Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/CFBD3A08D57611F192C48A131B66CEF9.roa
File:                     CFBD3A08D57611F192C48A131B66CEF9.roa (raw, json)
Hash identifier:          QqufRpQG4zGT+S/xQwlt1kllndQtUYas1WcBV5iYLEg=
Subject key identifier:   95:1F:AE:48:B3:E9:47:FF:03:16:B9:BB:C2:69:AF:B7:0E:67:52:79
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1204
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/CFBD3A08D57611F192C48A131B66CEF9.roa
Signing time:             Sat 31 Oct 2026 22:02:49 +0000
ROA not before:           Sat 31 Oct 2026 22:02:49 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     141372
IP address blocks:        111.92.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 19:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4612 (0x1204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Oct 31 22:02:49 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ae66589-03ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ab:16:2e:1f:b3:ce:a8:15:5e:fc:70:7c:cd:
                    bf:91:bd:2b:3c:64:4f:3e:c7:4c:c1:01:b0:4f:25:
                    1d:ff:95:ca:b1:23:a6:f8:73:e1:88:ee:04:94:84:
                    0b:29:d0:08:98:cb:e3:d5:5b:37:c3:b2:0c:be:25:
                    e3:d5:77:c4:c9:1c:96:1f:84:02:72:07:71:c2:64:
                    05:13:87:2a:da:5f:c3:c5:92:26:43:3f:50:3a:f5:
                    54:4f:77:29:e0:35:16:df:61:bb:20:a1:0f:26:ac:
                    d3:85:a6:e0:7c:0d:45:ed:11:9d:ee:cc:ba:8d:64:
                    c2:05:bc:7c:40:91:e1:e8:17:b1:7b:8c:19:cb:b1:
                    5b:ad:cf:e0:7c:cd:98:73:94:84:76:6b:53:f8:c4:
                    4e:e6:ca:9b:8f:45:a9:d4:f1:42:9f:fb:c7:12:5c:
                    85:49:72:de:33:76:eb:fd:ad:ab:ba:fe:b0:64:4d:
                    36:c1:0c:48:3b:e4:ea:bb:74:96:91:93:23:5b:64:
                    f0:2b:a3:58:db:3f:4d:ef:20:15:c3:b6:11:83:a4:
                    0d:8f:8d:4c:25:b5:ed:f6:4b:f5:a7:1f:33:05:bf:
                    88:a9:34:94:4d:e5:8b:a7:d9:19:9c:c5:6b:cd:cc:
                    a7:96:2a:f8:ff:45:62:fe:06:14:f7:e4:bc:a3:64:
                    6a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1F:AE:48:B3:E9:47:FF:03:16:B9:BB:C2:69:AF:B7:0E:67:52:79
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/CFBD3A08D57611F192C48A131B66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:6b:0c:9c:c8:dd:80:02:05:af:33:d2:2c:05:87:d2:df:
         86:a0:d5:b6:0b:d7:01:f7:7e:ef:92:c2:59:22:ec:48:7e:9a:
         6e:01:dc:17:87:4d:dd:27:d1:be:3c:32:36:e0:26:80:ae:a6:
         bf:91:84:1d:15:48:e0:6f:28:2e:29:1d:ea:d9:cb:5f:10:6f:
         75:a7:22:f6:0d:da:5c:cd:d8:09:9b:ef:6f:e1:a4:50:a2:4f:
         c3:b9:50:e5:fa:87:d7:9f:29:47:b9:18:b7:c8:80:3f:9e:41:
         75:a7:78:fb:6a:45:a6:90:c2:3c:5f:c0:fe:a3:a5:70:f0:48:
         8b:6a:e9:68:cd:5f:c6:23:46:2f:19:97:37:20:75:5d:d4:7e:
         09:d6:c0:f3:02:4b:b1:c0:71:40:91:92:9d:18:bc:83:27:35:
         13:ac:4b:69:af:7b:68:6a:7d:3e:07:63:3b:0a:a1:dd:19:98:
         a2:1b:a1:f5:e2:76:a7:10:0b:5c:26:c5:c5:ba:43:04:45:0c:
         bc:b8:66:00:87:19:07:9a:0e:bd:7a:40:94:07:bf:bc:0d:0b:
         8f:20:68:16:46:59:34:86:5d:e5:04:28:44:32:2c:49:d5:3f:
         69:f2:63:da:ce:54:e8:6e:a9:b9:8b:7f:d2:10:4f:19:e1:3a:
         75:1a:f5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 16:53:09 2026 by rpki-client