Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D3148936F04D11F0ADCEC652566F56BC.roa
File:                     D3148936F04D11F0ADCEC652566F56BC.roa (raw, json)
Hash identifier:          0pGPo9QZGhKvVM/zupjLSmiK4q/8bGdL3jH2mFahAsk=
Subject key identifier:   87:F9:B3:1F:F3:16:7F:7B:6D:F1:EB:C9:24:84:57:A7:0D:26:A0:5A
Certificate issuer:       /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial:       095D
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D3148936F04D11F0ADCEC652566F56BC.roa
Signing time:             Mon 14 Sep 2026 20:41:32 +0000
ROA not before:           Mon 14 Sep 2026 20:41:32 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        43.225.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
                          rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:27:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397 (0x95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
        Validity
            Not Before: Sep 14 20:41:32 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa85bfc-70bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:4a:98:12:87:ca:b0:6a:f3:a7:21:dc:2b:
                    33:17:f6:c4:c5:0e:10:2a:12:a1:6c:b2:98:27:b8:
                    36:02:da:d4:9d:a4:29:92:23:94:1c:a6:ed:7b:7c:
                    07:da:32:53:d5:10:01:61:1d:de:41:a9:9f:96:25:
                    62:64:28:68:2e:4d:45:9a:af:ae:c3:fd:72:15:71:
                    7b:de:17:4e:fc:6f:b2:17:8f:24:3f:1a:a8:c0:7f:
                    7c:52:80:c5:bf:df:27:d9:08:8f:7f:74:5a:13:77:
                    f5:95:2b:34:81:57:73:2c:0a:f3:1d:55:bd:39:7a:
                    ed:01:16:b0:a2:dc:f6:d3:c3:49:79:a2:5f:00:1a:
                    73:0f:b0:35:b5:96:30:47:59:c0:8b:87:d0:f0:c7:
                    9b:86:b2:cd:a8:47:5b:a3:61:d4:19:40:91:92:07:
                    ca:05:83:56:10:cc:9b:b6:01:e9:8e:b7:80:79:a0:
                    8e:62:62:a1:b6:b4:9a:a0:7e:62:76:53:b7:6e:4d:
                    58:21:fd:a2:a2:32:9e:1b:ff:19:ed:1b:b2:8d:82:
                    27:7a:95:4d:8a:8c:73:41:e5:f0:bb:c1:4f:24:19:
                    aa:f7:d6:12:de:ec:54:f8:77:89:a5:0f:51:c4:6d:
                    d7:bb:0e:47:31:8b:7e:17:c8:6a:f9:8f:ab:4e:c0:
                    72:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F9:B3:1F:F3:16:7F:7B:6D:F1:EB:C9:24:84:57:A7:0D:26:A0:5A
            X509v3 Authority Key Identifier:
                keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/D3148936F04D11F0ADCEC652566F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:5b:2d:76:12:0b:98:15:80:dd:e9:f1:68:c1:fd:f2:4f:83:
         4a:3d:ba:83:d9:85:6c:29:3e:5d:35:6a:81:41:62:f8:22:ac:
         57:3e:4e:9a:19:b6:ef:5b:e2:4e:ef:cb:14:0c:87:c7:b6:4a:
         07:b1:4a:b8:d5:5d:6c:7f:40:9d:18:18:9e:2b:c7:38:b0:15:
         ba:5f:a3:1a:10:0f:76:93:81:f9:4e:3c:ce:e7:7b:d4:d6:92:
         d6:a0:59:07:af:9f:bd:67:87:ed:04:5a:86:04:13:79:36:b2:
         46:28:b3:dc:c5:24:14:ad:ca:24:07:a3:b4:8f:3b:63:0f:b4:
         a9:58:ad:10:83:0c:6e:f1:1e:da:80:f3:d0:ea:3f:ff:f8:0f:
         fe:0b:4e:da:0e:16:62:02:dd:24:00:91:c7:69:49:2e:4c:c5:
         4d:78:43:28:7b:6c:0e:13:55:3f:5a:f0:54:d8:38:0a:d9:4d:
         59:03:d5:2c:bf:ae:a4:d5:9f:67:17:20:35:83:07:07:24:05:
         be:61:71:eb:6f:11:ad:5e:2c:40:eb:9a:60:86:83:36:28:21:
         3c:74:7e:42:98:b1:bc:cc:64:77:96:8f:e7:af:5e:e4:28:e6:
         da:19:cf:90:0d:3e:9a:fa:27:8d:90:82:b1:f9:84:63:36:3d:
         a4:52:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:22:02 2026 by rpki-client