Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D59574D2E34511F085C5E9F9726F56BC.roa
File:                     D59574D2E34511F085C5E9F9726F56BC.roa (raw, json)
Hash identifier:          XCriQAPUVYRKMSV5lxUDIOtEejB4sgW82gir/nC2odk=
Subject key identifier:   5E:6F:F4:5F:70:91:F5:AD:36:2F:33:86:02:A9:86:7F:92:8A:18:47
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3AB5
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D59574D2E34511F085C5E9F9726F56BC.roa
Signing time:             Sun 01 Mar 2026 19:25:35 +0000
ROA not before:           Sat 27 Dec 2025 17:02:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55414
IP address blocks:        115.186.14.0/23 maxlen: 24
                          115.186.20.0/23 maxlen: 24
                          115.186.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15029 (0x3ab5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Dec 27 17:02:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a492af-e1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:e4:fe:f4:91:56:5c:25:bf:3a:51:2f:06:
                    67:62:fc:b3:e9:0f:4a:d5:3b:87:1c:9b:9b:de:e8:
                    26:80:08:83:23:db:38:bb:62:5f:f2:66:8c:d8:e5:
                    be:b5:58:29:c2:fa:9e:7e:f5:18:d6:46:a3:0f:6f:
                    0f:8e:8e:d6:48:49:0e:33:45:c8:05:62:ae:3d:8b:
                    b3:7e:01:e0:ab:9d:ea:6e:1b:06:05:15:3a:13:dc:
                    29:93:b6:4b:31:85:b9:4c:a7:51:8c:57:bd:c0:9c:
                    30:6b:7b:98:37:96:de:f6:6c:f2:c5:0c:c5:68:b0:
                    3c:59:e7:da:69:e6:57:40:14:d1:52:21:43:13:a3:
                    b9:cf:d8:f8:08:8e:bf:07:d6:04:3b:4a:fa:57:40:
                    40:23:1a:09:3a:68:6a:05:55:10:7b:e5:68:d1:db:
                    fa:c1:1a:91:b1:19:f9:21:c0:b0:f1:9c:66:f8:a1:
                    8e:3c:2f:20:60:0d:3a:11:2e:ec:2c:0d:25:e4:ab:
                    49:ab:76:44:66:6d:fe:b3:00:e5:70:ef:e8:89:40:
                    8a:9e:f9:af:7f:9b:c0:de:9d:58:8a:c1:a5:0d:f0:
                    81:51:03:3a:8c:f6:ce:bf:1e:d0:9f:3b:65:82:ec:
                    02:6e:ce:5e:d1:eb:74:30:7a:64:f3:71:aa:43:74:
                    ff:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6F:F4:5F:70:91:F5:AD:36:2F:33:86:02:A9:86:7F:92:8A:18:47
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/D59574D2E34511F085C5E9F9726F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.14.0/23
                  115.186.20.0/23
                  115.186.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:8b:12:d2:04:9e:4a:ab:5e:36:43:95:5b:68:50:3e:24:c8:
         2b:6a:e9:2b:88:01:8b:b8:dc:29:24:c1:3c:e4:e8:39:e2:db:
         b6:36:65:13:a4:dd:f9:89:a4:7d:2c:54:fc:ca:94:8e:9f:91:
         fd:94:fe:40:8d:a7:44:08:8c:73:f3:28:c5:8c:41:ad:38:e2:
         d9:5b:9c:0b:e0:68:b7:d3:48:c6:d8:6d:e5:14:0c:e2:81:a8:
         80:62:4e:58:e8:d9:e2:9e:79:f1:f0:aa:84:5b:a7:47:c9:8f:
         d8:a0:f0:f7:1c:3f:f0:14:51:ce:f1:bd:c6:59:d0:0e:e2:5d:
         5d:1d:0c:83:03:fa:32:8a:71:2d:c3:8c:1e:e1:0f:f2:58:d9:
         d3:33:df:52:67:93:ca:23:95:1d:49:81:57:69:87:d1:50:d4:
         52:8e:1d:c6:63:04:42:77:df:cb:77:f3:28:54:6f:73:58:f5:
         c2:c1:88:22:02:04:a7:20:30:da:79:70:2f:f3:cd:74:b7:69:
         5e:5e:e6:b7:3f:d9:52:95:d6:78:52:77:4e:b4:7f:ec:2a:db:
         01:8d:9c:c5:a4:1d:63:97:e3:ff:2c:cd:d1:d6:d9:45:c5:df:
         a5:ea:05:af:d6:91:1f:48:82:f5:d7:7e:93:42:22:5e:87:16:
         a6:04:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:48 2026 by rpki-client