Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/C31D6D082BA611EF82D8BF21C4F9AE02.roa
File:                     C31D6D082BA611EF82D8BF21C4F9AE02.roa (raw, json)
Hash identifier:          KaXesnuFaeBFwdIKQX83xHoaLDU87Z3ExtLFihWBkwE=
Subject key identifier:   A5:07:85:41:BD:8B:0A:46:5E:47:F1:E8:DC:68:00:88:42:65:69:1F
Certificate issuer:       /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial:       135C
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/C31D6D082BA611EF82D8BF21C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:20:16 +0000
ROA not before:           Sat 08 Mar 2025 17:06:16 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137966
IP address blocks:        167.179.15.0/24 maxlen: 24
                          167.179.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4956 (0x135c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
        Validity
            Not Before: Mar  8 17:06:16 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47550-065e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:83:21:fd:64:b0:d7:c9:8f:3b:5c:4f:0b:
                    40:8d:b3:77:c0:0b:11:48:ef:c7:14:e0:de:09:56:
                    6a:bf:29:98:bb:ca:3b:fa:09:2b:de:75:6f:12:5c:
                    9c:39:77:04:3d:b3:89:5b:ef:a1:c1:67:76:72:ed:
                    be:75:a6:7a:24:cf:d9:a1:c9:de:32:d6:f0:1e:a8:
                    b7:9d:1c:26:44:26:13:14:94:65:53:17:7d:9d:b6:
                    74:19:bf:91:e4:56:d0:46:22:4b:cb:f5:9e:e3:32:
                    f5:08:a6:9c:00:e2:60:2a:d4:c9:d5:91:fb:d5:04:
                    65:63:ec:4e:b0:80:ed:fa:6f:b7:03:5b:bc:b3:e2:
                    47:e0:d0:bd:49:19:95:a4:b2:21:59:94:f6:bf:2b:
                    2b:8a:ee:20:d0:55:5e:81:6c:8e:d1:57:2d:73:95:
                    52:d5:3f:87:92:14:9a:26:61:1f:3d:4c:54:ea:7a:
                    47:9b:76:29:60:79:9f:c1:ce:ea:8a:f1:0b:e6:3f:
                    86:d7:b8:a2:c7:63:d7:dc:38:7c:3c:ee:f0:0b:05:
                    66:b6:62:50:33:8a:87:7f:ec:18:0f:38:f6:24:46:
                    72:e1:98:4b:ad:8f:6d:2a:bd:c8:e3:8b:31:1c:ba:
                    c5:3a:30:46:91:b0:9c:21:9d:c8:6e:f5:1b:00:46:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:07:85:41:BD:8B:0A:46:5E:47:F1:E8:DC:68:00:88:42:65:69:1F
            X509v3 Authority Key Identifier:
                keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/C31D6D082BA611EF82D8BF21C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.15.0-167.179.16.255

    Signature Algorithm: sha256WithRSAEncryption
         41:c1:7e:eb:7f:9a:63:24:6d:ed:6e:1b:b0:39:dc:e1:07:10:
         e1:c4:6c:e7:63:78:f4:3a:1c:fc:39:cb:89:61:9f:16:34:f4:
         4e:cc:30:5a:cf:ca:67:8f:b8:69:82:b0:07:a2:02:3d:40:df:
         68:2a:f0:41:30:83:12:fb:b9:6a:91:8f:7a:fb:57:da:e1:43:
         6e:20:77:e2:1c:9f:70:a8:8d:04:b6:ea:f7:df:a0:47:14:a6:
         9d:62:a1:10:d9:5c:22:be:dc:07:e8:b6:89:18:b9:fc:ec:03:
         6c:81:5f:fb:0a:33:53:32:54:64:58:40:54:6f:7c:15:32:eb:
         85:d4:1b:ff:0e:7b:50:57:41:51:24:97:b8:6f:a4:64:79:98:
         bc:97:7e:e4:52:2b:ee:7a:1a:cb:1b:a2:1b:0d:7d:07:56:c0:
         4f:e0:a5:e9:aa:8c:22:d6:87:a9:0a:b1:3d:eb:13:5c:7d:42:
         2d:85:b9:3b:b3:45:ef:36:e6:68:24:d6:30:a1:94:2c:9a:8c:
         ff:a3:ed:60:31:be:37:e8:dc:80:3b:9a:dd:39:3a:7d:05:f1:
         0a:87:f6:11:27:56:0e:7c:62:3b:74:04:8d:f3:ca:56:30:1f:
         9c:47:6b:39:11:ac:a3:40:66:c1:de:c8:8d:a3:38:b5:ce:be:
         4a:31:d1:70
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF
QzhGOUQzNjcwHhcNMjUwMzA4MTcwNjE2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzU1MC0wNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlRODIf1ksNfJjztcTwtAjbN3wAsRSO/HFODeCVZqvymYu8o7+gkr3nVvElyc
OXcEPbOJW++hwWd2cu2+daZ6JM/ZocneMtbwHqi3nRwmRCYTFJRlUxd9nbZ0Gb+R
5FbQRiJLy/We4zL1CKacAOJgKtTJ1ZH71QRlY+xOsIDt+m+3A1u8s+JH4NC9SRmV
pLIhWZT2vysriu4g0FVegWyO0Vctc5VS1T+HkhSaJmEfPUxU6npHm3YpYHmfwc7q
ivEL5j+G17iix2PX3Dh8PO7wCwVmtmJQM4qHf+wYDzj2JEZy4ZhLrY9tKr3I44sx
HLrFOjBGkbCcIZ3IbvUbAEb1YQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFKUHhUG9
iwpGXkfx6NxoAIhCZWkfMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3
OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvQzMxRDZEMDgy
QkE2MTFFRjgyRDhCRjIxQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBACnsw8DBACnsxAwDQYJKoZIhvcNAQELBQADggEBAEHBfut/mmMk
be1uG7A53OEHEOHEbOdjePQ6HPw5y4lhnxY09E7MMFrPymePuGmCsAeiAj1A32gq
8EEwgxL7uWqRj3r7V9rhQ24gd+Icn3CojQS26vffoEcUpp1ioRDZXCK+3AfotokY
ufzsA2yBX/sKM1MyVGRYQFRvfBUy64XUG/8Oe1BXQVEkl7hvpGR5mLyXfuRSK+56
GssbohsNfQdWwE/gpemqjCLWh6kKsT3rE1x9Qi2FuTuzRe825mgk1jChlCyajP+j
7WAxvjfo3IA7mt05On0F8QqH9hEnVg58Yjt0BI3zylYwH5xHazkRrKNAZsHeyI2j
OLXOvkox0XA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:50 2026 by rpki-client