Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa
File:                     3A748F0E9C1211EF80DB437DC4F9AE02.roa (raw, json)
Hash identifier:          jZxAOWiAe/BSMfxj7HHzJhOBvkhZZ5jWDWhZwPaoTDg=
Subject key identifier:   A4:D9:52:02:71:68:81:C4:0F:36:62:E9:DC:3E:F3:4B:05:0D:F0:97
Certificate issuer:       /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Certificate serial:       0105
Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:29:12 +0000
ROA not before:           Wed 03 Dec 2025 04:33:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153392
IP address blocks:        160.191.188.0/23 maxlen: 23
                          160.191.188.0/24 maxlen: 24
                          160.191.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl
                          rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
        Validity
            Not Before: Dec  3 04:33:59 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a59eb8-48e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f6:92:4f:2a:9e:f5:c7:58:a5:fb:70:38:f7:
                    ae:85:27:91:e3:c7:d4:3a:35:96:32:ca:73:d7:b0:
                    11:78:a2:1a:38:70:95:a0:cb:99:1f:49:e0:74:5f:
                    b9:b5:27:46:27:23:d2:75:8d:6e:66:e2:b5:5c:5a:
                    07:9c:65:33:51:b0:79:9a:b1:ee:bc:9d:e4:86:99:
                    74:9c:80:ac:66:e0:92:89:e9:2e:6d:96:ca:18:79:
                    dc:31:0d:9e:01:8c:30:55:5a:eb:c3:75:8e:c8:45:
                    1b:76:a2:f7:7c:5c:68:91:6d:e8:02:05:ee:54:d7:
                    6f:ba:22:1f:9f:00:55:51:e7:da:91:73:d8:87:b3:
                    2b:f3:a2:c0:8e:bf:e0:80:6a:b4:aa:60:ee:dd:aa:
                    83:7f:ee:10:18:ef:46:b1:f6:b1:de:9e:e8:cd:d8:
                    ef:f1:1e:9b:49:98:7d:f6:6b:4c:84:b1:84:f6:28:
                    29:44:1d:e5:fe:59:74:2c:80:93:da:3e:0d:d7:1d:
                    f6:75:0b:32:48:ed:55:8f:a7:58:fd:80:a1:10:6c:
                    3e:aa:2e:b6:79:d5:b0:34:00:aa:77:df:86:76:6a:
                    09:70:ec:73:1a:cf:cb:3e:aa:c2:22:d2:1d:3b:14:
                    1e:a5:42:7d:67:67:4e:f7:a3:26:85:00:d3:98:1b:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D9:52:02:71:68:81:C4:0F:36:62:E9:DC:3E:F3:4B:05:0D:F0:97
            X509v3 Authority Key Identifier:
                keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:40:14:92:c8:91:25:ff:9e:13:91:93:dd:4d:14:57:a8:55:
         f4:4e:46:51:d8:5c:74:69:a4:e0:43:b7:bc:d0:bf:ed:f7:5b:
         e9:50:7b:1d:a9:6c:20:d5:7a:cc:2e:42:a2:e5:ae:36:7b:3e:
         ef:7c:61:3e:65:57:71:ef:a2:56:2d:7d:15:01:ca:4d:20:dd:
         08:6a:23:c3:71:01:89:f9:be:30:e8:d9:b4:71:76:83:43:ca:
         61:aa:5f:5a:d1:79:0f:c1:da:a2:5a:07:e5:94:61:f2:95:14:
         c5:f5:b5:6d:36:1a:3a:1b:30:89:e3:4f:2e:22:f2:dd:90:44:
         c0:2f:1b:e3:03:08:9d:66:0c:46:a9:c5:62:cf:fc:e2:20:cf:
         22:dc:d8:c0:f7:52:19:a5:f5:9e:57:26:63:51:4f:b7:39:ad:
         06:f2:97:65:79:2e:65:71:4a:c1:ca:59:2f:df:5c:6d:8d:48:
         cc:a8:3e:98:a7:7e:02:d6:b2:2d:f4:aa:17:04:c6:ee:4f:c7:
         53:1e:81:a8:d7:ad:25:fb:a6:b6:8b:ab:97:a5:4b:13:13:3e:
         56:fc:eb:d5:04:48:07:17:4a:fb:69:7b:b4:2a:bd:1f:56:dd:
         86:97:83:47:e7:f0:21:6b:5e:aa:31:6f:48:78:a6:89:9f:5d:
         d0:6b:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:08 2026 by rpki-client