Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/75576E0ED0E911F0BF43FD85C4F9AE02.roa
File:                     75576E0ED0E911F0BF43FD85C4F9AE02.roa (raw, json)
Hash identifier:          ipQdS/VlQkOxf1Hsp4sheFfGELACfRYo77XmCiNbqFo=
Subject key identifier:   6C:94:B7:D1:86:2B:7F:62:92:1B:B7:AA:2B:A7:E8:0F:5F:D0:D3:1B
Certificate issuer:       /CN=A915F38F/serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
Certificate serial:       32
Authority key identifier: 4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/75576E0ED0E911F0BF43FD85C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:57:09 +0000
ROA not before:           Thu 04 Dec 2025 08:15:56 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     37979
IP address blocks:        218.185.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl
                          rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F38F, serialNumber=4C0FBDF69174A32C1411671ABA63C9EAB756B381
        Validity
            Not Before: Dec  4 08:15:56 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3d535-6e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:77:ad:b1:3a:3d:b0:ad:3b:36:96:6b:62:01:
                    88:1d:bd:81:e5:1e:9b:d4:51:6a:ce:fd:96:ca:a2:
                    a1:62:1e:49:c6:8e:92:c4:a5:db:ee:bf:0f:11:42:
                    5d:af:84:32:19:19:50:a8:21:bb:11:22:67:bd:35:
                    46:44:37:dd:e8:35:01:4c:12:2b:5f:52:92:5d:f0:
                    9a:81:04:20:b0:65:b6:e5:43:42:5f:70:f4:d0:1c:
                    bc:6d:ab:b6:03:1b:7a:1d:d0:b6:34:33:c2:61:6d:
                    1a:66:f3:6d:23:60:77:d3:09:ca:7d:a0:50:55:e2:
                    68:c3:12:d6:11:1c:ad:70:6d:f9:4d:bb:6a:3e:ab:
                    12:84:a3:80:bb:e0:c3:88:98:19:c3:fd:0f:7f:76:
                    30:b8:80:59:a5:3d:5c:87:c0:bd:37:e4:d4:93:84:
                    11:c1:f5:43:9c:18:0f:b1:95:3b:13:b8:f5:b1:e6:
                    fd:08:a8:2f:69:fc:d0:c7:cb:7e:e8:68:77:0f:5a:
                    ba:b5:f5:19:a0:9c:ad:0b:55:88:ca:42:5a:80:a3:
                    84:11:9d:e3:9d:bf:74:c3:6b:5f:bb:67:2e:8e:8f:
                    0c:00:a1:13:9e:87:4a:42:d2:c2:dc:ad:a6:fc:48:
                    d5:cc:61:59:3b:09:59:80:95:cd:a7:eb:5a:dd:1f:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:94:B7:D1:86:2B:7F:62:92:1B:B7:AA:2B:A7:E8:0F:5F:D0:D3:1B
            X509v3 Authority Key Identifier:
                keyid:4C:0F:BD:F6:91:74:A3:2C:14:11:67:1A:BA:63:C9:EA:B7:56:B3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/TA-99pF0oywUEWcaumPJ6rdWs4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TA-99pF0oywUEWcaumPJ6rdWs4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F38F/F6C7DF1CD0DC11F0B1D9B155C4F9AE02/75576E0ED0E911F0BF43FD85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.185.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:6e:e3:02:68:6f:79:8e:06:b9:d9:df:84:94:36:9c:59:
         8f:56:e7:c2:dd:8d:7b:71:85:ec:60:b1:0a:c2:0d:e9:53:1d:
         de:96:b1:f7:12:80:93:99:af:8e:5e:39:ba:64:a1:78:ae:7c:
         d8:cb:67:24:1d:c6:71:f2:8f:3e:fd:84:6f:e9:e9:8b:3e:e7:
         40:27:eb:c4:f4:9c:74:1f:e4:8f:90:39:17:c9:d5:93:8c:d4:
         11:08:52:16:04:4d:2a:80:bd:d0:35:92:de:5a:79:8c:55:c2:
         47:49:dd:c1:50:10:42:22:3c:dc:18:06:d0:79:b2:ed:65:b2:
         1f:86:ee:e9:93:4e:b6:f2:27:49:72:bd:5f:93:c0:a2:49:d8:
         7b:d7:3e:f5:1b:35:08:ed:7f:73:ba:d6:8e:cc:12:8e:e1:f7:
         9c:77:3f:1b:0b:84:fa:33:ce:02:7b:bd:c1:36:88:72:f5:e8:
         6a:18:51:8a:c5:b2:35:65:00:38:5a:dd:85:00:7c:b2:29:8c:
         58:32:99:85:7b:9f:72:71:9f:4e:27:98:21:ee:90:be:8d:6e:
         0f:ee:03:9c:a3:d0:12:2e:28:25:37:f5:9e:95:cd:02:fa:83:
         0c:e5:c5:f3:56:f2:ce:6a:40:a3:a1:97:ec:19:ea:08:ce:22:
         0c:d7:be:31
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RjM4RjExMC8GA1UEBRMoNEMwRkJERjY5MTc0QTMyQzE0MTE2NzFBQkE2M0M5RUFC
NzU2QjM4MTAeFw0yNTEyMDQwODE1NTZaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNTM1LTZlMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCUd62xOj2wrTs2lmtiAYgdvYHlHpvUUWrO/ZbKoqFiHknGjpLEpdvuvw8RQl2v
hDIZGVCoIbsRIme9NUZEN93oNQFMEitfUpJd8JqBBCCwZbblQ0JfcPTQHLxtq7YD
G3od0LY0M8JhbRpm820jYHfTCcp9oFBV4mjDEtYRHK1wbflNu2o+qxKEo4C74MOI
mBnD/Q9/djC4gFmlPVyHwL035NSThBHB9UOcGA+xlTsTuPWx5v0IqC9p/NDHy37o
aHcPWrq19RmgnK0LVYjKQlqAo4QRneOdv3TDa1+7Zy6OjwwAoROeh0pC0sLcrab8
SNXMYVk7CVmAlc2n61rdH6OhAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUbJS30YYr
f2KSG7eqK6foD1/Q0xswHwYDVR0jBBgwFoAUTA+99pF0oywUEWcaumPJ6rdWs4Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGMzhGL0Y2QzdERjFDRDBE
QzExRjBCMUQ5QjE1NUM0RjlBRTAyL1RBLTk5cEYwb3l3VUVXY2F1bVBKNnJkV3M0
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVEEtOTlwRjBveXdVRVdjYXVtUEo2cmRXczRFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjM4Ri9GNkM3REYxQ0QwREMxMUYwQjFEOUIxNTVDNEY5QUUwMi83NTU3NkUwRUQw
RTkxMUYwQkY0M0ZEODVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAPaueAwDQYJKoZIhvcNAQELBQADggEBAHpxbuMCaG95jga52d+ElDac
WY9W58LdjXtxhexgsQrCDelTHd6WsfcSgJOZr45eObpkoXiufNjLZyQdxnHyjz79
hG/p6Ys+50An68T0nHQf5I+QORfJ1ZOM1BEIUhYETSqAvdA1kt5aeYxVwkdJ3cFQ
EEIiPNwYBtB5su1lsh+G7umTTrbyJ0lyvV+TwKJJ2HvXPvUbNQjtf3O61o7MEo7h
95x3PxsLhPozzgJ7vcE2iHL16GoYUYrFsjVlADha3YUAfLIpjFgymYV7n3Jxn04n
mCHukL6Nbg/uA5yj0BIuKCU39Z6VzQL6gwzlxfNW8s5qQKOhl+wZ6gjOIgzXvjE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:28 2026 by rpki-client