Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa
File:                     11D961427C0311EBB2F8C86CC4F9AE02.roa (raw, json)
Hash identifier:          CjO+8I3DQiWAPJtsp249rNJBqgAtu38CyLjJYCf1kgU=
Subject key identifier:   5C:F8:B5:59:42:12:6F:60:C0:B3:8A:2E:71:40:19:C4:23:D9:9F:1D
Certificate issuer:       /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial:       356D
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:10:45 +0000
ROA not before:           Mon 10 Mar 2025 14:30:54 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     18025
IP address blocks:        45.64.248.0/23 maxlen: 23
                          45.64.250.0/24 maxlen: 24
                          2405:d000:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
                          rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13677 (0x356d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
        Validity
            Not Before: Mar 10 14:30:54 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a42cc4-b900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:be:8e:35:22:ae:0d:ec:e5:83:22:9a:70:
                    f5:0b:8a:23:77:e7:9c:a4:e5:e7:6b:14:47:2d:96:
                    3b:b1:f5:8f:f6:f0:d9:14:79:89:b6:b8:1a:86:45:
                    ac:48:4d:7e:a9:5c:bb:74:d5:ed:57:b8:b4:ca:d1:
                    c1:76:93:f2:ab:c3:89:6b:c8:c0:3a:ed:d1:6a:97:
                    75:64:e8:0f:52:62:95:c8:b8:98:8e:ef:5a:02:b9:
                    04:a7:53:69:42:3e:bf:d0:39:79:92:12:4a:85:af:
                    e8:ae:b9:45:0c:60:af:31:74:13:0e:04:b8:0a:66:
                    b9:de:28:ab:53:07:22:66:f4:ee:d5:8c:81:4c:1f:
                    d7:e1:9e:44:77:ad:4d:fd:4a:fa:5c:fe:b1:70:1d:
                    2a:4b:7c:8f:48:f5:b0:e8:d9:0e:a6:07:2f:9a:64:
                    63:96:24:26:46:e6:b9:8b:b3:52:e3:6b:42:b1:e1:
                    3d:c6:b7:47:6f:df:ab:89:ed:f8:82:c9:5d:8a:95:
                    55:5b:85:4f:bf:7d:7a:06:1d:e8:e0:02:be:cd:ee:
                    10:0a:e3:18:56:56:ca:68:1e:f9:c8:e0:9e:06:1e:
                    bb:ca:5b:9f:3b:1d:c3:b1:6c:27:7c:75:6c:c2:26:
                    92:ad:11:d1:b9:fd:b9:e2:88:20:ac:72:2b:a2:6b:
                    01:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F8:B5:59:42:12:6F:60:C0:B3:8A:2E:71:40:19:C4:23:D9:9F:1D
            X509v3 Authority Key Identifier:
                keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.248.0-45.64.250.255
                IPv6:
                  2405:d000:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c3:b4:1b:34:f1:81:8e:68:a3:d3:fe:35:a6:f5:e4:00:34:07:
         18:f2:d7:5e:8f:e4:12:a8:f2:4f:4a:a7:2b:f8:9d:9b:19:58:
         a3:ed:22:9c:cf:48:a3:f4:0d:3c:8a:43:e1:bf:cb:44:52:de:
         f3:9d:f0:0e:92:74:88:9d:5a:6e:ab:fa:13:14:e3:ce:f0:11:
         68:a3:fb:c9:3a:bb:6b:89:75:73:44:4c:b1:85:bd:c7:ad:80:
         68:85:3f:96:23:fe:3b:4d:64:5f:53:1a:3b:13:df:54:b9:89:
         b6:4d:8a:e5:72:4a:40:5d:bb:91:7c:e5:23:fa:2d:fa:f0:9b:
         8b:5c:a1:cc:df:c0:49:72:ff:d2:89:c8:08:ea:a1:34:3a:30:
         ad:b7:66:b0:b4:1e:24:16:ff:4d:93:5a:e5:b0:23:4d:dd:85:
         3c:e4:7c:33:cc:d4:c9:40:cc:99:d1:bb:ee:92:29:d3:00:81:
         8e:0f:82:79:41:7e:de:c3:6e:fc:61:e9:35:04:65:10:62:f8:
         cf:1e:3e:3f:21:e3:5b:af:52:8b:43:74:43:1d:20:4d:f2:0a:
         7e:d8:3b:fa:a4:6f:28:8b:ca:2d:e5:47:51:54:a1:1e:cd:67:
         d5:0c:b8:21:a5:b4:4b:dd:a5:2e:b5:5e:6b:2f:83:72:c0:40:
         e9:84:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:01 2026 by rpki-client