Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
File:                     744F6602B5B511EEACE32B4DC4F9AE02.roa (raw, json)
Hash identifier:          2Lw/zrNhfXPZUVb6tJNCIUuOt97MTrdaQiGSvEdRrSg=
Subject key identifier:   18:0C:23:98:E7:98:FD:71:2E:1F:40:6F:00:E8:18:9C:14:12:E1:64
Certificate issuer:       /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial:       0193
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:02:42 +0000
ROA not before:           Mon 05 Jan 2026 03:23:03 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     56304
IP address blocks:        192.156.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
                          rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
        Validity
            Not Before: Jan  5 03:23:03 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41cd2-5ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:71:0c:4d:7e:a9:a0:7d:f0:0b:d4:90:02:
                    ce:5c:89:b0:c4:fd:23:09:33:f6:9d:db:9a:d7:cf:
                    b1:30:19:d9:16:15:90:e4:81:2a:9b:dd:84:93:6c:
                    eb:45:d7:13:70:2d:07:cb:51:be:ea:36:5e:5d:36:
                    17:dd:a7:f6:3f:c2:4b:16:b6:f2:09:63:07:a5:63:
                    9e:a3:88:c1:26:af:66:dc:fb:c5:07:a7:b9:b4:56:
                    b7:cf:03:8e:99:5d:15:69:36:1a:b8:05:05:5a:5c:
                    ec:91:90:5a:f5:e4:53:cf:70:7a:47:35:e0:8c:42:
                    3e:03:5f:3d:e8:18:16:d9:54:fd:05:d5:e1:47:fc:
                    5b:17:3b:73:cc:ee:d2:7f:57:c7:56:2a:92:42:f5:
                    aa:e2:a3:01:ef:46:7a:46:c2:6c:4e:ca:6b:76:15:
                    04:cd:9b:89:d6:1f:e5:8e:9f:aa:bd:79:df:79:ca:
                    72:ed:64:a4:8b:65:08:59:91:41:d3:04:56:20:0d:
                    7e:d7:4a:c8:d6:0f:0a:c9:60:d9:e4:ea:f8:4c:7d:
                    0a:70:35:eb:d7:89:3a:1e:17:54:1f:68:b7:84:1c:
                    c2:2a:7f:1e:38:31:72:b5:e0:a0:a3:a0:73:74:ad:
                    78:d4:22:0c:52:d2:3d:1d:ad:dd:2e:e9:7a:dd:47:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:23:98:E7:98:FD:71:2E:1F:40:6F:00:E8:18:9C:14:12:E1:64
            X509v3 Authority Key Identifier:
                keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.156.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:33:8d:97:6d:37:eb:b0:6a:f8:9d:54:98:e7:94:9e:b3:
         16:df:0b:0f:58:23:1a:3d:8c:51:20:1b:24:a9:38:20:38:cf:
         f8:b5:2c:75:33:81:4d:06:8a:95:77:4d:03:a6:03:fe:f9:18:
         14:83:aa:3a:da:21:7f:08:f0:d5:59:fc:21:27:de:39:f7:38:
         ca:59:ba:24:c0:ad:26:cf:60:c0:5e:f8:29:cc:8f:79:81:8b:
         75:07:02:88:3d:f6:a6:4d:e6:87:fa:57:f0:2b:89:e6:2e:c4:
         e7:2f:e1:6c:89:3e:75:c7:54:b9:32:97:2b:b1:00:8f:57:d1:
         30:ae:aa:e6:af:65:64:64:eb:85:a1:d0:f4:92:17:b2:17:31:
         e5:6a:5b:0d:5d:8a:f4:00:7e:98:0c:e9:df:70:9d:43:1b:85:
         83:26:9a:3b:dd:10:b9:6a:25:f7:74:e0:5b:8b:71:3f:d6:63:
         13:fb:43:55:8b:b3:fa:81:0c:59:6f:e8:2f:b9:4f:3c:e8:a9:
         89:04:c5:d6:54:b5:3a:8b:8f:56:4e:b3:98:fd:78:db:a4:e0:
         74:06:94:69:cc:e4:bd:b7:d7:6c:54:38:50:00:a2:06:84:23:
         80:1f:93:57:49:9f:bc:fb:eb:84:f8:3b:19:8d:d1:8d:bc:9d:
         c4:c0:40:d3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw
QkE0RDE2OEEwHhcNMjYwMTA1MDMyMzAzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWNkMi01YmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArudxDE1+qaB98AvUkALOXImwxP0jCTP2ndua18+xMBnZFhWQ5IEqm92Ek2zr
RdcTcC0Hy1G+6jZeXTYX3af2P8JLFrbyCWMHpWOeo4jBJq9m3PvFB6e5tFa3zwOO
mV0VaTYauAUFWlzskZBa9eRTz3B6RzXgjEI+A1896BgW2VT9BdXhR/xbFztzzO7S
f1fHViqSQvWq4qMB70Z6RsJsTsprdhUEzZuJ1h/ljp+qvXnfecpy7WSki2UIWZFB
0wRWIA1+10rI1g8KyWDZ5Or4TH0KcDXr14k6HhdUH2i3hBzCKn8eODFyteCgo6Bz
dK141CIMUtI9Ha3dLul63Ufm/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBgMI5jn
mP1xLh9AbwDoGJwUEuFkMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1
QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZEREQvRUNERUExRjZCNUI0MTFFRUI3RTcwQzRDQzRGOUFFMDIvNzQ0RjY2MDJC
NUI1MTFFRUFDRTMyQjREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwJzhMA0GCSqGSIb3DQEBCwUAA4IBAQBpqjONl20367Bq+J1UmOeU
nrMW3wsPWCMaPYxRIBskqTggOM/4tSx1M4FNBoqVd00DpgP++RgUg6o62iF/CPDV
WfwhJ9459zjKWbokwK0mz2DAXvgpzI95gYt1BwKIPfamTeaH+lfwK4nmLsTnL+Fs
iT51x1S5MpcrsQCPV9Ewrqrmr2VkZOuFodD0kheyFzHlalsNXYr0AH6YDOnfcJ1D
G4WDJpo73RC5aiX3dOBbi3E/1mMT+0NVi7P6gQxZb+gvuU886KmJBMXWVLU6i49W
TrOY/XjbpOB0BpRpzOS9t9dsVDhQAKIGhCOAH5NXSZ+8++uE+DsZjdGNvJ3EwEDT
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:58 2026 by rpki-client