Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B49F7F56D2F111F1A7AFF9A71466CEF9.roa
File:                     B49F7F56D2F111F1A7AFF9A71466CEF9.roa (raw, json)
Hash identifier:          w4rozlAgICD7/Pt2a7v/F/lX/gnjgz3bolh3Q9if4GQ=
Subject key identifier:   B3:8A:9E:B2:21:2F:F3:99:88:5A:5D:15:43:A6:73:1B:6F:0F:42:5B
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       11F7
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B49F7F56D2F111F1A7AFF9A71466CEF9.roa
Signing time:             Wed 28 Oct 2026 17:29:05 +0000
ROA not before:           Wed 28 Oct 2026 17:29:05 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        111.92.128.0/24 maxlen: 24
                          111.92.129.0/24 maxlen: 24
                          111.92.130.0/24 maxlen: 24
                          111.92.131.0/24 maxlen: 24
                          111.92.132.0/24 maxlen: 24
                          111.92.133.0/24 maxlen: 24
                          111.92.134.0/24 maxlen: 24
                          111.92.135.0/24 maxlen: 24
                          111.92.136.0/24 maxlen: 24
                          111.92.137.0/24 maxlen: 24
                          111.92.138.0/24 maxlen: 24
                          111.92.139.0/24 maxlen: 24
                          111.92.140.0/24 maxlen: 24
                          111.92.141.0/24 maxlen: 24
                          111.92.142.0/24 maxlen: 24
                          111.92.143.0/24 maxlen: 24
                          111.92.144.0/24 maxlen: 24
                          111.92.145.0/24 maxlen: 24
                          111.92.149.0/24 maxlen: 24
                          111.92.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 22:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4599 (0x11f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Oct 28 17:29:05 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ae230e1-20ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7d:03:ad:e9:f8:bd:b4:97:b7:8b:68:6e:32:
                    8a:c3:08:3f:11:81:e0:b5:b7:1e:6a:b0:29:4a:12:
                    0d:b8:cd:67:f2:51:47:56:78:19:a4:e1:af:83:1a:
                    5d:58:a3:1f:52:2c:1c:1d:cd:c3:d0:90:84:69:ca:
                    f4:97:77:40:05:98:5d:f7:ca:4b:01:19:03:ad:ef:
                    18:49:9f:50:f1:33:29:36:7a:c1:5b:16:34:e4:15:
                    9e:bf:9e:77:a8:31:5b:5e:59:09:07:0e:32:57:41:
                    bc:d8:f3:38:fb:0f:a7:22:a3:d5:fd:ea:92:8e:10:
                    6f:b6:1d:cb:7f:20:f0:b2:2e:b0:99:1e:ed:7b:2f:
                    7f:60:51:cb:c5:b1:97:df:51:46:47:de:5b:d7:30:
                    8f:21:f8:44:8b:42:09:de:33:31:55:18:95:b0:c4:
                    75:c1:e3:38:1f:b0:a5:a9:02:f2:85:67:64:1c:21:
                    a4:df:0f:52:24:80:c0:b0:23:29:4a:a4:2b:4d:98:
                    f1:b4:fa:8f:0a:84:52:13:0a:91:23:30:86:ba:6f:
                    62:bb:04:21:b2:28:3e:fa:60:87:51:b8:b6:d8:a4:
                    0d:d5:39:2b:bf:5a:00:43:99:08:53:d2:69:16:fa:
                    bb:8f:55:31:27:24:ae:dc:0f:9e:c4:8f:14:9b:03:
                    37:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8A:9E:B2:21:2F:F3:99:88:5A:5D:15:43:A6:73:1B:6F:0F:42:5B
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B49F7F56D2F111F1A7AFF9A71466CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.128.0-111.92.145.255
                  111.92.149.0-111.92.150.255

    Signature Algorithm: sha256WithRSAEncryption
         97:86:17:15:9a:70:a2:88:57:41:b5:a4:72:94:9a:5e:b5:a1:
         5f:ce:d6:8d:1a:13:21:36:23:98:01:f0:d2:dc:65:bd:9a:91:
         50:06:af:a4:03:19:39:f2:5b:a3:42:81:de:f4:74:db:3a:6d:
         f6:27:d4:86:e4:8d:00:b8:d3:42:47:fb:97:35:61:ca:46:d2:
         b5:ca:b6:45:e8:e9:43:37:0b:dd:42:15:b0:14:7c:c9:04:8c:
         7b:3f:55:4b:a2:f0:d7:8a:fb:e5:da:82:bf:d3:97:3a:ec:9e:
         88:6b:63:2a:77:d4:6e:ad:26:fc:bf:ce:dd:a7:d8:41:fd:00:
         7d:6d:b8:97:f0:6b:f1:f7:b6:fe:10:68:e7:63:58:60:97:0d:
         f5:17:06:ad:ea:1f:20:f8:ec:70:87:23:ec:ea:f9:b1:5e:c2:
         18:59:e8:60:73:a3:cd:21:a9:3f:a0:55:18:31:ce:a4:83:27:
         f2:6a:40:5f:db:bc:ba:bb:2f:59:37:2b:54:36:b0:4d:6a:42:
         f0:fd:03:f7:f9:73:63:c5:52:09:df:74:da:9d:26:5e:2a:be:
         1b:47:47:ae:78:db:0b:41:fd:c6:5a:98:2e:70:8d:9e:db:ed:
         c8:d5:34:1f:af:6c:55:70:7c:e6:41:ca:6e:1f:ca:2b:f8:82:
         2c:fc:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:28:37 2026 by rpki-client