Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AD3146462A4111EBA1B1BB3DC4F9AE02.roa
File:                     AD3146462A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          Oi5uMTAf1h4Vei1KhlKA8uQm52ekXchQEc08BcoO+Rg=
Subject key identifier:   20:76:48:17:4F:94:FD:B5:59:D3:82:1D:41:55:57:AB:D2:70:7B:4A
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       09AB
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AD3146462A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:13:32 +0000
ROA not before:           Tue 20 May 2025 21:50:47 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133529
IP address blocks:        203.151.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2475 (0x9ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: May 20 21:50:47 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48fdc-bd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:b3:ff:d7:64:4a:e3:86:56:bc:76:a0:80:
                    69:d9:c6:56:f4:04:e1:fc:7d:17:eb:db:01:73:a5:
                    8b:2e:67:2c:da:80:79:71:62:cc:cc:3f:1f:0e:7d:
                    0b:95:11:f8:ec:28:9f:37:84:82:cd:6c:0c:05:db:
                    08:39:14:ef:d4:cc:c1:58:e4:9c:b7:02:28:c1:1a:
                    7f:49:c9:5f:6b:c2:2d:01:ec:a2:39:e2:64:a3:44:
                    db:e2:b3:b7:1c:f1:86:b8:ff:19:02:d4:5b:4e:94:
                    73:68:2c:3e:8c:d2:5d:6d:52:95:12:b2:94:c3:9f:
                    03:3d:57:0a:0e:e8:e3:c0:e9:25:46:fa:ad:64:cb:
                    52:0c:87:af:6f:46:3e:07:c3:64:e8:c6:2c:62:40:
                    4f:ca:02:20:a9:81:87:75:32:3a:4e:b2:86:b4:ba:
                    df:0e:e7:c8:2d:37:e2:b6:93:9f:aa:38:da:71:e8:
                    50:73:84:64:fe:26:e8:55:ef:52:07:90:e6:69:3a:
                    f6:1a:78:01:6c:11:68:58:56:a4:e9:0f:79:7e:0c:
                    62:db:9c:6c:09:2b:22:31:2e:e0:5e:7e:18:02:0a:
                    d1:2b:9d:d8:67:04:0d:42:79:23:ca:8b:23:45:f0:
                    cd:75:03:ee:b7:4d:70:0a:03:fd:f3:9e:09:f5:72:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:76:48:17:4F:94:FD:B5:59:D3:82:1D:41:55:57:AB:D2:70:7B:4A
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AD3146462A4111EBA1B1BB3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.151.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:23:b6:30:5e:b0:b7:41:2f:b6:b9:2b:3b:3b:54:4d:2e:8d:
         10:16:b5:1b:c8:09:9a:c1:b7:15:42:be:9f:78:12:9b:f7:ff:
         29:4a:3a:8f:0b:c8:09:be:76:24:8f:7d:31:93:b1:6b:c8:7f:
         27:15:b4:de:4a:1d:b4:57:30:dc:53:b5:47:e0:92:77:37:2a:
         24:7c:59:ef:7b:70:0b:2e:8a:97:83:d4:e1:9e:d1:df:9c:15:
         1a:25:42:ce:0e:80:84:57:73:5a:9d:e7:58:af:f4:8a:61:34:
         6c:d8:e5:f2:2b:12:60:59:72:6c:97:17:cc:ff:2c:ef:7b:0c:
         76:ea:01:00:97:63:19:45:b8:49:f0:df:13:3e:ed:fe:0d:e3:
         d6:b8:99:0a:ac:1a:eb:4a:c9:59:b4:7a:99:47:d0:ef:26:08:
         d3:8e:a8:7a:62:24:e4:0b:30:44:bf:92:dc:7d:4b:be:42:70:
         26:3a:13:a4:65:30:28:a3:90:5d:b7:41:13:df:df:50:ea:f3:
         78:68:79:0b:cd:fe:2e:63:d1:38:31:35:33:e1:bf:48:b1:bf:
         d5:d6:41:89:a6:b4:ef:b1:21:d4:83:5f:85:95:f7:b7:b0:3f:
         b5:70:eb:c8:e0:3a:40:95:45:df:ff:a5:cc:30:45:53:92:e7:
         d0:58:61:3b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjUwNTIwMjE1MDQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGZkYy1iZDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4rqz/9dkSuOGVrx2oIBp2cZW9ATh/H0X69sBc6WLLmcs2oB5cWLMzD8fDn0L
lRH47CifN4SCzWwMBdsIORTv1MzBWOSctwIowRp/Sclfa8ItAeyiOeJko0Tb4rO3
HPGGuP8ZAtRbTpRzaCw+jNJdbVKVErKUw58DPVcKDujjwOklRvqtZMtSDIevb0Y+
B8Nk6MYsYkBPygIgqYGHdTI6TrKGtLrfDufILTfitpOfqjjacehQc4Rk/iboVe9S
B5DmaTr2GngBbBFoWFak6Q95fgxi25xsCSsiMS7gXn4YAgrRK53YZwQNQnkjyosj
RfDNdQPut01wCgP9854J9XK5LwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCB2SBdP
lP21WdOCHUFVV6vScHtKMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvQUQzMTQ2NDYy
QTQxMTFFQkExQjFCQjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy5cBMA0GCSqGSIb3DQEBCwUAA4IBAQCyI7YwXrC3QS+2uSs7O1RN
Lo0QFrUbyAmawbcVQr6feBKb9/8pSjqPC8gJvnYkj30xk7FryH8nFbTeSh20VzDc
U7VH4JJ3NyokfFnve3ALLoqXg9ThntHfnBUaJULODoCEV3NanedYr/SKYTRs2OXy
KxJgWXJslxfM/yzvewx26gEAl2MZRbhJ8N8TPu3+DePWuJkKrBrrSslZtHqZR9Dv
JgjTjqh6YiTkCzBEv5LcfUu+QnAmOhOkZTAoo5Bdt0ET399Q6vN4aHkLzf4uY9E4
MTUz4b9Isb/V1kGJprTvsSHUg1+Flfe3sD+1cOvI4DpAlUXf/6XMMEVTkufQWGE7
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:03 2026 by rpki-client