Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa
File:                     D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (raw, json)
Hash identifier:          DS+0KFmcBE9DXzoqd+clX1iffNG/TJDheFzOy8o3k5w=
Subject key identifier:   B8:AC:D9:9F:8E:75:52:4F:29:29:16:BB:17:BA:06:8A:1A:3F:1F:DF
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       022F
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:16:03 +0000
ROA not before:           Fri 09 May 2025 02:52:22 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        116.197.148.0/24 maxlen: 24
                          116.197.150.0/24 maxlen: 24
                          116.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: May  9 02:52:22 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3f5c3-e006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:3c:48:c3:5a:22:ec:79:ef:59:79:5a:6f:
                    9c:49:83:1e:a4:37:31:89:da:77:27:6f:72:bc:87:
                    a8:4a:c8:1a:90:19:c1:ed:14:d2:6b:18:38:09:25:
                    9e:a7:21:b5:31:a5:4c:d2:0a:13:7e:30:12:5d:70:
                    24:52:a6:c1:18:eb:3a:02:2b:80:50:da:ed:6e:a8:
                    7c:e9:c8:ea:76:4c:f1:15:a7:1a:11:95:f0:2b:be:
                    a9:c6:c8:00:61:11:2d:f1:1c:3a:6d:58:4a:ab:2c:
                    94:c5:7b:58:28:95:73:da:37:c2:24:b3:fe:f3:1f:
                    46:ac:eb:90:58:1b:79:79:46:0b:6b:ef:d3:c7:91:
                    10:b1:c4:99:ad:5c:79:4d:d9:21:db:2c:67:55:40:
                    3f:e2:67:3d:49:0f:12:6a:f1:38:02:18:00:cb:99:
                    60:ac:4c:6d:d0:2c:bc:b8:c9:d4:32:1d:69:80:37:
                    be:ea:a8:6d:fc:8d:16:85:76:0a:d8:6a:8b:b1:69:
                    f0:56:c6:db:55:18:31:6d:35:40:a6:07:cd:9e:83:
                    dd:65:cd:6f:20:a6:e9:ad:24:52:7f:a3:3b:e8:6a:
                    a8:4b:e3:6b:c9:0a:19:7e:c7:79:2a:5c:a8:a3:03:
                    e9:c4:63:97:85:4e:8c:de:7f:b9:7b:2c:28:ee:31:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AC:D9:9F:8E:75:52:4F:29:29:16:BB:17:BA:06:8A:1A:3F:1F:DF
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.148.0/24
                  116.197.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:10:d5:cb:48:7e:5b:6e:74:de:7a:a5:d0:d9:14:3d:10:00:
         2d:52:3c:e8:95:b6:c6:ee:f1:bf:0c:0f:32:30:d6:5b:bc:81:
         f5:6f:81:11:2d:0a:0f:55:ed:9d:93:b1:6e:da:a0:10:e1:2b:
         99:25:0b:59:2d:c8:2a:eb:c4:be:0e:7c:53:a2:3e:38:78:48:
         7f:8c:40:05:2c:e7:5b:1e:9d:23:41:40:7b:9b:f9:3f:ee:76:
         c4:15:05:43:6c:20:65:4f:10:eb:71:c2:e6:cb:3e:c8:dc:4c:
         58:f7:34:55:29:76:e4:63:0c:08:98:fd:6b:73:b4:26:f4:c6:
         7c:cf:0e:6d:f2:96:5a:32:fe:63:97:87:57:6b:f3:70:3c:85:
         94:8f:ba:99:cb:14:5c:9a:a7:47:cd:ae:31:92:15:88:d2:dd:
         3b:4b:7a:ac:50:c7:50:ff:ef:3a:a4:c9:39:0e:38:03:d9:3d:
         30:3e:99:4b:39:35:87:0a:bd:da:ec:a5:5d:59:b8:ce:2a:44:
         70:04:74:dd:82:0c:56:94:09:ea:59:64:1f:e3:a1:2a:7b:ea:
         79:c3:02:20:e3:a3:8d:1a:51:d0:d5:1d:60:08:a2:8f:34:c2:
         9f:1d:65:e2:bc:e8:c0:cc:8c:d2:90:ec:05:c9:c5:54:c2:19:
         61:55:14:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:11 2026 by rpki-client