Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa
File:                     955A10B4D61111E999D7033CC4F9AE02.roa (raw, json)
Hash identifier:          k5WUfjufMtiaq8EACsvsn18TEnqesW/PihKGnomX1TE=
Subject key identifier:   D6:4F:C1:1C:9F:B5:6B:1D:1C:D9:4B:7B:68:DB:26:D6:B2:6D:75:79
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2BEC
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:23:42 +0000
ROA not before:           Fri 02 Jan 2026 16:13:56 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9551
IP address blocks:        49.231.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11244 (0x2bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Jan  2 16:13:56 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4923e-b526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:37:6c:d1:73:39:a4:5a:85:ca:c9:64:b2:
                    3c:0c:17:27:f0:f8:01:e5:96:67:89:b9:2d:48:23:
                    39:8d:54:52:13:00:59:5a:57:b1:a4:fa:ab:dc:13:
                    07:d2:43:5b:c6:1f:89:7b:01:38:0b:38:53:c8:19:
                    8a:0c:6c:ba:fc:7f:23:65:76:e7:1f:af:ed:fc:18:
                    35:9e:cf:22:e2:31:8e:8e:90:fb:22:d1:ad:88:50:
                    bd:28:9b:5a:d9:5b:1c:d7:2e:b4:7b:a8:5a:b3:03:
                    a0:9a:fe:7d:74:bd:d7:9d:bd:2c:5b:a5:9c:e0:43:
                    fe:41:40:b3:61:bb:fe:fb:15:2e:0f:a7:d5:32:9d:
                    37:62:d1:ef:96:ed:83:76:88:45:85:ba:ac:13:ee:
                    54:db:52:5c:97:68:9d:c3:98:fa:f8:2d:b3:e7:e5:
                    e4:55:ef:2b:62:79:97:34:d2:ac:c0:27:07:60:27:
                    a8:31:b1:ad:95:46:0b:f7:7d:b5:90:8e:31:9c:25:
                    e1:fe:cb:3c:a3:d3:23:48:53:7e:cf:11:a3:c1:63:
                    75:7e:c7:33:d9:84:7a:dd:f1:68:94:6e:b7:60:11:
                    b7:f0:ef:5a:12:83:38:31:e3:b6:2e:d0:21:13:91:
                    b8:ea:b9:59:18:a0:4e:d4:c2:3d:c8:f1:8e:e7:e1:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:C1:1C:9F:B5:6B:1D:1C:D9:4B:7B:68:DB:26:D6:B2:6D:75:79
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.231.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:ba:6f:a6:b0:a4:95:22:fd:2f:d8:0f:cf:3d:7f:bc:20:
         ff:bc:8b:bd:c7:a9:53:1b:26:e3:60:76:95:34:98:81:6c:a4:
         05:c3:48:20:c4:39:d3:19:40:af:08:58:20:0a:95:39:f2:7a:
         61:d3:54:c8:24:06:6a:f3:a7:3e:8f:62:62:0c:1c:e2:5a:10:
         6f:89:be:fa:e3:6f:52:b0:12:f3:d6:df:c8:9a:59:b2:76:51:
         8e:bc:b1:ad:18:b3:2b:05:3f:69:81:75:d2:9c:3a:d9:1e:18:
         b4:64:43:36:b9:ec:25:4a:33:44:93:87:25:d1:0a:1d:b2:0d:
         16:6d:f4:ac:70:cf:a3:53:6f:f3:1a:39:b4:0c:40:19:e9:c1:
         44:9d:05:f2:2f:0b:9b:ee:bf:62:e8:6d:25:f6:e6:4c:95:13:
         c9:fb:38:b3:11:5c:b2:ce:b8:22:db:aa:53:7b:2f:f4:28:93:
         63:3a:42:b4:99:c5:30:5e:69:a6:08:6a:0b:a9:b4:63:50:0f:
         85:66:10:e5:9e:ba:ba:0d:ed:da:6a:01:aa:3e:1f:82:1d:62:
         37:55:93:35:f7:0c:b4:f3:43:50:bd:2f:cc:e4:94:0d:53:6a:
         95:a2:d3:61:0b:9a:ee:f9:bf:5b:0e:b0:29:8d:3d:20:09:44:
         f2:1b:9e:83
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzU2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTIzZS1iNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApNs3bNFzOaRahcrJZLI8DBcn8PgB5ZZnibktSCM5jVRSEwBZWlexpPqr3BMH
0kNbxh+JewE4CzhTyBmKDGy6/H8jZXbnH6/t/Bg1ns8i4jGOjpD7ItGtiFC9KJta
2Vsc1y60e6haswOgmv59dL3Xnb0sW6Wc4EP+QUCzYbv++xUuD6fVMp03YtHvlu2D
dohFhbqsE+5U21Jcl2idw5j6+C2z5+XkVe8rYnmXNNKswCcHYCeoMbGtlUYL9321
kI4xnCXh/ss8o9MjSFN+zxGjwWN1fscz2YR63fFolG63YBG38O9aEoM4MeO2LtAh
E5G46rlZGKBO1MI9yPGO5+Fm3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNZPwRyf
tWsdHNlLe2jbJtaybXV5MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvOTU1QTEwQjRE
NjExMTFFOTk5RDcwMzNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBMefoMA0GCSqGSIb3DQEBCwUAA4IBAQAOl7pvprCklSL9L9gPzz1/
vCD/vIu9x6lTGybjYHaVNJiBbKQFw0ggxDnTGUCvCFggCpU58nph01TIJAZq86c+
j2JiDBziWhBvib76429SsBLz1t/ImlmydlGOvLGtGLMrBT9pgXXSnDrZHhi0ZEM2
uewlSjNEk4cl0Qodsg0WbfSscM+jU2/zGjm0DEAZ6cFEnQXyLwub7r9i6G0l9uZM
lRPJ+zizEVyyzrgi26pTey/0KJNjOkK0mcUwXmmmCGoLqbRjUA+FZhDlnrq6De3a
agGqPh+CHWI3VZM19wy080NQvS/M5JQNU2qVotNhC5ru+b9bDrApjT0gCUTyG56D
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:38 2026 by rpki-client