Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24C4305A7CD911EEB0B4C962C4F9AE02.roa
File:                     24C4305A7CD911EEB0B4C962C4F9AE02.roa (raw, json)
Hash identifier:          x1jt7itPjnC6MQbNejsBQgbeqBxLH2bZYuNPNtNXfYM=
Subject key identifier:   08:F8:B4:A1:97:F1:5A:84:4E:E9:5B:7B:95:00:25:DD:C2:96:66:0E
Certificate issuer:       /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial:       3556
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24C4305A7CD911EEB0B4C962C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:59:36 +0000
ROA not before:           Mon 22 Sep 2025 14:30:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55714
IP address blocks:        182.255.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
                          rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13654 (0x3556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
        Validity
            Not Before: Sep 22 14:30:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47e88-a313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:92:97:86:0c:4a:bf:42:bd:52:82:69:7b:ca:
                    17:5f:24:72:52:7d:3b:b3:b7:c3:97:c9:38:37:59:
                    d4:2a:36:bd:50:d4:de:4a:48:57:63:6c:b8:48:a9:
                    76:7c:d2:1d:97:df:06:ea:d9:cf:7e:cb:31:9b:c9:
                    41:a0:46:14:8a:13:10:d1:3b:ec:dd:20:c8:3a:b3:
                    65:46:ac:9a:d0:52:83:ef:84:6b:eb:11:8f:0b:5c:
                    be:90:60:95:a6:c5:02:c2:b4:de:f8:0c:a3:a3:3b:
                    cb:bb:a3:32:c7:e1:4d:b3:42:5d:99:f8:61:1f:ba:
                    55:0e:f2:f2:06:f4:c8:d8:79:cc:4d:30:46:9d:84:
                    3b:42:a5:ee:53:97:a5:bf:d7:66:a3:21:cf:19:41:
                    1a:1f:c7:e1:eb:33:71:b0:fa:43:5f:8e:e9:2d:29:
                    c1:ce:4e:d8:f1:8b:6b:28:90:25:0e:6e:02:16:e7:
                    d9:c3:29:8b:87:58:68:f0:bf:bc:c0:47:8d:28:05:
                    e6:bd:4f:38:23:dc:da:43:5b:94:e9:9c:9b:1d:d5:
                    7d:59:c8:7d:b4:3e:0a:c5:0f:21:60:37:6f:6c:db:
                    0f:2d:ca:57:65:88:43:b3:84:67:85:10:60:f0:0d:
                    59:18:a3:24:2e:f4:01:1a:32:01:68:7f:eb:e5:39:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F8:B4:A1:97:F1:5A:84:4E:E9:5B:7B:95:00:25:DD:C2:96:66:0E
            X509v3 Authority Key Identifier:
                keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24C4305A7CD911EEB0B4C962C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.255.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b2:27:26:e4:5a:d1:d2:9b:2e:97:38:9a:84:73:09:ee:d4:
         a6:db:70:45:28:8b:ef:d6:1b:02:eb:a5:51:37:b1:89:b8:99:
         22:cc:69:1d:8c:c0:20:d2:bc:33:d9:e8:32:cf:2b:f4:ab:8a:
         e5:e0:0b:6b:c9:0d:d8:83:c9:e3:aa:00:30:b6:3f:9a:33:63:
         d0:b4:3b:9d:df:4a:c6:ac:bb:af:38:ee:77:5e:d1:f4:2e:d7:
         b8:e9:82:8d:3e:bf:6e:fc:e3:b1:fa:12:69:c9:70:ff:c8:97:
         b3:20:21:2a:ee:39:5c:a3:0a:2d:6f:b6:06:96:bd:7d:d7:fa:
         f5:67:17:e6:1d:9f:74:01:6a:e6:ca:2c:81:93:58:e6:d7:59:
         8a:04:7a:e0:59:8b:a8:c4:7a:4a:e0:fa:63:41:39:dd:1e:66:
         5e:c2:18:d8:1d:3f:ce:77:bd:6b:e6:b6:70:29:a5:d8:0f:8b:
         04:a8:91:0f:29:cc:28:93:17:22:bd:b5:8f:ab:56:fe:6c:40:
         04:59:e9:af:8c:32:07:94:4e:2b:dc:a3:d1:5e:af:c9:8f:90:
         0f:9c:c2:a1:90:ba:07:1c:c0:e3:b4:5b:b7:af:86:dc:61:1c:
         0b:50:2e:2c:41:22:20:aa:1a:ea:77:1a:19:4d:c9:57:13:1d:
         5b:2a:09:c9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ2NEQxMTAvBgNVBAUTKEM0MjIwRjUwMzU1NjQ3QjdDODBCMkNFOEJDNzEyNkFB
QzJFMjJEMzcwHhcNMjUwOTIyMTQzMDE0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2U4OC1hMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkJKXhgxKv0K9UoJpe8oXXyRyUn07s7fDl8k4N1nUKja9UNTeSkhXY2y4SKl2
fNIdl98G6tnPfssxm8lBoEYUihMQ0Tvs3SDIOrNlRqya0FKD74Rr6xGPC1y+kGCV
psUCwrTe+AyjozvLu6Myx+FNs0JdmfhhH7pVDvLyBvTI2HnMTTBGnYQ7QqXuU5el
v9dmoyHPGUEaH8fh6zNxsPpDX47pLSnBzk7Y8YtrKJAlDm4CFufZwymLh1ho8L+8
wEeNKAXmvU84I9zaQ1uU6ZybHdV9Wch9tD4KxQ8hYDdvbNsPLcpXZYhDs4RnhRBg
8A1ZGKMkLvQBGjIBaH/r5Tm7fQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAj4tKGX
8VqETulbe5UAJd3ClmYOMB8GA1UdIwQYMBaAFMQiD1A1Vke3yAss6LxxJqrC4i03
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDY0RC9EOTMzM0ZFNDFE
NkUxMUUyQTg1MDgwQjAwOEIwMkNEMi94Q0lQVURWV1I3ZklDeXpvdkhFbXFzTGlM
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDSVBVRFZXUjdmSUN5em92SEVtcXNMaUxUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQ2NEQvRDkzMzNGRTQxRDZFMTFFMkE4NTA4MEIwMDhCMDJDRDIvMjRDNDMwNUE3
Q0Q5MTFFRUIwQjRDOTYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAtv8wMA0GCSqGSIb3DQEBCwUAA4IBAQCwsicm5FrR0psulziahHMJ
7tSm23BFKIvv1hsC66VRN7GJuJkizGkdjMAg0rwz2egyzyv0q4rl4AtryQ3Yg8nj
qgAwtj+aM2PQtDud30rGrLuvOO53XtH0Lte46YKNPr9u/OOx+hJpyXD/yJezICEq
7jlcowotb7YGlr191/r1ZxfmHZ90AWrmyiyBk1jm11mKBHrgWYuoxHpK4PpjQTnd
HmZewhjYHT/Od71r5rZwKaXYD4sEqJEPKcwokxcivbWPq1b+bEAEWemvjDIHlE4r
3KPRXq/Jj5APnMKhkLoHHMDjtFu3r4bcYRwLUC4sQSIgqhrqdxoZTclXEx1bKgnJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:42 2026 by rpki-client