Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa
File:                     B2A621DADA4711F0A0B4C6A990D3641D.roa (raw, json)
Hash identifier:          vtYeDrgDVDYpydstxqGvKZDpQ+8m/h2qUkMiKDSPoy8=
Subject key identifier:   34:BF:9B:25:03:EC:A6:A5:CE:91:CF:69:B9:74:7F:58:BF:14:A5:DD
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0F81
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa
Signing time:             Sun 01 Mar 2026 19:18:34 +0000
ROA not before:           Tue 16 Dec 2025 06:23:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141372
IP address blocks:        111.92.158.0/24 maxlen: 24
                          111.92.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3969 (0xf81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Dec 16 06:23:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4910a-6cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:52:db:68:16:7d:cb:dc:a9:23:55:21:5f:
                    6b:ee:24:4a:8b:d2:89:a6:8a:1c:de:da:2e:78:48:
                    d5:aa:75:12:2d:25:fa:fb:d7:b1:bd:6a:b0:57:c5:
                    10:98:17:be:0d:33:13:fa:00:67:b4:d8:e6:c5:f5:
                    c6:3c:5c:d4:84:a3:91:d1:fe:ac:11:11:9b:aa:d7:
                    30:23:31:ff:3d:54:8e:69:ea:64:7b:9d:3b:e8:9b:
                    06:23:10:83:4d:99:c3:26:1c:66:d5:bf:24:52:8e:
                    54:39:c6:4b:1e:c8:53:a7:74:1d:bf:f5:f8:c6:78:
                    c8:8e:f6:76:c9:25:02:de:b2:a8:b2:3a:1b:9a:19:
                    91:3b:2e:fb:f9:db:b0:c7:8b:0e:7c:2e:72:eb:2a:
                    7d:69:99:f3:ce:a6:9c:01:02:63:a5:8e:ff:df:cd:
                    19:47:12:15:ce:60:80:11:21:3d:e9:fe:34:e4:b5:
                    24:cd:48:64:f8:e6:00:a3:d0:f6:c8:5b:8e:d8:ff:
                    be:5a:4a:63:a6:65:09:74:71:ae:ec:e2:bd:2d:f3:
                    1a:07:b0:6c:a1:11:52:5a:29:21:40:8c:9e:be:69:
                    e6:a1:7a:ee:b4:5e:29:47:4a:65:9a:dc:10:76:2c:
                    ab:15:e6:38:4e:7a:40:21:7d:c7:b2:d4:7a:a8:56:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BF:9B:25:03:EC:A6:A5:CE:91:CF:69:B9:74:7F:58:BF:14:A5:DD
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:85:df:2a:a9:18:66:b1:23:c3:6b:e3:13:89:44:14:64:51:
         82:7b:ae:4d:d9:e4:41:e4:df:3f:e5:7d:1a:af:71:39:30:36:
         a3:dd:a4:74:ba:d7:6f:ab:97:72:6c:ea:9e:bd:e2:06:5b:8f:
         92:2d:f3:dc:4f:d1:e8:cd:94:5a:f1:4b:1b:1b:82:49:8d:ed:
         7c:4e:88:91:82:b3:70:76:85:97:98:27:e8:31:d4:08:6d:80:
         4f:4b:c6:39:b3:73:10:82:c7:cc:8e:a6:36:87:40:03:37:7e:
         75:88:f7:41:19:d2:3b:57:06:7d:ec:07:a7:74:8f:00:07:ec:
         64:2f:9e:33:c9:27:c2:65:ac:a0:25:31:a9:13:c7:f1:48:e5:
         d3:df:ea:c9:2e:41:01:db:74:fe:ac:e2:f1:c5:c8:5f:ee:8a:
         c9:ce:16:9e:3e:1e:06:e9:56:7a:97:7f:c1:ca:8a:1f:94:9b:
         d3:d9:21:48:29:3b:f8:eb:8c:c1:d2:9f:71:c1:ec:36:1a:42:
         3b:1f:94:7e:70:c0:f0:da:df:45:0a:ee:f9:3a:ae:46:da:a8:
         6d:77:ed:20:d8:af:fb:3d:56:ca:2a:a5:88:90:52:c6:73:dc:
         cf:8e:16:47:a6:b1:d8:44:22:6f:52:f6:31:87:f0:77:5f:da:
         3e:5e:92:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:13:42 2026 by rpki-client