Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/C838C2CA95EE11F0BC1A5A49C4F9AE02.roa
File:                     C838C2CA95EE11F0BC1A5A49C4F9AE02.roa (raw, json)
Hash identifier:          OrZ97G6SNx6GCNHJTQuX+by4lZgt38aqC7dBpX4QoPg=
Subject key identifier:   EF:D2:77:B8:E8:1D:E6:F4:3E:30:C0:29:5F:1B:1F:DF:14:00:B2:78
Certificate issuer:       /CN=A915E084/serialNumber=6F56EA9B3A1376B0F1ADA81992A3B961080CE232
Certificate serial:       54
Authority key identifier: 6F:56:EA:9B:3A:13:76:B0:F1:AD:A8:19:92:A3:B9:61:08:0C:E2:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/C838C2CA95EE11F0BC1A5A49C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:17:45 +0000
ROA not before:           Sat 20 Sep 2025 06:55:24 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154250
IP address blocks:        203.210.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.crl
                          rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E084, serialNumber=6F56EA9B3A1376B0F1ADA81992A3B961080CE232
        Validity
            Not Before: Sep 20 06:55:24 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3da09-9b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:79:24:67:e2:bc:b8:0e:82:4a:d6:bd:46:
                    ff:c6:c4:5a:da:51:90:70:01:a3:7b:41:ff:8c:1d:
                    b7:85:e8:80:61:bc:ee:6e:b7:4d:70:cf:e5:80:06:
                    57:58:6c:c0:15:3c:f2:69:99:fe:c3:6e:d2:d8:10:
                    fa:7e:f0:f2:e9:07:b1:8a:1b:b8:5c:a4:f7:ff:ba:
                    db:f6:be:5f:5f:19:b9:c1:e4:ff:7f:0b:bb:0b:15:
                    dd:f9:6c:15:02:83:9e:9d:68:6f:9a:54:6c:b8:71:
                    a8:3f:5e:54:09:42:86:ed:7c:a0:1b:f1:6a:47:ce:
                    c0:5e:f1:e2:cf:2b:fc:c5:5c:4d:08:5e:12:9b:84:
                    b8:1c:62:e1:5a:9b:96:1d:a6:33:ad:71:39:7a:a7:
                    bd:cf:da:29:a5:d8:7c:fb:2f:cb:f0:a6:7e:15:79:
                    9d:a5:2e:3d:1c:64:59:c9:1d:3c:da:a2:46:16:c0:
                    0c:e6:a1:18:bb:f7:88:d0:1f:47:3c:a9:ae:03:95:
                    8d:4c:77:50:e8:6c:d5:2d:d7:12:c7:cd:da:eb:57:
                    41:c5:60:37:e1:27:7d:cf:cd:1a:91:25:0a:5f:89:
                    01:d2:fb:c9:44:38:ca:94:35:ed:5a:50:e6:01:cf:
                    a8:57:54:13:3f:82:e8:1b:47:b8:20:6a:b6:55:65:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D2:77:B8:E8:1D:E6:F4:3E:30:C0:29:5F:1B:1F:DF:14:00:B2:78
            X509v3 Authority Key Identifier:
                keyid:6F:56:EA:9B:3A:13:76:B0:F1:AD:A8:19:92:A3:B9:61:08:0C:E2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/b1bqmzoTdrDxragZkqO5YQgM4jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b1bqmzoTdrDxragZkqO5YQgM4jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E084/0E54445695EE11F0B8693148C4F9AE02/C838C2CA95EE11F0BC1A5A49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.210.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:92:23:ff:6f:b3:b2:f8:f7:65:15:45:98:ac:00:d5:36:2b:
         12:a5:21:5b:78:43:22:52:f9:9f:30:32:df:13:a7:7d:f0:ee:
         e8:14:9b:44:15:46:7b:33:dd:c8:7d:9f:1b:a8:e3:4a:10:4f:
         a7:7e:d4:6b:67:f5:40:19:d9:57:5d:3b:bb:ba:6e:11:7e:84:
         7e:bd:d6:06:dc:8e:a5:c1:44:2b:8b:ed:5a:e6:f2:c4:8a:a3:
         42:ff:25:93:ba:48:a8:f6:9d:b4:e9:c6:8f:c4:3d:17:2d:9c:
         00:ba:27:cd:98:13:6a:5a:47:a2:49:73:05:6b:42:d6:c0:f6:
         06:cb:f8:6e:4a:89:e5:3c:60:bf:c8:74:7f:ce:a5:37:0e:d3:
         ce:26:5e:f7:0f:58:85:c0:ad:a0:e5:ac:b6:ac:9b:bb:67:4a:
         e7:b2:31:c3:c8:8d:44:16:86:a9:62:bf:dc:59:e1:e6:ac:e0:
         90:0e:63:d1:40:8b:59:a0:b1:a3:0c:5d:70:38:ed:82:e5:49:
         26:3c:42:37:32:ee:e3:32:80:ca:83:1a:88:a2:e8:85:fe:60:
         eb:5a:d0:cb:8e:f9:87:97:7d:ef:86:97:30:47:d3:04:be:33:
         87:9f:1a:a6:8e:fa:63:48:6d:d8:91:20:d3:45:50:8a:75:9f:
         35:51:75:80
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTA4NDExMC8GA1UEBRMoNkY1NkVBOUIzQTEzNzZCMEYxQURBODE5OTJBM0I5NjEw
ODBDRTIzMjAeFw0yNTA5MjAwNjU1MjRaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkYTA5LTliMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5y3kkZ+K8uA6CSta9Rv/GxFraUZBwAaN7Qf+MHbeF6IBhvO5ut01wz+WABldY
bMAVPPJpmf7DbtLYEPp+8PLpB7GKG7hcpPf/utv2vl9fGbnB5P9/C7sLFd35bBUC
g56daG+aVGy4cag/XlQJQobtfKAb8WpHzsBe8eLPK/zFXE0IXhKbhLgcYuFam5Yd
pjOtcTl6p73P2iml2Hz7L8vwpn4VeZ2lLj0cZFnJHTzaokYWwAzmoRi794jQH0c8
qa4DlY1Md1DobNUt1xLHzdrrV0HFYDfhJ33PzRqRJQpfiQHS+8lEOMqUNe1aUOYB
z6hXVBM/gugbR7ggarZVZeTDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU79J3uOgd
5vQ+MMApXxsf3xQAsngwHwYDVR0jBBgwFoAUb1bqmzoTdrDxragZkqO5YQgM4jIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDg0LzBFNTQ0NDU2OTVF
RTExRjBCODY5MzE0OEM0RjlBRTAyL2IxYnFtem9UZHJEeHJhZ1prcU81WVFnTTRq
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYjFicW16b1RkckR4cmFnWmtxTzVZUWdNNGpJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTA4NC8wRTU0NDQ1Njk1RUUxMUYwQjg2OTMxNDhDNEY5QUUwMi9DODM4QzJDQTk1
RUUxMUYwQkMxQTVBNDlDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAHL0lwwDQYJKoZIhvcNAQELBQADggEBALuSI/9vs7L492UVRZisANU2
KxKlIVt4QyJS+Z8wMt8Tp33w7ugUm0QVRnsz3ch9nxuo40oQT6d+1Gtn9UAZ2Vdd
O7u6bhF+hH691gbcjqXBRCuL7Vrm8sSKo0L/JZO6SKj2nbTpxo/EPRctnAC6J82Y
E2paR6JJcwVrQtbA9gbL+G5KieU8YL/IdH/OpTcO084mXvcPWIXAraDlrLasm7tn
SueyMcPIjUQWhqliv9xZ4eas4JAOY9FAi1mgsaMMXXA47YLlSSY8Qjcy7uMygMqD
Goii6IX+YOta0MuO+YeXfe+GlzBH0wS+M4efGqaO+mNIbdiRINNFUIp1nzVRdYA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:28 2026 by rpki-client