Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9F196B2EC91A11F0AAB4C673C4F9AE02.roa
File:                     9F196B2EC91A11F0AAB4C673C4F9AE02.roa (raw, json)
Hash identifier:          tyQ+cSqsH2Qv0ddD7XoDmKPDoTkmyW/CRBZ+upSwUfo=
Subject key identifier:   01:29:D4:75:CC:D7:68:C3:25:9B:8A:5D:2D:52:C1:D8:E1:AA:D9:AD
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       D5
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9F196B2EC91A11F0AAB4C673C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:11:19 +0000
ROA not before:           Mon 24 Nov 2025 09:47:42 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152463
IP address blocks:        122.154.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 09:47:42 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48f57-a72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:ae:5f:6e:51:73:3a:e6:75:91:28:b2:11:
                    c2:e7:af:c3:6d:7f:0c:50:ec:52:30:02:ff:86:b8:
                    d0:75:1e:3a:92:2b:b0:d7:3f:ba:36:9c:8a:18:d8:
                    1b:41:11:7a:fd:8a:ce:9c:68:5c:29:0b:e5:85:0c:
                    52:7d:df:77:52:e2:2f:a5:8e:80:b8:00:bb:d3:e7:
                    1b:29:6e:10:d4:ad:ea:08:e2:52:81:23:16:0a:2c:
                    8b:3d:f1:4c:70:82:5b:bd:f2:bb:ee:6d:52:10:87:
                    22:07:13:20:f2:ee:94:1f:2c:92:dd:3a:76:7c:22:
                    d9:fc:8d:15:7a:8b:b8:b8:5a:f1:a5:3b:33:e1:c3:
                    20:61:da:d0:b8:07:20:ef:18:85:55:bb:28:17:3e:
                    bf:75:aa:76:14:5c:a0:62:34:7f:c9:55:4a:7b:be:
                    f1:bb:0b:61:1c:a8:04:a3:5b:da:06:42:2b:af:bf:
                    45:d2:c2:1f:a1:61:e5:82:23:bf:a2:09:c9:f3:f2:
                    50:fc:9d:41:b6:9b:c4:1b:9b:c8:92:c6:77:b1:57:
                    3d:03:45:80:83:d1:68:c1:37:ff:22:6f:2e:87:bb:
                    b8:2c:be:b3:fa:a7:74:06:1f:11:c5:8e:f5:c6:4f:
                    14:2f:3f:bb:ea:d8:d4:2b:fa:30:d3:7d:c3:69:c3:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:29:D4:75:CC:D7:68:C3:25:9B:8A:5D:2D:52:C1:D8:E1:AA:D9:AD
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9F196B2EC91A11F0AAB4C673C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.154.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:14:01:5e:60:ed:f9:9d:98:fc:e7:5e:3b:1e:5b:1f:fa:60:
         82:f9:ba:cf:19:d7:1a:23:f3:c5:e9:77:69:c5:69:b0:09:e3:
         01:2f:b2:b8:b6:4f:12:f4:74:b5:5a:8f:39:42:97:de:47:ae:
         58:51:81:36:ab:29:12:8b:5c:82:75:44:73:5f:fc:93:8d:dd:
         fa:98:c1:3d:ab:91:dd:eb:fb:78:50:8d:8f:6a:77:b0:88:d5:
         ac:57:7e:77:97:e1:92:9f:8b:b6:cf:d8:09:7a:75:8c:85:f3:
         32:57:5a:c1:9b:bb:9e:31:f3:42:d2:08:9a:0e:e9:51:1e:2c:
         65:e7:31:0d:4b:cd:aa:09:0b:7b:f5:22:d7:25:be:2d:87:e0:
         3e:f7:9c:ae:d1:d2:27:a5:04:29:85:b4:31:6b:9c:fb:af:7d:
         3f:db:46:90:ea:64:b0:2f:ab:fe:da:e4:92:2e:c3:a8:10:ba:
         f1:84:da:b5:4f:63:b7:e6:dc:8f:b5:e2:71:f5:86:49:3e:37:
         05:8f:44:fb:ab:a6:5d:6e:4d:c8:54:e9:66:d8:51:57:e2:b8:
         fe:b1:d8:2c:82:7a:81:c2:a7:ed:5f:65:df:4e:56:38:35:77:
         40:ce:b0:79:bd:f9:e4:6d:2c:47:00:9d:06:6c:d5:51:05:2e:
         cf:3f:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:44 2026 by rpki-client