Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F5DFB1A6CD1B11F19D97589A0666CEF9.roa
File:                     F5DFB1A6CD1B11F19D97589A0666CEF9.roa (raw, json)
Hash identifier:          1z3U6r7srJMsG9DhVTJU+5Mt7lHfVXl6uNKmn6SG2QA=
Subject key identifier:   0E:FA:59:6A:A9:43:2E:7C:80:DA:3F:05:80:D6:01:37:C4:F1:8A:5E
Certificate issuer:       /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial:       068F
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F5DFB1A6CD1B11F19D97589A0666CEF9.roa
Signing time:             Wed 21 Oct 2026 06:52:20 +0000
ROA not before:           Wed 21 Oct 2026 06:52:20 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     210387
IP address blocks:        43.226.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
                          rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 22:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
        Validity
            Not Before: Oct 21 06:52:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6ad86124-8624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:2e:b1:c4:f0:67:b7:9a:05:0e:74:fd:16:
                    27:d2:d2:cb:0c:a6:6e:6f:79:60:f7:6d:15:3e:c4:
                    ae:15:da:b3:9a:2f:72:e5:5b:4f:bb:a7:86:c0:20:
                    5c:f1:71:59:35:38:5e:2e:62:9d:29:89:a4:65:43:
                    67:4f:56:d0:67:41:15:58:09:c3:6f:0d:a8:4a:7a:
                    2c:ad:6a:5c:ea:ed:de:db:4b:a7:44:a3:fe:c6:a2:
                    5f:ab:73:ee:90:aa:6a:ba:1d:50:b8:b8:86:64:55:
                    12:38:bf:ab:d7:50:a6:70:69:90:3a:e0:b3:1c:29:
                    a0:02:b3:40:65:7e:fb:05:c8:ca:32:34:a7:b3:f4:
                    56:9e:e2:05:c1:0f:78:bc:12:97:9d:37:a6:c4:76:
                    48:9b:a2:ca:0e:21:91:bc:77:72:17:6d:7f:08:68:
                    ab:98:e0:8c:08:d6:64:50:f5:9f:20:4f:8b:93:7a:
                    40:bb:2e:7b:8b:36:29:d6:b1:ee:d0:4d:cf:86:97:
                    0e:f1:ef:72:82:3a:6c:b4:63:ec:b3:7f:7c:b1:5d:
                    11:24:fd:f8:9a:01:77:a0:c0:ad:b9:b3:ba:9d:56:
                    f2:13:08:27:10:75:cd:e7:41:cc:95:26:f4:b2:70:
                    57:ba:5c:02:2d:d2:62:8e:6f:d6:86:13:c0:d5:b0:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FA:59:6A:A9:43:2E:7C:80:DA:3F:05:80:D6:01:37:C4:F1:8A:5E
            X509v3 Authority Key Identifier:
                keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F5DFB1A6CD1B11F19D97589A0666CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:93:f0:72:4c:f9:63:a0:c2:9a:97:93:b6:c7:51:1c:ee:e6:
         05:bb:4f:3d:92:01:3e:f7:37:d5:62:ae:e0:db:44:69:24:40:
         4c:4e:cd:21:90:7c:f2:ed:39:04:e7:6d:00:8e:b0:52:2c:3b:
         96:84:a1:a7:a5:b8:67:12:8d:f8:45:86:0f:93:58:e7:24:51:
         e7:e1:d3:ce:6c:b3:8e:54:38:b0:d3:8b:c6:e0:90:6d:2b:3b:
         cd:44:bf:e0:09:a5:c9:e9:e7:b8:0c:99:15:9d:cd:16:29:c0:
         6a:50:e3:ed:e6:f8:55:71:18:da:be:12:32:26:87:6d:39:a0:
         9a:37:8b:43:85:3f:25:e3:d9:d5:fd:95:a7:b3:80:cf:3c:64:
         d7:f3:bb:c2:e1:6b:87:27:71:d5:47:79:30:0b:a9:89:e4:11:
         85:e8:af:c1:a0:bd:d8:9d:96:50:24:d8:01:aa:31:2f:f3:59:
         c7:37:9f:69:52:36:c1:d8:e3:6d:bb:2b:bb:64:f8:ca:b0:f1:
         8f:75:ea:f2:26:f5:c8:29:31:ad:b9:d8:51:82:bc:c9:8f:5b:
         30:52:be:27:58:73:05:a9:9a:13:fd:f0:66:17:42:74:de:86:
         53:bc:79:d1:f0:14:50:d9:1e:a8:95:52:6e:47:13:6e:b6:e0:
         6f:56:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:49:36 2026 by rpki-client