Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/0AD382BA3AC211F08E4A722CC4F9AE02.roa
File:                     0AD382BA3AC211F08E4A722CC4F9AE02.roa (raw, json)
Hash identifier:          4UkZmGMtMgidHUh2uNVdZrHG6v8E7JRiip06TQCEA/o=
Subject key identifier:   C2:BE:34:EB:2F:0A:51:C3:F4:11:67:5E:50:F4:13:ED:64:A1:4C:54
Certificate issuer:       /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial:       35AC
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/0AD382BA3AC211F08E4A722CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:21:21 +0000
ROA not before:           Thu 16 Oct 2025 15:20:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133066
IP address blocks:        119.59.83.0/24 maxlen: 24
                          119.59.84.0/24 maxlen: 24
                          119.59.85.0/24 maxlen: 24
                          121.100.51.0/24 maxlen: 24
                          121.100.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
                          rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13740 (0x35ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
        Validity
            Not Before: Oct 16 15:20:51 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46781-0929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:37:ec:1c:f0:9f:d0:ae:78:db:8a:10:ba:
                    7a:53:d5:7c:77:9f:bc:71:04:d1:93:48:90:15:1d:
                    7f:47:ed:14:24:69:71:a5:b3:2d:a6:6c:99:15:35:
                    fa:e7:80:d5:8a:b0:76:f9:2c:16:77:68:2f:b0:21:
                    cb:9f:c4:c9:ea:84:47:34:4c:36:0e:7d:b2:66:96:
                    a5:36:d6:98:fc:ff:46:2f:2b:e9:fb:eb:55:55:c5:
                    88:ea:b8:d1:41:70:f3:cd:a2:7a:ea:21:c0:07:a2:
                    f0:c1:3e:e2:a4:1d:be:d6:a7:e6:06:92:ac:06:18:
                    94:aa:9b:95:79:a9:24:e5:3e:24:b9:3f:3d:67:09:
                    15:0c:3e:42:d8:a2:ed:9b:07:bf:54:ad:7c:56:a9:
                    6c:45:cb:95:f9:36:c9:16:90:c5:f6:58:20:c4:2b:
                    21:9e:cb:ad:79:5a:67:f9:45:09:67:0f:6f:a3:32:
                    91:65:54:95:d5:e0:85:85:e5:28:28:16:fb:4a:d3:
                    fe:a0:0d:85:92:cf:c9:01:3c:f4:50:bd:c3:c3:65:
                    14:a5:8d:95:42:39:b3:5a:35:25:81:86:f5:96:bf:
                    2b:6f:a4:08:c7:c2:2e:b2:65:e6:a9:02:02:a2:df:
                    ca:63:07:f4:83:4c:b0:23:2e:39:c6:76:82:bc:20:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BE:34:EB:2F:0A:51:C3:F4:11:67:5E:50:F4:13:ED:64:A1:4C:54
            X509v3 Authority Key Identifier:
                keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/0AD382BA3AC211F08E4A722CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.83.0-119.59.85.255
                  121.100.51.0-121.100.52.255

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:71:aa:1b:47:2f:b0:95:ce:2f:10:3e:af:04:cd:d8:26:
         4e:ef:fb:d9:a7:e2:05:e7:77:f0:80:30:ce:a6:f7:7e:84:6c:
         1d:87:cd:8d:8d:16:a9:ee:34:0e:8c:2d:7c:99:a6:58:d2:6d:
         50:df:4f:0a:6e:aa:e6:46:53:07:fb:4f:1c:fe:45:46:c7:bc:
         be:b0:75:b9:6e:45:b3:8e:12:d0:92:74:5b:38:08:ca:98:37:
         6c:07:b2:66:a6:33:0f:b5:5f:d6:80:06:f0:95:75:19:8b:3e:
         01:23:63:20:94:8e:04:ac:3a:22:6c:b3:3d:47:e3:06:2e:c3:
         b6:0a:a7:26:d2:b7:9e:13:b4:61:a0:27:42:24:a7:a1:9d:b9:
         bc:1a:c9:b8:25:5f:fe:14:b9:32:52:84:fc:c1:74:ac:97:fd:
         bc:8b:1b:7c:b5:2f:13:08:e7:e6:63:fe:74:55:18:4e:7a:2c:
         35:b9:6d:0e:b7:3a:96:8a:b3:27:63:1f:1d:13:48:f8:e5:38:
         78:c5:23:83:a9:98:8a:1b:28:99:fc:e6:ed:13:bc:14:2f:f3:
         81:50:6e:09:50:84:78:38:ca:33:83:8f:80:26:42:36:0f:35:
         ea:12:ff:8b:6a:68:d2:32:07:38:c5:33:59:87:c8:fd:7d:1f:
         19:e9:4b:a5
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgICNawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB
MkUwMkZEQTMwHhcNMjUxMDE2MTUyMDUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Njc4MS0wOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3tM37Bzwn9CueNuKELp6U9V8d5+8cQTRk0iQFR1/R+0UJGlxpbMtpmyZFTX6
54DVirB2+SwWd2gvsCHLn8TJ6oRHNEw2Dn2yZpalNtaY/P9GLyvp++tVVcWI6rjR
QXDzzaJ66iHAB6LwwT7ipB2+1qfmBpKsBhiUqpuVeakk5T4kuT89ZwkVDD5C2KLt
mwe/VK18VqlsRcuV+TbJFpDF9lggxCshnsuteVpn+UUJZw9vozKRZVSV1eCFheUo
KBb7StP+oA2Fks/JATz0UL3Dw2UUpY2VQjmzWjUlgYb1lr8rb6QIx8IusmXmqQIC
ot/KYwf0g0ywIy45xnaCvCAvVQIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFMK+NOsv
ClHD9BFnXlD0E+1koUxUMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE
OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhDN0IvNjc1MjA4QUUxRDkzMTFFMkJDQkRFNUY2MDhCMDJDRDIvMEFEMzgyQkEz
QUMyMTFGMDhFNEE3MjJDQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi
BAIAATAcMAwDBAB3O1MDBAF3O1QwDAMEAHlkMwMEAHlkNDANBgkqhkiG9w0BAQsF
AAOCAQEAE7txqhtHL7CVzi8QPq8EzdgmTu/72afiBed38IAwzqb3foRsHYfNjY0W
qe40DowtfJmmWNJtUN9PCm6q5kZTB/tPHP5FRse8vrB1uW5Fs44S0JJ0WzgIypg3
bAeyZqYzD7Vf1oAG8JV1GYs+ASNjIJSOBKw6ImyzPUfjBi7DtgqnJtK3nhO0YaAn
QiSnoZ25vBrJuCVf/hS5MlKE/MF0rJf9vIsbfLUvEwjn5mP+dFUYTnosNbltDrc6
loqzJ2MfHRNI+OU4eMUjg6mYihsomfzm7RO8FC/zgVBuCVCEeDjKM4OPgCZCNg81
6hL/i2po0jIHOMUzWYfI/X0fGelLpQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:03 2026 by rpki-client