Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6D2E74CE119511F18720E261383D8C67.roa
File:                     6D2E74CE119511F18720E261383D8C67.roa (raw, json)
Hash identifier:          ohbtR0bU4Nw5MTZqq0EScoDeeVXif9T0EFY44v6uECc=
Subject key identifier:   F5:F2:15:2E:F9:FF:A8:7D:9A:D4:D3:3C:CC:57:F4:19:46:8B:4C:3D
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0F86
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6D2E74CE119511F18720E261383D8C67.roa
Signing time:             Sun 01 Mar 2026 19:18:39 +0000
ROA not before:           Tue 24 Feb 2026 15:28:10 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     131275
IP address blocks:        111.92.151.0/24 maxlen: 24
                          111.92.152.0/24 maxlen: 24
                          111.92.153.0/24 maxlen: 24
                          111.92.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3974 (0xf86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Feb 24 15:28:10 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4910e-e8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:9b:40:36:be:27:f2:d7:e8:50:5f:a1:57:
                    c3:6a:0f:14:51:f9:e3:20:78:b6:9b:1f:5f:89:cd:
                    d3:30:8f:a1:e6:b1:fc:c8:6b:e1:18:63:02:fc:ea:
                    fd:88:af:95:4d:2e:67:02:91:8a:a8:fa:74:5d:d5:
                    4a:de:dd:04:13:de:bb:ae:17:69:a1:ee:3a:ef:19:
                    9c:67:35:00:26:a2:24:9a:7a:5e:e6:94:ee:df:b3:
                    1d:09:3a:22:a5:d4:51:37:63:12:3e:34:35:3e:73:
                    1b:4a:dc:c2:47:0e:ea:92:0e:cd:7b:b7:61:5a:b7:
                    5f:67:15:a4:7b:35:93:44:90:6d:04:e3:3e:8d:aa:
                    80:e6:8e:80:34:96:a9:cd:dd:34:0e:2b:2f:33:66:
                    e7:03:a9:d3:40:b7:67:0a:58:50:3f:75:98:4c:7f:
                    f3:02:08:81:56:6e:cf:5e:5f:6f:b1:87:a4:96:a7:
                    c9:71:f5:04:e9:2c:69:44:8b:73:34:38:1c:43:8a:
                    25:61:a2:b3:5d:9b:b3:ea:e7:88:ff:5e:6a:db:2e:
                    19:7e:88:82:99:25:b2:b0:22:74:fe:21:09:44:15:
                    cf:07:9b:91:e5:87:3b:75:c5:dc:4b:ff:84:3e:23:
                    91:f8:af:86:1c:cc:e3:51:5d:58:02:6b:1d:04:f7:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F2:15:2E:F9:FF:A8:7D:9A:D4:D3:3C:CC:57:F4:19:46:8B:4C:3D
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6D2E74CE119511F18720E261383D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.151.0-111.92.154.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:bb:39:bf:19:06:92:3e:95:90:a6:51:00:dc:07:3d:b5:
         8a:21:1b:84:74:b9:91:23:93:a9:34:00:ca:48:f3:0f:9c:7d:
         e9:f3:59:aa:71:e7:26:70:24:cd:ed:58:d3:69:37:3d:40:2e:
         51:3e:c2:7a:66:23:4d:de:99:9c:9b:d7:5a:83:38:b0:39:2f:
         1d:53:08:d2:72:9c:34:a0:71:e9:1e:fd:7a:ce:1d:56:48:0c:
         d8:56:03:1c:51:dd:a3:5b:aa:19:bf:d6:51:a1:4b:8c:e6:83:
         0a:e7:32:b6:42:b8:e1:bc:a0:19:c3:fa:0d:1f:9d:a8:e5:35:
         bd:d9:6f:7d:a1:a6:91:71:73:77:e6:e0:54:db:9a:e5:3d:80:
         30:e8:c7:2a:0c:5f:29:d6:6c:92:17:b4:8d:a0:43:84:b3:80:
         61:0e:2c:6c:1e:20:9a:10:c5:e3:49:10:b7:26:8e:ed:fc:fe:
         3d:c8:f1:ee:c9:a3:f6:17:f8:38:9e:ce:6b:80:c2:61:d9:ee:
         00:b5:35:e1:84:b5:22:d3:7e:8c:d4:0a:f1:6e:79:23:35:de:
         b9:55:49:15:85:8b:2d:99:95:f6:e3:e2:20:1a:79:d3:cd:cc:
         94:35:d0:92:6b:68:ad:50:db:d8:95:f5:b9:57:ed:70:06:1d:
         8f:cd:ba:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:19 2026 by rpki-client