f4:e5:7e:17:b5:e3:80:f9:52:11:
                    1c:90:19:d2:d7:aa:04:7d:7c:03:df:63:b6:f3:41:
                    30:b3:7d:70:79:4a:2d:79:7c:b8:d5:82:83:ad:6e:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6F:AA:63:E8:BE:42:01:33:E2:61:BD:DC:5E:75:19:D1:1C:C5:FE
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/574E0B4810E111F09B0FF441C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.132.0/24
                IPv6:
                  2404:2200:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:27:11:58:22:ee:b4:fe:b4:68:87:41:89:94:59:51:80:
         e6:b0:4c:30:c4:7d:fb:06:55:61:ad:ce:7c:ee:1b:3b:7a:ed:
         b6:ce:28:66:21:2f:e0:60:cc:49:73:44:0e:ae:30:c7:b3:a4:
         54:ed:a6:1a:7f:af:60:40:b4:c5:01:e5:b0:3d:69:4c:94:7e:
         2e:ce:16:d3:e5:40:aa:f2:e4:a7:a3:05:cb:62:07:64:08:97:
         ee:56:0a:17:84:77:d7:f9:96:27:63:56:de:44:09:15:d5:ec:
         ec:1c:20:2b:5e:01:d2:a5:57:79:c5:83:ad:9f:43:cf:fc:a0:
         8a:e4:eb:e3:97:7f:7f:73:43:b3:88:37:74:e5:cc:79:8d:6e:
         9a:17:02:33:aa:bb:82:db:96:75:81:bf:a1:15:b9:9c:42:5b:
         c9:5f:ee:35:94:9b:4f:89:90:de:96:26:53:7e:d8:3a:e0:f7:
         03:1e:bf:d8:a0:d1:f9:d4:13:8a:1b:6f:a6:f0:89:07:1c:cb:
         72:97:0c:39:bc:e2:b7:8d:bc:ad:9b:5c:3a:9d:d6:2a:3b:ef:
         49:69:4e:c1:57:ea:f9:40:26:1c:17:3c:ab:cc:a3:1a:3f:65:
         37:71:b7:34:c8:6d:14:61:06:82:32:73:6f:17:d5:68:c7:23:
         52:02:1e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:09:51 2026 by rpki-client