Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0774AB26097511F1BFBC3642103D8C67.roa
File:                     0774AB26097511F1BFBC3642103D8C67.roa (raw, json)
Hash identifier:          imI1HUMvNNG7Tq/gzuKqaErMULaoz7Vx8Zpe6EKDreI=
Subject key identifier:   48:E2:9B:FC:C7:1F:39:B9:93:A1:F7:E9:CD:47:28:DC:98:B9:41:CA
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0F3A
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0774AB26097511F1BFBC3642103D8C67.roa
Signing time:             Sat 14 Feb 2026 07:16:07 +0000
ROA not before:           Sat 14 Feb 2026 07:16:06 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134489
IP address blocks:        111.92.155.0/24 maxlen: 24
                          111.92.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3898 (0xf3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Feb 14 07:16:06 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69902136-389b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:84:6c:50:19:29:e7:f4:09:b2:5b:b2:7d:b6:
                    a8:7f:8b:23:f0:41:9f:f5:08:56:ef:fc:15:c9:08:
                    6c:62:9d:d4:d2:17:4d:d3:81:97:c8:2e:cd:a7:d2:
                    d8:4f:bd:2a:e9:07:a8:fa:18:2b:4b:af:7b:6a:e8:
                    c3:72:c9:97:de:f1:d1:aa:db:c5:a7:5f:d8:d4:21:
                    eb:70:46:f3:e4:e3:79:61:2b:7b:27:30:91:ba:a1:
                    42:85:e0:d7:67:3b:b2:bb:5b:b7:dc:86:52:19:d0:
                    e4:c0:7e:14:0c:74:a1:05:f4:8a:f2:07:56:fa:ca:
                    60:59:12:07:a0:d0:34:8f:b1:86:83:87:75:18:9d:
                    54:38:d2:bf:d8:7d:3b:e1:9f:cb:5e:87:8a:71:b5:
                    56:7c:c3:20:ea:89:3b:ff:a2:ec:82:67:d8:0c:c6:
                    94:72:92:33:f4:48:f4:9c:ac:5e:7b:ce:2b:02:00:
                    14:ce:8d:57:2d:f5:d4:e6:05:44:d1:95:b2:48:53:
                    df:0e:64:9f:2d:39:cc:9c:7e:54:df:86:c5:87:94:
                    07:24:2a:bf:c4:74:d6:80:4b:c2:e2:99:b9:42:e3:
                    45:4c:32:94:12:39:5c:0e:7e:6c:03:6f:0b:28:4c:
                    d8:87:a4:5d:b3:3a:4f:63:87:ff:1a:55:ac:8a:b6:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E2:9B:FC:C7:1F:39:B9:93:A1:F7:E9:CD:47:28:DC:98:B9:41:CA
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/0774AB26097511F1BFBC3642103D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.155.0-111.92.156.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:4f:8c:1c:33:31:cf:25:b6:ba:47:b9:d7:fe:f1:30:66:
         95:8a:5c:70:07:b3:d9:1e:2f:f2:c5:2d:4a:38:e3:09:7b:12:
         d3:12:c7:ea:54:81:c0:02:7f:00:93:01:0b:8d:ed:19:25:85:
         5e:07:6c:84:24:ec:0c:65:ce:34:fd:8f:67:04:21:4c:dc:0f:
         c7:2e:62:e6:e1:73:ce:1f:39:20:cf:ad:25:4c:04:79:57:75:
         ec:ac:3f:ce:c2:f3:ed:cc:c6:5f:16:5d:63:3e:42:78:42:84:
         37:bb:7a:64:80:fe:51:3f:1a:bd:15:38:63:a2:7d:5f:47:1f:
         da:55:df:cb:7c:b0:dc:c4:55:b4:25:b0:8f:ec:f4:ea:f0:41:
         06:99:07:9d:fc:07:7a:f5:1a:14:2f:6e:4a:57:57:62:df:d7:
         f5:85:b2:ae:a3:db:d0:e1:c2:64:22:76:bb:9d:d4:56:af:e4:
         f5:f7:31:06:e9:76:45:c5:59:cf:ec:9f:79:3d:38:d8:75:ff:
         20:96:71:cc:58:cc:50:35:cd:c9:eb:03:74:00:db:24:f6:39:
         69:3d:05:0d:73:0e:43:a7:2e:d7:32:b3:b2:af:c2:6f:05:9c:
         ba:d4:2c:5e:36:ce:a9:5a:b6:30:70:04:56:b3:30:30:cd:a5:
         4a:f3:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:02 2026 by rpki-client