Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/8A2C40D474B911F08BA0CD37C4F9AE02.roa
File:                     8A2C40D474B911F08BA0CD37C4F9AE02.roa (raw, json)
Hash identifier:          x1cJvjh7zdmg7T/0iUEkEcxMiM7lfkwPcQV8vAeDdfc=
Subject key identifier:   BC:F6:18:CF:5C:F3:3E:DE:2E:A3:52:C3:82:EE:3C:9E:55:09:1C:D0
Certificate issuer:       /CN=A911BE01/serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
Certificate serial:       70
Authority key identifier: EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/8A2C40D474B911F08BA0CD37C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:13:35 +0000
ROA not before:           Sat 09 Aug 2025 00:43:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151660
IP address blocks:        210.56.150.0/23 maxlen: 24
                          2402:21a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl
                          rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BE01, serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
        Validity
            Not Before: Aug  9 00:43:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3e71e-2137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:33:35:84:fe:f8:eb:98:3b:19:f8:9e:d9:
                    92:b3:af:93:f3:66:8c:42:14:e2:10:d2:42:bb:f5:
                    40:49:e6:a3:f6:27:ae:df:80:bf:93:59:db:42:1d:
                    51:ad:bd:e1:90:07:f4:d1:c9:f5:81:38:92:e6:97:
                    55:fe:7f:97:b6:d4:ee:c6:de:70:25:73:22:31:d2:
                    34:5a:42:62:b3:71:bd:4a:18:fd:c6:ae:fe:06:3b:
                    f9:a0:a4:d3:27:56:b5:e7:4a:a5:8a:48:43:1b:ac:
                    d9:76:8b:be:5a:9b:78:65:fe:0b:d7:d1:70:11:ac:
                    8c:d1:33:bb:91:95:f8:52:0d:1f:59:a3:36:6c:7f:
                    f0:e8:06:42:ce:ac:15:d6:e1:6d:86:8e:3a:02:11:
                    7d:79:ed:e9:8b:c6:88:fa:4d:f0:4a:d8:df:82:4a:
                    23:f1:a1:c5:33:a0:46:f4:3b:d8:4b:10:42:3f:95:
                    40:98:d2:cb:1a:59:2d:a3:7b:be:33:dd:e2:8c:06:
                    18:98:9f:b0:06:7a:54:a1:32:2d:10:c2:f5:99:da:
                    03:bf:a0:7d:4b:a7:a7:5f:27:a8:69:10:76:10:05:
                    37:61:da:ba:df:8d:9e:be:9f:f9:4b:a4:ce:eb:3c:
                    99:57:4d:e6:72:cd:bf:27:6f:f3:15:bb:82:96:a6:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F6:18:CF:5C:F3:3E:DE:2E:A3:52:C3:82:EE:3C:9E:55:09:1C:D0
            X509v3 Authority Key Identifier:
                keyid:EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/8A2C40D474B911F08BA0CD37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.150.0/23
                IPv6:
                  2402:21a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:a8:c0:1a:a2:85:c7:a1:51:69:b5:0e:b6:4d:b8:fe:3d:
         cb:09:99:50:c5:7c:64:47:1b:18:66:22:75:df:c3:10:f7:9f:
         d6:9c:bd:a8:3d:b5:9c:f0:64:e0:fa:48:b5:f9:a4:9c:ec:b6:
         45:c6:b6:ac:61:31:43:a6:9a:05:0a:5f:81:79:e0:99:ef:77:
         10:22:7d:e0:70:ac:b9:36:20:22:07:ac:c2:14:17:24:3c:3d:
         b0:ad:6f:68:1c:45:a2:54:8d:48:72:d6:0d:ab:fc:83:2f:ea:
         5b:b4:d3:76:b3:1e:44:6a:06:1d:6c:7e:fd:84:66:f7:d1:3a:
         41:51:ad:e2:d9:1b:95:59:1a:70:35:c3:95:82:bb:c1:01:92:
         4a:0f:69:63:cc:ec:8d:df:75:47:ed:cb:5a:07:11:e3:11:d8:
         ab:db:fe:9e:bf:c5:3e:a0:35:9b:76:bd:79:09:a3:28:72:44:
         80:8b:4e:1e:f5:6a:bc:ea:dd:d7:73:25:b8:d5:b8:41:06:b7:
         de:00:67:8e:e3:27:29:18:c0:66:35:72:21:02:51:65:84:38:
         fe:7d:83:49:22:19:16:61:6e:73:39:2c:48:8f:78:a6:d4:f1:
         8a:64:38:6d:87:62:8e:f7:ef:59:4a:1a:4d:66:09:71:63:64:
         57:42:b0:cd
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QkUwMTExMC8GA1UEBRMoRUEwNTY0OTk0NEEyNDA0MjM3MDAzQTdGOEJBNDFEOEQ4
NDIyRTcyMTAeFw0yNTA4MDkwMDQzMTRaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNzFlLTIxMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCr6DM1hP7465g7Gfie2ZKzr5PzZoxCFOIQ0kK79UBJ5qP2J67fgL+TWdtCHVGt
veGQB/TRyfWBOJLml1X+f5e21O7G3nAlcyIx0jRaQmKzcb1KGP3Grv4GO/mgpNMn
VrXnSqWKSEMbrNl2i75am3hl/gvX0XARrIzRM7uRlfhSDR9ZozZsf/DoBkLOrBXW
4W2GjjoCEX157emLxoj6TfBK2N+CSiPxocUzoEb0O9hLEEI/lUCY0ssaWS2je74z
3eKMBhiYn7AGelShMi0QwvWZ2gO/oH1Lp6dfJ6hpEHYQBTdh2rrfjZ6+n/lLpM7r
PJlXTeZyzb8nb/MVu4KWpt1lAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUvPYYz1zz
Pt4uo1LDgu48nlUJHNAwHwYDVR0jBBgwFoAU6gVkmUSiQEI3ADp/i6QdjYQi5yEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRTAxLzIzMjNBNDlDNzQ5
RTExRjA4RUFEMkY2NUM0RjlBRTAyLzZnVmttVVNpUUVJM0FEcF9pNlFkallRaTV5
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNmdWa21VU2lRRUkzQURwX2k2UWRqWVFpNXlFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkUwMS8yMzIzQTQ5Qzc0OUUxMUYwOEVBRDJGNjVDNEY5QUUwMi84QTJDNDBENDc0
QjkxMUYwOEJBMENEMzdDNEY5QUUwMi5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE
AgABMAYDBAHSOJYwDQQCAAIwBwMFACQCIaAwDQYJKoZIhvcNAQELBQADggEBAKO0
qMAaooXHoVFptQ62Tbj+PcsJmVDFfGRHGxhmInXfwxD3n9acvag9tZzwZOD6SLX5
pJzstkXGtqxhMUOmmgUKX4F54JnvdxAifeBwrLk2ICIHrMIUFyQ8PbCtb2gcRaJU
jUhy1g2r/IMv6lu003azHkRqBh1sfv2EZvfROkFRreLZG5VZGnA1w5WCu8EBkkoP
aWPM7I3fdUfty1oHEeMR2Kvb/p6/xT6gNZt2vXkJoyhyRICLTh71arzq3ddzJbjV
uEEGt94AZ47jJykYwGY1ciECUWWEOP59g0kiGRZhbnM5LEiPeKbU8YpkOG2HYo73
71lKGk1mCXFjZFdCsM0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:50 2026 by rpki-client