Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa
File:                     13702C3EE15B11ECA05C9236C4F9AE02.roa (raw, json)
Hash identifier:          yO5pYh5kSLeQxWbh/IwZl8/NyVYKsbLWb0OeBMKvlS8=
Subject key identifier:   09:7D:09:8D:96:76:1B:55:02:A9:BF:6B:F2:BD:A2:71:55:DC:9C:39
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       05DE
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:06:28 +0000
ROA not before:           Tue 06 May 2025 23:33:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55824
IP address blocks:        144.16.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: May  6 23:33:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46404-8f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:b0:e3:d6:07:59:22:01:74:53:81:36:54:
                    bf:b7:60:e0:fc:bb:58:ca:4e:6f:fe:c1:91:d4:6f:
                    fc:62:9d:04:4a:1c:9b:48:60:be:af:45:05:17:09:
                    82:c2:c8:89:34:21:56:54:b3:59:61:8b:98:25:cd:
                    d5:92:e5:98:e6:4b:86:fa:5e:ae:80:19:56:22:ac:
                    1b:78:2b:40:fe:f1:f0:cc:a6:cc:ef:c9:35:ab:b0:
                    e2:c3:73:1c:f0:a2:31:49:04:91:7f:64:55:58:53:
                    2e:75:bc:f2:46:1a:4d:20:25:9c:c0:c4:bb:09:de:
                    7e:8b:c2:c3:d5:a5:ba:c1:75:5c:0d:0b:ef:17:64:
                    61:46:97:ff:d4:99:2c:a1:22:73:58:6a:3f:33:3c:
                    46:a8:51:c0:82:c2:e3:62:2e:9e:e6:20:1d:89:d3:
                    b1:67:03:62:e5:ec:a5:37:a2:9b:44:03:52:3b:15:
                    44:b1:7a:c0:ff:32:70:52:f9:d6:8e:4d:0c:09:1b:
                    54:1b:13:3c:f0:dd:4d:ba:d3:f8:8f:1c:b3:08:5e:
                    08:b3:ba:e7:93:0b:57:4e:d0:4f:59:6b:c1:cd:cb:
                    1a:2e:91:1b:af:65:a6:6d:aa:a0:bb:78:0a:f3:cf:
                    32:8a:b6:13:6b:d9:5d:5e:f4:f4:0f:66:c3:c3:ca:
                    ba:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7D:09:8D:96:76:1B:55:02:A9:BF:6B:F2:BD:A2:71:55:DC:9C:39
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/13702C3EE15B11ECA05C9236C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.16.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:98:75:da:45:f0:65:75:91:19:cf:27:c3:50:15:02:9c:c6:
         a6:e4:7b:97:06:f4:2b:e2:79:17:b3:bd:41:ef:98:d2:72:a6:
         4e:70:e3:f2:5a:cc:5b:9f:58:b0:64:2f:4f:b8:d8:25:c7:39:
         ef:83:c6:3d:1e:43:49:d2:7b:07:0a:ed:ae:d0:af:a8:f3:43:
         7f:70:8f:b1:90:af:c5:33:a6:a9:9a:a9:29:4e:28:13:73:ae:
         40:4a:23:66:2e:bd:ae:76:a8:4f:8e:f2:2c:2e:ca:0b:cc:03:
         77:fa:8d:19:bb:1e:f7:ea:90:36:64:24:67:57:62:2b:7a:fa:
         8a:86:9c:c0:1f:78:c8:bf:ce:ec:6e:d2:ca:e8:91:a1:5c:68:
         ec:5a:52:f8:82:95:e6:7f:1d:4a:a4:93:fd:e6:dc:b1:e0:f2:
         75:84:c4:09:ec:91:e5:4a:f6:c7:5f:ee:d6:51:af:76:31:dd:
         c8:79:22:b4:c0:40:60:09:e7:0a:d7:a4:2b:c3:53:e6:e0:9d:
         cf:15:5b:87:cf:61:38:3c:b2:9e:99:b6:54:be:11:2e:25:45:
         9d:44:27:df:9e:1f:44:25:eb:e5:7a:f5:e3:e0:03:2c:47:0b:
         b5:74:7c:1a:a9:e4:85:e2:05:2d:c7:e1:a6:b0:4a:20:89:12:
         63:98:d5:b9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy
QTMyMUI2QjYwHhcNMjUwNTA2MjMzMzM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjQwNC04ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7Ow49YHWSIBdFOBNlS/t2Dg/LtYyk5v/sGR1G/8Yp0EShybSGC+r0UFFwmC
wsiJNCFWVLNZYYuYJc3VkuWY5kuG+l6ugBlWIqwbeCtA/vHwzKbM78k1q7Diw3Mc
8KIxSQSRf2RVWFMudbzyRhpNICWcwMS7Cd5+i8LD1aW6wXVcDQvvF2RhRpf/1Jks
oSJzWGo/MzxGqFHAgsLjYi6e5iAdidOxZwNi5eylN6KbRANSOxVEsXrA/zJwUvnW
jk0MCRtUGxM88N1NutP4jxyzCF4Is7rnkwtXTtBPWWvBzcsaLpEbr2Wmbaqgu3gK
888yirYTa9ldXvT0D2bDw8q60QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAl9CY2W
dhtVAqm/a/K9onFV3Jw5MB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw
MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODUzRDMvNjQ4MkRCN0MwMDBBMTFFQzhDMjg3MjUyQzRGOUFFMDIvMTM3MDJDM0VF
MTVCMTFFQ0EwNUM5MjM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAkBBwMA0GCSqGSIb3DQEBCwUAA4IBAQABmHXaRfBldZEZzyfDUBUC
nMam5HuXBvQr4nkXs71B75jScqZOcOPyWsxbn1iwZC9PuNglxznvg8Y9HkNJ0nsH
Cu2u0K+o80N/cI+xkK/FM6apmqkpTigTc65ASiNmLr2udqhPjvIsLsoLzAN3+o0Z
ux736pA2ZCRnV2IrevqKhpzAH3jIv87sbtLK6JGhXGjsWlL4gpXmfx1KpJP95tyx
4PJ1hMQJ7JHlSvbHX+7WUa92Md3IeSK0wEBgCecK16Qrw1Pm4J3PFVuHz2E4PLKe
mbZUvhEuJUWdRCffnh9EJevlevXj4AMsRwu1dHwaqeSF4gUtx+GmsEogiRJjmNW5
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:41 2026 by rpki-client