Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3F3CACAAD37F11F197EAEF1F0166CEF9.roa
File:                     3F3CACAAD37F11F197EAEF1F0166CEF9.roa (raw, json)
Hash identifier:          WRly+20PfP3KcKph2Td6AEgKveCT9+D6SyIoW4Y3J2o=
Subject key identifier:   B2:7F:99:03:0D:B9:9B:5D:C3:98:8B:37:EF:5F:E1:56:F5:8B:41:A6
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       11FE
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3F3CACAAD37F11F197EAEF1F0166CEF9.roa
Signing time:             Thu 29 Oct 2026 09:58:10 +0000
ROA not before:           Thu 29 Oct 2026 09:58:10 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134489
IP address blocks:        111.92.146.0/24 maxlen: 24
                          111.92.147.0/24 maxlen: 24
                          111.92.148.0/24 maxlen: 24
                          111.92.155.0/24 maxlen: 24
                          111.92.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 22:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4606 (0x11fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Oct 29 09:58:10 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ae318b2-0c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:d2:a8:a6:26:4b:34:63:cc:77:06:a3:e3:
                    8e:84:c0:36:64:3a:c3:50:e6:9a:02:3f:46:a2:f1:
                    8f:29:76:fb:79:2a:6d:ad:38:65:8a:96:7c:94:80:
                    d0:c1:9f:e3:9a:8e:4a:df:43:15:c9:cb:2f:a0:64:
                    88:35:55:c6:f0:3a:49:21:ff:92:1a:2d:7f:c1:7c:
                    e7:5f:82:e3:78:3d:c1:06:7c:aa:95:db:b2:d8:b5:
                    ef:65:1c:c0:41:8a:ae:f5:16:3c:5d:0e:06:33:8d:
                    73:ed:fc:bb:a9:7f:3b:3d:82:0a:11:e6:87:73:3e:
                    d5:bf:d9:91:3a:60:c9:83:b6:51:df:1f:2a:d1:98:
                    ea:31:34:e2:2c:2e:47:c2:f4:e4:3b:44:93:f2:cd:
                    80:a2:71:26:a3:74:48:a6:8e:9d:72:96:8f:7e:0f:
                    9e:a8:b7:d0:3d:67:8e:52:6c:70:ca:17:c8:85:4a:
                    8a:0d:46:5a:15:a9:d5:c6:34:97:46:91:66:bf:eb:
                    2d:56:65:43:48:7b:23:ac:a3:ea:cf:21:4f:55:ab:
                    bf:3f:d9:20:42:d4:c5:9d:63:62:a4:bf:cd:1b:d6:
                    ca:f5:ab:5a:ac:51:b7:17:d2:f8:15:e3:2d:33:52:
                    9a:70:85:9b:ca:15:e8:43:d9:da:fd:e5:27:ea:ba:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7F:99:03:0D:B9:9B:5D:C3:98:8B:37:EF:5F:E1:56:F5:8B:41:A6
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3F3CACAAD37F11F197EAEF1F0166CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.146.0-111.92.148.255
                  111.92.155.0-111.92.156.255

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:d4:52:eb:a1:e4:20:2b:04:a1:04:09:b0:34:e4:b4:0a:
         da:8d:b2:fb:53:0d:76:54:1b:7b:f8:21:72:0c:a0:8f:85:96:
         6c:a1:15:11:1e:d7:3d:2e:32:6f:33:37:1d:12:11:2f:9c:12:
         76:d4:ec:a0:53:68:bb:8e:ad:c7:f7:4c:2b:5d:38:7d:93:0b:
         e2:9e:43:5a:13:f6:5f:ff:ab:33:40:d3:81:9c:10:42:d2:95:
         13:fd:c3:7d:9a:6c:d2:a9:c7:4d:e4:e6:6f:44:8e:d9:f5:82:
         bd:80:ec:1c:ad:42:aa:b4:43:44:e7:c4:3f:f0:e8:da:63:ce:
         e4:73:c6:1a:f0:36:5e:57:3b:ed:7c:14:29:60:68:b4:79:22:
         1d:f1:1e:26:cd:4d:66:a8:5d:48:4a:8d:3e:c1:1a:ee:96:c0:
         f2:8e:77:48:7b:70:2d:f9:a8:62:af:45:0b:6c:99:5f:45:ab:
         bc:d9:43:aa:70:69:8a:35:37:55:87:f4:12:30:5e:b6:1e:ad:
         08:bd:04:a0:10:d7:13:25:e4:70:a1:69:a2:2e:d7:d9:cb:1b:
         aa:fe:a9:56:47:cf:81:d7:13:8a:c9:4c:0a:ed:30:f5:a5:e3:
         7c:82:a6:13:ee:d2:b4:41:5f:98:2f:ea:10:db:2c:3b:4d:7f:
         73:24:af:87
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgICEf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYxMDI5MDk1ODEwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWUzMThiMi0wYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vvSqKYmSzRjzHcGo+OOhMA2ZDrDUOaaAj9GovGPKXb7eSptrThlipZ8lIDQ
wZ/jmo5K30MVycsvoGSINVXG8DpJIf+SGi1/wXznX4LjeD3BBnyqlduy2LXvZRzA
QYqu9RY8XQ4GM41z7fy7qX87PYIKEeaHcz7Vv9mROmDJg7ZR3x8q0ZjqMTTiLC5H
wvTkO0ST8s2AonEmo3RIpo6dcpaPfg+eqLfQPWeOUmxwyhfIhUqKDUZaFanVxjSX
RpFmv+stVmVDSHsjrKPqzyFPVau/P9kgQtTFnWNipL/NG9bK9atarFG3F9L4FeMt
M1KacIWbyhXoQ9na/eUn6rrd9QIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFLJ/mQMN
uZtdw5iLN+9f4Vb1i0GmMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvM0YzQ0FDQUFE
MzdGMTFGMTk3RUFFRjFGMDE2NkNFRjkucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi
BAIAATAcMAwDBAFvXJIDBABvXJQwDAMEAG9cmwMEAG9cnDANBgkqhkiG9w0BAQsF
AAOCAQEAPdXUUuuh5CArBKEECbA05LQK2o2y+1MNdlQbe/ghcgygj4WWbKEVER7X
PS4ybzM3HRIRL5wSdtTsoFNou46tx/dMK104fZML4p5DWhP2X/+rM0DTgZwQQtKV
E/3DfZps0qnHTeTmb0SO2fWCvYDsHK1CqrRDROfEP/Do2mPO5HPGGvA2Xlc77XwU
KWBotHkiHfEeJs1NZqhdSEqNPsEa7pbA8o53SHtwLfmoYq9FC2yZX0WrvNlDqnBp
ijU3VYf0EjBeth6tCL0EoBDXEyXkcKFpoi7X2csbqv6pVkfPgdcTislMCu0w9aXj
fIKmE+7StEFfmC/qENssO01/cySvhw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:28:15 2026 by rpki-client