Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B1A746BADA4711F0A0B4C6A990D3641D.roa
File:                     B1A746BADA4711F0A0B4C6A990D3641D.roa (raw, json)
Hash identifier:          24u4HBCO1KtwHfOL7e2RjvlMPalnF3UcOXpG6jE4G34=
Subject key identifier:   5A:1C:88:76:54:F0:C4:9D:E5:93:69:9A:0A:3A:56:E0:A5:18:E8:43
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0F71
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B1A746BADA4711F0A0B4C6A990D3641D.roa
Signing time:             Sun 01 Mar 2026 19:18:20 +0000
ROA not before:           Tue 16 Dec 2025 06:23:11 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135523
IP address blocks:        111.92.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3953 (0xf71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Dec 16 06:23:11 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a490fc-e3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:f4:ad:de:98:c4:57:8c:c1:77:b3:29:51:
                    28:3a:ee:cf:94:ca:ad:17:90:f2:3b:c6:ca:64:21:
                    92:ef:49:00:19:85:18:a9:68:53:bf:ce:58:15:97:
                    de:92:4b:9c:35:fc:93:6b:ce:6f:91:df:55:6d:89:
                    8a:ed:72:73:9a:04:db:81:c9:1b:8e:7f:f5:9c:4d:
                    93:a1:54:23:04:e4:81:7c:f9:8f:7f:ac:23:e5:4e:
                    65:6a:98:a9:d2:d2:f8:77:d4:9f:70:39:85:f7:33:
                    86:bc:97:4d:e3:50:99:df:d1:04:6f:46:6f:bc:f6:
                    b6:7b:89:b3:be:c7:e8:49:9b:5c:22:71:9b:f7:eb:
                    39:9b:9f:b7:6c:3c:f3:41:a9:73:8c:2a:8e:fb:f2:
                    b5:a3:68:a0:87:73:57:50:3b:e4:c4:d4:95:69:86:
                    d3:3a:63:f0:4b:1a:44:7a:0f:11:b0:a6:fb:e1:39:
                    47:fe:a5:6b:fb:04:98:19:ad:50:e7:1c:19:68:c9:
                    c1:29:2d:1d:5c:ae:87:d2:96:17:bd:d8:4a:0f:54:
                    00:ed:5e:6f:12:aa:f7:ff:31:18:e8:ce:cc:17:80:
                    94:05:4d:d0:a6:4d:28:6e:ee:4e:27:3a:06:0a:94:
                    e9:a7:c1:f0:93:0c:b4:7b:8e:cf:fb:90:e8:1b:c3:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1C:88:76:54:F0:C4:9D:E5:93:69:9A:0A:3A:56:E0:A5:18:E8:43
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B1A746BADA4711F0A0B4C6A990D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:97:b5:61:4b:b0:26:90:7e:e2:b0:58:ee:e3:71:61:83:b9:
         a2:4a:90:cb:55:8a:67:00:f9:67:b5:32:f9:69:c9:fd:df:1b:
         cf:e4:f6:e6:77:83:d9:02:a9:3c:c8:78:3e:ff:5f:42:17:12:
         09:74:41:2f:a4:86:55:b6:4f:1d:45:f6:07:03:fe:9a:6f:1f:
         47:b1:d2:8a:5d:82:a7:68:02:e9:05:13:a9:7c:bc:af:14:d5:
         a8:46:b4:28:ec:39:2b:9f:8b:7e:d4:62:59:6a:1f:07:65:c0:
         e3:eb:7b:53:1b:ac:66:cc:73:41:67:88:77:6d:77:44:ea:46:
         97:26:ac:c4:c6:de:a8:e9:40:5d:9f:f5:a2:91:7d:ac:ac:e6:
         25:dd:1b:38:6c:0a:14:1d:9e:32:e2:ec:20:2e:b8:e6:25:1c:
         0e:31:26:bb:16:e5:27:f6:a2:5b:c1:5d:d6:54:49:7a:62:78:
         b4:4c:8d:05:88:b3:1b:c9:7d:ff:ab:52:3c:26:dc:e9:ef:cd:
         de:b2:d1:39:e6:c4:0d:fe:78:21:df:ef:74:f9:2f:98:c4:9e:
         94:cb:17:94:16:ab:b9:43:0e:cf:79:44:64:e0:ca:5b:80:70:
         45:b6:8a:22:9b:b8:e8:18:26:b2:b7:dc:8a:ec:b2:5f:dc:8d:
         8c:97:b4:2e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICD3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjUxMjE2MDYyMzExWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTBmYy1lM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlFb0rd6YxFeMwXezKVEoOu7PlMqtF5DyO8bKZCGS70kAGYUYqWhTv85YFZfe
kkucNfyTa85vkd9VbYmK7XJzmgTbgckbjn/1nE2ToVQjBOSBfPmPf6wj5U5lapip
0tL4d9SfcDmF9zOGvJdN41CZ39EEb0ZvvPa2e4mzvsfoSZtcInGb9+s5m5+3bDzz
QalzjCqO+/K1o2igh3NXUDvkxNSVaYbTOmPwSxpEeg8RsKb74TlH/qVr+wSYGa1Q
5xwZaMnBKS0dXK6H0pYXvdhKD1QA7V5vEqr3/zEY6M7MF4CUBU3Qpk0obu5OJzoG
CpTpp8Hwkwy0e47P+5DoG8OYaQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFociHZU
8MSd5ZNpmgo6VuClGOhDMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvQjFBNzQ2QkFE
QTQ3MTFGMEEwQjRDNkE5OTBEMzY0MUQucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAb1ydMA0GCSqGSIb3DQEBCwUAA4IBAQCTl7VhS7AmkH7isFju43Fh
g7miSpDLVYpnAPlntTL5acn93xvP5Pbmd4PZAqk8yHg+/19CFxIJdEEvpIZVtk8d
RfYHA/6abx9HsdKKXYKnaALpBROpfLyvFNWoRrQo7Dkrn4t+1GJZah8HZcDj63tT
G6xmzHNBZ4h3bXdE6kaXJqzExt6o6UBdn/WikX2srOYl3Rs4bAoUHZ4y4uwgLrjm
JRwOMSa7FuUn9qJbwV3WVEl6Yni0TI0FiLMbyX3/q1I8Jtzp783estE55sQN/ngh
3+90+S+YxJ6UyxeUFqu5Qw7PeURk4MpbgHBFtooim7joGCayt9yK7LJf3I2Ml7Qu
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:37 2026 by rpki-client