Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/9DF3BC14E48011F0AC3D40BC426F56BC.roa
File:                     9DF3BC14E48011F0AC3D40BC426F56BC.roa (raw, json)
Hash identifier:          34Y8hUwkkH6eRmIMWTovUQbEQ5leyxSbVRWa0szDZH0=
Subject key identifier:   1C:F3:7F:7C:3D:EE:D0:C8:2A:16:6F:81:6B:3B:9C:A1:51:D5:ED:D8
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       0609
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/9DF3BC14E48011F0AC3D40BC426F56BC.roa
Signing time:             Sun 01 Mar 2026 18:27:37 +0000
ROA not before:           Fri 02 Jan 2026 23:18:51 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        43.226.228.0/24 maxlen: 24
                          43.226.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 23:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Jan  2 23:18:51 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a48519-91bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:42:34:0a:2b:3a:1a:8b:39:4a:da:cb:27:35:
                    b1:77:74:6f:8a:0b:95:60:e4:c3:3f:b5:39:2e:4e:
                    7b:36:36:da:d6:5e:a9:35:57:52:67:aa:ce:5d:a9:
                    5d:f1:59:73:52:5a:ac:f4:38:18:80:50:85:ef:d5:
                    4f:bf:a0:fe:ca:46:2c:40:fb:77:40:19:2d:45:7d:
                    2c:5c:f9:df:e5:d6:87:e7:16:ad:96:68:ba:78:08:
                    69:df:bc:3f:b1:52:8f:06:67:ba:c8:f4:4a:c9:29:
                    62:be:c2:da:3a:8c:94:d5:24:f7:2f:81:0e:d9:fe:
                    3a:e6:c3:42:0c:20:19:05:dd:ac:58:be:6f:c4:b5:
                    b2:94:1c:c7:18:de:46:c6:99:e6:4d:b2:2e:e9:d9:
                    cd:e6:04:2a:92:4d:cb:a9:76:2c:eb:fb:b2:9f:7a:
                    eb:ce:4b:83:e8:02:b2:8d:15:ee:2e:64:39:62:5d:
                    11:ec:d1:9a:3a:f3:d0:6e:15:d7:a8:1d:9e:96:f1:
                    e8:b5:a2:74:d6:19:9d:e7:52:47:db:e6:16:72:3e:
                    9e:48:7c:2f:99:ff:ca:f1:cc:51:c9:ca:1a:58:63:
                    b8:a4:22:94:7b:01:3c:22:94:1f:15:67:7a:fd:a3:
                    d8:2d:c3:a7:a2:5b:c1:c9:44:e9:d1:db:bd:90:29:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F3:7F:7C:3D:EE:D0:C8:2A:16:6F:81:6B:3B:9C:A1:51:D5:ED:D8
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/9DF3BC14E48011F0AC3D40BC426F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.228.0/24
                  43.226.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:96:cb:52:bd:17:33:c9:0b:26:ac:45:ff:8b:9b:e3:54:e2:
         89:0a:56:0a:71:0d:dd:8b:85:97:c4:0c:28:10:92:7b:2f:44:
         c7:ae:48:6a:f7:8d:67:d5:1d:58:2f:f1:2f:9d:50:af:4d:ca:
         16:e0:c0:be:a5:a7:5d:b2:bc:ed:0a:ad:94:c3:2f:b0:9b:c3:
         d5:9b:7a:92:ef:e9:39:4d:44:78:04:82:95:fe:f8:d1:c9:96:
         b0:5f:d6:68:c1:fc:ae:11:54:be:9e:3c:fa:a5:99:cc:a2:45:
         16:7a:8a:61:d7:bd:d1:3d:b5:66:f2:26:a8:88:24:c0:59:f0:
         11:5e:91:99:e7:03:a0:5c:52:ab:cd:5c:57:96:2f:ae:72:8b:
         dc:81:c7:53:8f:e4:92:f6:ff:52:36:13:c3:88:ee:95:77:85:
         80:9f:af:bd:f4:31:52:d7:a4:04:8e:c7:d3:3b:7a:21:02:18:
         91:f9:1a:87:6c:de:49:fa:66:ee:a6:23:e0:a0:ae:26:38:9c:
         7c:94:af:89:12:98:c5:9c:1b:82:2f:1e:46:2d:06:7f:43:7b:
         6c:34:33:d1:26:73:3c:8c:f5:81:cc:6d:ea:60:f7:e7:21:68:
         c1:dc:c9:8d:5f:7d:b0:6d:9c:fe:44:fc:cc:71:4e:43:3f:d0:
         7e:91:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:17:28 2026 by rpki-client