Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa
File:                     115BD35AA41611EFA0D7CD42C4F9AE02.roa (raw, json)
Hash identifier:          GfKONyuGx0WaP3K9DviNb2sOjfd80Q3n9pefnjxWc/U=
Subject key identifier:   2C:81:09:6E:E2:4A:20:99:BA:D5:C2:A0:CA:C8:61:CF:E0:F5:4A:42
Certificate issuer:       /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
Certificate serial:       F6
Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:47:50 +0000
ROA not before:           Sat 13 Dec 2025 05:44:32 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153399
IP address blocks:        160.191.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl
                          rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7
        Validity
            Not Before: Dec 13 05:44:32 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41956-dbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:44:93:20:bc:2e:2f:5b:bf:cb:44:e4:2d:
                    34:c2:ca:e7:4a:a5:f6:62:06:29:de:7d:c9:8e:1d:
                    81:41:df:d3:ff:38:5e:ad:50:2a:f9:40:1a:68:7e:
                    95:85:a3:b5:2a:e3:52:54:c7:2c:db:7b:a4:45:c5:
                    a8:93:2e:36:51:8f:e4:a9:27:7a:00:0c:44:5e:f1:
                    e0:f2:8a:97:50:da:b7:c4:94:ac:4b:25:bf:72:fa:
                    71:fd:50:4a:22:34:05:b3:49:c9:6a:89:af:f9:26:
                    a2:e0:25:af:ba:e1:96:49:41:6c:eb:88:97:43:d1:
                    4f:f6:3d:b5:2c:d6:86:89:5e:39:f5:53:c1:ee:c6:
                    ee:89:a8:7e:0b:95:54:ce:29:73:03:81:4b:f6:b3:
                    b4:44:13:99:f9:76:7b:39:83:14:17:fd:44:4b:0f:
                    ca:e3:6f:3d:90:b2:79:10:a6:d4:20:08:bb:89:f1:
                    62:ad:d0:42:74:9e:4e:b3:00:77:74:98:bc:4e:73:
                    31:82:6e:7c:d7:24:e4:e4:8e:64:cf:da:f1:09:4b:
                    eb:67:37:2e:3b:07:4c:71:fe:12:6e:e7:92:0f:86:
                    ff:50:9c:83:11:e6:17:8e:f4:6c:17:5e:0f:4b:ce:
                    34:de:85:57:c1:fe:15:bd:53:4c:3d:55:33:45:f1:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:81:09:6E:E2:4A:20:99:BA:D5:C2:A0:CA:C8:61:CF:E0:F5:4A:42
            X509v3 Authority Key Identifier:
                keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/115BD35AA41611EFA0D7CD42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:f6:6c:5b:72:70:4c:0d:df:99:4e:dd:9b:14:46:11:f2:
         64:9e:92:29:7f:84:d1:b1:58:b3:13:6c:b7:87:40:e7:1d:61:
         d2:36:37:9c:e4:f9:d4:2a:75:f3:bb:a4:96:08:cf:1f:5b:2f:
         06:df:ed:02:eb:d2:c6:52:d5:af:e4:b3:9e:5a:07:10:e3:3b:
         d2:5a:2d:9a:9f:9d:23:cc:0b:ef:d2:88:22:09:f9:60:84:71:
         53:fa:96:b3:cb:06:b1:8b:00:01:ce:99:c3:2e:d5:ab:0a:00:
         4f:f9:5f:eb:a5:76:d2:5a:b5:3c:a0:89:35:be:f2:c1:11:04:
         2d:c0:58:be:0f:8f:09:b5:08:5f:06:70:f5:5d:cc:ba:ff:05:
         f7:47:d6:72:ee:10:cc:41:9b:60:07:8a:2e:ff:5d:fe:1c:98:
         be:fb:ad:2d:42:41:52:4c:89:1b:04:ec:a8:f2:c8:58:5e:b3:
         cb:96:d1:30:4c:0b:24:51:6d:55:19:99:8c:f4:0e:9a:7d:97:
         8f:6d:af:10:98:5f:7d:24:88:90:b4:af:48:08:05:44:a6:0d:
         ac:9a:f3:a6:fb:65:70:c9:e8:97:1a:60:62:0e:1f:bc:f7:b3:
         5c:7e:95:b5:59:bd:6b:0a:f2:a6:e5:74:25:f2:45:d2:3d:8c:
         f0:74:ac:28
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5
NjFDNDQxRTcwHhcNMjUxMjEzMDU0NDMyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTk1Ni1kYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzFEkyC8Li9bv8tE5C00wsrnSqX2YgYp3n3Jjh2BQd/T/zherVAq+UAaaH6V
haO1KuNSVMcs23ukRcWoky42UY/kqSd6AAxEXvHg8oqXUNq3xJSsSyW/cvpx/VBK
IjQFs0nJaomv+Sai4CWvuuGWSUFs64iXQ9FP9j21LNaGiV459VPB7sbuiah+C5VU
zilzA4FL9rO0RBOZ+XZ7OYMUF/1ESw/K4289kLJ5EKbUIAi7ifFirdBCdJ5OswB3
dJi8TnMxgm581yTk5I5kz9rxCUvrZzcuOwdMcf4SbueSD4b/UJyDEeYXjvRsF14P
S8403oVXwf4VvVNMPVUzRfFzLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCyBCW7i
SiCZutXCoMrIYc/g9UpCMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0
MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzFCRjAvOUY1OTFFOEVBNDE1MTFFRkExNEZCRDNGQzRGOUFFMDIvMTE1QkQzNUFB
NDE2MTFFRkEwRDdDRDQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoL/EMA0GCSqGSIb3DQEBCwUAA4IBAQAKifZsW3JwTA3fmU7dmxRG
EfJknpIpf4TRsVizE2y3h0DnHWHSNjec5PnUKnXzu6SWCM8fWy8G3+0C69LGUtWv
5LOeWgcQ4zvSWi2an50jzAvv0ogiCflghHFT+pazywaxiwABzpnDLtWrCgBP+V/r
pXbSWrU8oIk1vvLBEQQtwFi+D48JtQhfBnD1Xcy6/wX3R9Zy7hDMQZtgB4ou/13+
HJi++60tQkFSTIkbBOyo8shYXrPLltEwTAskUW1VGZmM9A6afZePba8QmF99JIiQ
tK9ICAVEpg2smvOm+2VwyeiXGmBiDh+897NcfpW1Wb1rCvKm5XQl8kXSPYzwdKwo
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:46 2026 by rpki-client