Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A08711E2366311EEB376DC3AC4F9AE02.roa
File:                     A08711E2366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          wUmrURd/1BjfBH6f7MyGfeZya3xCTYfDafUNIl+rKO0=
Subject key identifier:   68:FA:52:E4:1D:0D:3C:49:68:1A:FB:0F:B7:CE:AE:60:75:37:B3:D6
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       026F
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A08711E2366311EEB376DC3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:30:17 +0000
ROA not before:           Mon 23 Jun 2025 03:22:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138003
IP address blocks:        161.82.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:35:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 23 03:22:16 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a485b9-265a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:d5:61:99:71:ce:dc:0b:a5:92:b2:0a:45:
                    65:a5:c9:6c:c6:42:bb:39:3a:c5:fd:c6:d8:0b:1c:
                    30:26:e3:e5:a3:39:98:29:34:2f:f4:d6:ef:9b:3e:
                    c1:1d:69:a3:89:43:6b:70:49:0c:6a:57:f5:eb:d8:
                    45:16:4a:a8:30:f0:95:6a:21:25:64:67:24:cc:d7:
                    09:81:0c:db:f2:3f:a2:b5:3d:6d:0d:b1:0b:b8:24:
                    c8:a3:20:97:6e:6c:1c:c3:c8:95:83:e9:4f:4d:60:
                    d8:95:f3:9d:97:29:77:46:2f:84:d6:23:53:86:2c:
                    05:6e:5c:f3:ce:18:4c:20:79:0e:72:51:e1:bb:c3:
                    28:1c:05:92:7a:a0:8b:1f:a1:92:0c:56:f6:01:6b:
                    00:c1:65:11:68:e7:09:05:ad:e3:ae:f0:5b:c5:c5:
                    ad:c3:db:56:a4:44:4f:84:7a:d4:b2:2c:e6:26:c4:
                    8d:d7:6b:24:a6:28:02:29:57:28:55:0b:e1:f2:8a:
                    65:1a:e5:8f:8f:35:92:d6:07:42:a3:aa:a9:e8:f9:
                    53:36:0e:38:a7:2a:32:be:12:24:2a:8c:23:5c:13:
                    52:15:00:3d:f3:f9:62:26:15:4a:67:3c:da:90:8a:
                    db:6d:34:0d:e5:b2:06:76:7e:07:75:c2:09:cf:74:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FA:52:E4:1D:0D:3C:49:68:1A:FB:0F:B7:CE:AE:60:75:37:B3:D6
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A08711E2366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:26:6b:dc:3b:90:81:e9:4a:a6:3e:54:28:6b:75:8c:d0:
         b5:4d:51:a7:22:ff:7c:34:79:15:56:5f:ca:27:4d:ea:ae:95:
         be:e7:bf:b6:5d:c8:66:41:6a:66:5b:6b:a6:ad:a0:e8:63:10:
         84:a2:e0:e3:88:a0:2f:03:d8:3d:ee:1d:a1:25:3a:4f:4a:e4:
         71:82:d4:4c:52:d6:ca:3a:c6:39:1f:3b:94:75:9e:16:dd:e5:
         e9:91:33:f3:c7:e4:aa:b8:a6:61:79:af:77:7c:be:29:e5:1e:
         6e:2a:da:15:d5:c7:f1:c4:4f:a5:04:97:9f:53:7b:10:06:33:
         2f:95:3e:99:ac:17:2f:b8:0f:d8:ee:87:b9:98:d7:f0:ef:a7:
         58:14:43:10:a5:2c:a2:7a:fd:4e:cc:e8:bd:92:ba:32:f0:0f:
         83:3c:d9:fe:01:21:38:24:c6:07:b1:c8:a1:35:3e:52:53:01:
         58:a1:c2:dc:ea:88:3b:d7:30:b6:ba:60:6a:51:7f:47:04:af:
         53:2e:e1:64:a7:fd:26:4b:da:2d:69:51:c0:5b:08:c5:56:79:
         79:d0:80:38:08:78:ef:9c:87:e7:5c:42:0c:76:58:d4:96:40:
         4a:d1:8f:ac:4b:d2:de:38:55:9c:d2:92:c4:af:60:22:a4:2f:
         6e:aa:f9:d3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3
NThGNkFFMUQwHhcNMjUwNjIzMDMyMjE2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODViOS0yNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjPVYZlxztwLpZKyCkVlpclsxkK7OTrF/cbYCxwwJuPlozmYKTQv9Nbvmz7B
HWmjiUNrcEkMalf169hFFkqoMPCVaiElZGckzNcJgQzb8j+itT1tDbELuCTIoyCX
bmwcw8iVg+lPTWDYlfOdlyl3Ri+E1iNThiwFblzzzhhMIHkOclHhu8MoHAWSeqCL
H6GSDFb2AWsAwWURaOcJBa3jrvBbxcWtw9tWpERPhHrUsizmJsSN12skpigCKVco
VQvh8oplGuWPjzWS1gdCo6qp6PlTNg44pyoyvhIkKowjXBNSFQA98/liJhVKZzza
kIrbbTQN5bIGdn4HdcIJz3QIDQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGj6UuQd
DTxJaBr7D7fOrmB1N7PWMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQTA4NzExRTIz
NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoVKUMA0GCSqGSIb3DQEBCwUAA4IBAQAUbSZr3DuQgelKpj5UKGt1
jNC1TVGnIv98NHkVVl/KJ03qrpW+57+2XchmQWpmW2umraDoYxCEouDjiKAvA9g9
7h2hJTpPSuRxgtRMUtbKOsY5HzuUdZ4W3eXpkTPzx+SquKZhea93fL4p5R5uKtoV
1cfxxE+lBJefU3sQBjMvlT6ZrBcvuA/Y7oe5mNfw76dYFEMQpSyiev1OzOi9kroy
8A+DPNn+ASE4JMYHscihNT5SUwFYocLc6og71zC2umBqUX9HBK9TLuFkp/0mS9ot
aVHAWwjFVnl50IA4CHjvnIfnXEIMdljUlkBK0Y+sS9LeOFWc0pLEr2AipC9uqvnT
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:20 2026 by rpki-client