Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa
File:                     6688CA76535F11EE9BC85F83C4F9AE02.roa (raw, json)
Hash identifier:          pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=
Subject key identifier:   DF:8C:E7:AB:45:C6:22:F2:A4:CA:7C:5F:71:6B:80:97:66:2D:7B:65
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DBA
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:42:10 +0000
ROA not before:           Sun 02 Nov 2025 19:08:10 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4202202111
IP address blocks:        112.137.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3514 (0xdba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Nov  2 19:08:10 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48881-3e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:6c:1e:59:42:e6:f6:06:4e:1a:60:6f:0e:
                    92:6a:01:90:de:85:78:7d:45:fd:23:6f:00:13:86:
                    ef:5f:6b:d1:1e:50:32:90:26:92:d4:35:57:3e:24:
                    55:83:19:fb:7d:2a:d9:ab:a7:cb:c4:91:c6:06:c2:
                    c0:6e:78:25:a1:26:df:6b:d9:7e:cd:58:0d:6a:fb:
                    8d:89:35:f5:36:df:70:bd:e3:6f:dd:be:5b:a0:20:
                    1c:ed:aa:bf:8d:82:21:51:e0:10:9e:bb:52:51:ba:
                    79:5f:4b:33:a2:3e:47:1d:e8:e5:35:fb:f8:d5:eb:
                    90:1d:39:a3:92:46:fb:b9:d1:da:d9:cf:7a:ee:51:
                    6c:3b:89:a2:1e:01:ce:c7:54:43:ba:99:2c:1d:1b:
                    96:8d:b1:02:8f:e5:ad:5c:85:b9:c8:c9:72:30:45:
                    e6:97:ce:87:dc:19:18:12:9b:5d:0e:b0:5a:b9:b3:
                    cc:15:94:21:a0:aa:36:a7:98:62:dd:10:59:f8:07:
                    7a:b8:13:7e:9d:82:d5:d7:b3:31:88:91:75:1e:ea:
                    01:2c:ec:ec:86:a0:d2:98:d1:82:b9:6c:8f:40:12:
                    a8:23:a3:11:54:58:0b:55:81:5d:54:ac:7f:b9:3b:
                    26:21:dd:ce:13:d3:71:a7:c5:3c:9d:89:4e:1a:eb:
                    e5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8C:E7:AB:45:C6:22:F2:A4:CA:7C:5F:71:6B:80:97:66:2D:7B:65
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/6688CA76535F11EE9BC85F83C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:91:99:f0:52:ba:d5:3b:cc:ad:dd:9e:68:d5:76:a0:7e:47:
         77:8f:74:57:e3:ef:32:cc:21:c1:0e:61:14:46:c8:72:e3:15:
         a0:d3:ea:48:15:be:d0:b9:ce:da:15:a9:89:72:be:33:d9:a3:
         90:56:b4:5e:64:bf:b3:6e:23:84:a9:37:05:dc:22:3d:ab:90:
         39:72:ef:13:e8:87:bc:bf:3d:9d:9e:79:30:aa:31:a7:13:75:
         58:19:42:f7:85:74:14:47:1e:95:ea:3b:80:c9:8e:13:ca:0d:
         3a:ae:d8:7b:86:8b:85:48:db:89:ac:77:d7:bf:8e:b8:22:73:
         db:ea:d3:54:72:66:4b:35:d1:b0:78:63:0d:5e:c8:54:06:e4:
         47:d0:96:7e:ce:a3:2a:08:1e:94:83:06:72:4f:bc:fa:9f:5b:
         be:c3:3e:8e:43:25:58:84:28:ed:b9:53:72:ab:01:d8:5f:85:
         f5:c0:c9:4b:b6:bf:8a:df:1f:77:a0:53:1a:ab:ee:b4:85:e8:
         b3:79:17:40:aa:fe:1b:dd:76:5e:8e:ad:af:50:10:47:7e:eb:
         07:d5:6f:f6:99:7c:5a:eb:63:62:ec:e5:b0:ec:95:39:2d:0c:
         ba:af:33:04:4b:eb:4b:78:c3:de:d2:78:fa:b4:90:47:10:71:
         94:87:05:4e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF
Q0QxRDczQjYwHhcNMjUxMTAyMTkwODEwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODg4MS0zZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw25sHllC5vYGThpgbw6SagGQ3oV4fUX9I28AE4bvX2vRHlAykCaS1DVXPiRV
gxn7fSrZq6fLxJHGBsLAbngloSbfa9l+zVgNavuNiTX1Nt9wveNv3b5boCAc7aq/
jYIhUeAQnrtSUbp5X0szoj5HHejlNfv41euQHTmjkkb7udHa2c967lFsO4miHgHO
x1RDupksHRuWjbECj+WtXIW5yMlyMEXml86H3BkYEptdDrBaubPMFZQhoKo2p5hi
3RBZ+Ad6uBN+nYLV17MxiJF1HuoBLOzshqDSmNGCuWyPQBKoI6MRVFgLVYFdVKx/
uTsmId3OE9Nxp8U8nYlOGuvlTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN+M56tF
xiLypMp8X3FrgJdmLXtlMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1
RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNjY4OENBNzY1
MzVGMTFFRTlCQzg1RjgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcImgMA0GCSqGSIb3DQEBCwUAA4IBAQBXkZnwUrrVO8yt3Z5o1Xag
fkd3j3RX4+8yzCHBDmEURshy4xWg0+pIFb7Quc7aFamJcr4z2aOQVrReZL+zbiOE
qTcF3CI9q5A5cu8T6Ie8vz2dnnkwqjGnE3VYGUL3hXQURx6V6juAyY4Tyg06rth7
houFSNuJrHfXv464InPb6tNUcmZLNdGweGMNXshUBuRH0JZ+zqMqCB6UgwZyT7z6
n1u+wz6OQyVYhCjtuVNyqwHYX4X1wMlLtr+K3x93oFMaq+60heizeRdAqv4b3XZe
jq2vUBBHfusH1W/2mXxa62Ni7OWw7JU5LQy6rzMES+tLeMPe0nj6tJBHEHGUhwVO
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:39 2026 by rpki-client