Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/AA872C46B89711F0A8B6AF18C4F9AE02.roa
File:                     AA872C46B89711F0A8B6AF18C4F9AE02.roa (raw, json)
Hash identifier:          L8XeDcqYKfEwtUixbxiuEo2nfMcVKjSSiCD4J312+Jo=
Subject key identifier:   11:E3:15:05:DF:A6:A4:7A:F1:34:7C:14:F0:D7:40:4B:78:39:A0:FA
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0BC7
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/AA872C46B89711F0A8B6AF18C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:01:00 +0000
ROA not before:           Mon 03 Nov 2025 09:29:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        61.15.92.0/23 maxlen: 24
                          61.15.98.0/23 maxlen: 24
                          61.15.100.0/22 maxlen: 24
                          61.15.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3015 (0xbc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Nov  3 09:29:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a48cec-6395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6d:fe:c2:43:45:d1:ff:ee:1e:9c:0d:ce:12:
                    8d:94:0a:96:f1:ea:a0:65:28:67:54:3a:c3:c4:12:
                    40:7c:b3:21:b8:f5:39:22:d9:cc:19:b4:b3:61:51:
                    ab:28:19:58:63:30:de:b8:2c:59:2c:eb:60:8b:12:
                    ce:1e:82:c1:c4:53:e7:13:a7:a7:7e:08:c2:6a:64:
                    8c:1f:7c:e3:15:e8:49:45:a6:c5:66:83:00:b0:fe:
                    ef:2c:1f:35:ea:4a:45:c2:df:9a:c1:d9:68:5f:5e:
                    0b:63:ab:bb:a5:4f:45:03:29:dd:7c:b5:63:22:f4:
                    af:c4:94:19:f2:21:55:d1:52:05:3b:2c:43:3b:1b:
                    b1:2d:39:9b:32:cb:b1:8e:8f:66:3d:f2:09:e0:84:
                    76:88:a4:53:ee:21:f8:6a:43:29:98:54:b2:de:27:
                    db:90:a5:84:c5:78:45:ed:3a:c0:e5:3b:42:3a:d3:
                    74:6c:28:f7:b8:9c:b7:45:82:5c:d2:7f:29:89:ad:
                    97:6d:e3:bf:d5:d8:c2:01:a4:8c:d6:29:77:82:f8:
                    13:86:63:3c:5c:62:7a:64:41:fe:ec:9f:18:72:e3:
                    8e:fe:9b:2c:15:fe:b7:64:bf:f7:95:93:c0:72:d6:
                    e3:a5:be:20:35:c8:c7:aa:8b:b2:f7:be:ad:ac:87:
                    66:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E3:15:05:DF:A6:A4:7A:F1:34:7C:14:F0:D7:40:4B:78:39:A0:FA
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/AA872C46B89711F0A8B6AF18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.15.92.0/23
                  61.15.98.0-61.15.103.255
                  61.15.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:3e:fb:47:7f:08:67:b6:a4:82:2b:ee:c0:3a:08:7b:cb:9d:
         87:da:f1:3f:68:fa:7d:a7:b5:b8:3a:5a:46:32:c3:47:6e:98:
         1a:91:16:55:04:25:d3:77:3c:f2:c7:dc:cf:87:aa:64:11:94:
         b0:88:40:13:88:60:b1:1b:17:6e:23:12:3c:e2:26:d2:ae:90:
         22:7f:8d:37:d1:43:88:8f:2e:b5:0f:8a:0d:e6:ce:9f:49:59:
         7c:2d:88:e5:0c:f2:e4:60:87:a5:84:58:c3:4b:71:0e:0f:3f:
         fd:cb:9f:6f:a8:66:05:09:52:8a:3c:eb:42:ff:a7:9d:ab:33:
         d1:3b:0d:9e:2a:ec:8a:fd:06:8a:cf:2f:49:2a:61:23:c6:13:
         fb:2a:ee:a9:16:7e:4d:ab:92:39:6a:d7:74:83:10:c7:f7:37:
         c0:70:30:76:9f:75:3c:88:ba:3e:42:08:7b:e1:a0:20:b0:e5:
         bb:08:e6:04:13:0a:1c:ca:f2:98:d0:99:86:90:54:ea:de:60:
         3b:45:98:01:cc:e6:c3:f6:50:d3:a8:e6:35:0b:d8:b7:90:ad:
         81:c1:a1:48:d8:01:3b:ed:89:f4:44:eb:09:e3:9d:f3:8c:3c:
         b9:2c:d1:81:1b:94:13:fe:c8:d5:7a:ad:b1:66:37:a9:bf:63:
         35:62:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:13 2026 by rpki-client