Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa
File:                     830A87FCD49511F0ACA42142C4F9AE02.roa (raw, json)
Hash identifier:          gbf5+WQvLdBECmcFZBcgAVO4b+9PW7U0J7cBM1/zEkI=
Subject key identifier:   D5:15:B9:94:9F:46:E7:85:D2:94:3B:98:93:68:40:68:F7:E3:63:FB
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C30
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:46 +0000
ROA not before:           Tue 09 Dec 2025 00:26:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        101.53.86.0/24 maxlen: 24
                          182.237.53.0/24 maxlen: 24
                          182.237.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15408 (0x3c30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Dec  9 00:26:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4af16-2169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:82:32:05:84:9a:92:65:eb:b0:3d:d2:7f:
                    fa:9c:f9:b0:f7:91:3c:4a:dc:1b:70:2f:51:2a:3d:
                    4a:bd:06:f7:b5:55:7d:9b:a7:22:43:65:2f:22:9f:
                    d9:14:1c:45:66:f7:c8:92:68:b7:c1:15:a8:b5:c5:
                    ba:28:7f:b0:6f:8c:11:a2:68:16:1e:39:56:43:73:
                    a7:c2:2b:da:83:14:2a:c5:ee:65:28:ba:20:73:4a:
                    87:54:06:7d:b4:9b:8a:fe:68:b6:ac:04:56:fd:ef:
                    dc:39:3b:36:cf:36:d2:34:72:05:18:85:1b:9a:c5:
                    7a:a7:22:aa:3f:58:41:0a:b9:c5:dc:b5:d7:78:10:
                    b8:bc:e9:8f:65:7c:f4:d8:2a:ad:14:71:ec:66:a9:
                    35:0f:fb:af:bf:82:aa:d3:3e:fd:c7:d9:14:bb:da:
                    b7:38:00:1b:4a:3d:71:4c:1e:f0:75:55:7a:78:40:
                    a3:0b:d7:02:81:e4:dd:ef:6c:25:d7:1b:1d:cb:34:
                    4c:49:25:14:47:53:cf:75:d0:a9:20:df:b7:ad:6b:
                    0d:08:c2:3a:af:80:27:2e:00:92:75:ff:6e:e1:a8:
                    53:3a:a3:45:8f:40:4c:f6:84:95:56:54:ed:fe:4c:
                    7c:60:3e:ec:53:0c:f1:a8:2d:21:0a:ac:23:90:65:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:15:B9:94:9F:46:E7:85:D2:94:3B:98:93:68:40:68:F7:E3:63:FB
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/830A87FCD49511F0ACA42142C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.53.86.0/24
                  182.237.53.0/24
                  182.237.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:f2:45:b1:40:76:46:25:6d:e6:5f:a3:c6:c5:f9:50:6c:f1:
         da:b1:ba:4f:82:b6:87:43:2e:54:bc:dc:6d:7d:ac:fa:73:46:
         ad:d7:fc:3f:32:30:ba:1b:2f:e0:4e:b5:a9:30:fa:c3:1a:68:
         09:3d:9b:de:06:8b:f0:e3:68:c9:65:d3:13:59:b5:a2:66:46:
         05:42:39:81:8b:3e:c9:e3:c7:e6:7d:2e:64:66:aa:99:6b:84:
         c7:e8:c9:de:22:85:0b:9e:07:b2:fd:8e:78:06:3f:e3:b9:03:
         e2:15:1f:cc:6a:e0:28:a2:a8:2b:1d:ef:7f:4d:90:0c:d1:1d:
         81:5d:1c:d7:7c:7f:a1:cf:70:0e:ac:89:5e:39:54:63:de:43:
         11:68:b0:d3:6a:dc:3a:4a:59:fa:d1:d9:4f:a0:8a:7f:61:f7:
         97:56:d6:7f:bf:ae:4f:3d:7b:de:a0:66:fc:55:ad:df:96:24:
         61:e7:19:40:22:c3:29:c3:a6:dc:aa:5d:63:81:df:21:f6:ff:
         37:74:9a:66:22:01:21:52:cb:8e:4f:ea:e7:76:6e:fb:f7:f1:
         3e:68:f6:40:f2:82:63:fb:7f:27:2c:83:a0:57:b2:f8:94:6a:
         fb:2d:9f:0a:24:af:b4:a2:93:7c:d3:0f:d9:da:7a:fd:3a:6c:
         49:92:42:00
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICPDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUxMjA5MDAyNjMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWYxNi0yMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw4SCMgWEmpJl67A90n/6nPmw95E8StwbcC9RKj1KvQb3tVV9m6ciQ2UvIp/Z
FBxFZvfIkmi3wRWotcW6KH+wb4wRomgWHjlWQ3OnwivagxQqxe5lKLogc0qHVAZ9
tJuK/mi2rARW/e/cOTs2zzbSNHIFGIUbmsV6pyKqP1hBCrnF3LXXeBC4vOmPZXz0
2CqtFHHsZqk1D/uvv4Kq0z79x9kUu9q3OAAbSj1xTB7wdVV6eECjC9cCgeTd72wl
1xsdyzRMSSUUR1PPddCpIN+3rWsNCMI6r4AnLgCSdf9u4ahTOqNFj0BM9oSVVlTt
/kx8YD7sUwzxqC0hCqwjkGXPgQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNUVuZSf
RueF0pQ7mJNoQGj342P7MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvODMwQTg3RkNE
NDk1MTFGMEFDQTQyMTQyQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZTVWAwQAtu01AwQAtu0/MA0GCSqGSIb3DQEBCwUAA4IBAQDh8kWx
QHZGJW3mX6PGxflQbPHasbpPgraHQy5UvNxtfaz6c0at1/w/MjC6Gy/gTrWpMPrD
GmgJPZveBovw42jJZdMTWbWiZkYFQjmBiz7J48fmfS5kZqqZa4TH6MneIoULngey
/Y54Bj/juQPiFR/MauAooqgrHe9/TZAM0R2BXRzXfH+hz3AOrIleOVRj3kMRaLDT
atw6Sln60dlPoIp/YfeXVtZ/v65PPXveoGb8Va3fliRh5xlAIsMpw6bcql1jgd8h
9v83dJpmIgEhUsuOT+rndm779/E+aPZA8oJj+38nLIOgV7L4lGr7LZ8KJK+0opN8
0w/Z2nr9OmxJkkIA
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:28 2026 by rpki-client