Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/64B5B49A052C11F0AFEC0478C4F9AE02.roa
File:                     64B5B49A052C11F0AFEC0478C4F9AE02.roa (raw, json)
Hash identifier:          o3DLj0A49CBn+DQBy0PkQcbscmEcGxRHaVNwUFP538g=
Subject key identifier:   75:4D:4C:40:F1:7A:25:4F:8D:AA:A1:8D:25:06:01:BA:14:3F:0C:27
Certificate issuer:       /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial:       0211
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/64B5B49A052C11F0AFEC0478C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:09:00 +0000
ROA not before:           Mon 29 Dec 2025 02:22:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151664
IP address blocks:        101.1.5.0/24 maxlen: 24
                          2401:44c0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
        Validity
            Not Before: Dec 29 02:22:21 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4568c-1a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:b9:4e:91:6a:f6:29:f9:c5:3a:eb:d2:b3:
                    f7:a8:a8:be:33:e5:44:a1:89:8a:d0:8f:42:b1:af:
                    e5:19:64:fb:d2:83:46:71:ce:8e:7f:4e:7b:9f:b7:
                    ae:f7:2d:37:65:92:ae:54:6f:4b:d3:db:82:1a:07:
                    b9:6c:a5:2f:25:a7:22:82:b5:e0:3c:43:e6:79:4a:
                    b5:3c:8e:69:77:ac:e8:fd:e7:de:ed:9d:b9:41:69:
                    11:f2:88:58:c8:98:11:be:a4:9f:85:12:7d:82:92:
                    5e:07:d1:40:2f:b4:d5:0d:24:01:5d:9a:db:d5:e7:
                    5c:d5:6e:e4:98:06:83:9c:8e:32:b6:74:83:11:bd:
                    6f:c7:8c:b2:b2:2f:23:7b:39:f0:0c:53:82:f3:21:
                    50:9e:2d:fb:fd:5f:ac:4b:dd:e2:31:47:d5:c7:42:
                    ed:f3:2f:cd:88:21:79:df:a7:4b:5a:c2:8e:86:7a:
                    b4:90:ae:e9:98:2b:6f:ec:19:23:62:fe:7b:7e:f7:
                    01:06:30:a3:e2:1b:2f:52:76:be:7b:2c:95:34:19:
                    0b:c2:3b:20:18:6c:fe:e5:90:6e:d4:ec:60:1d:30:
                    57:4e:35:e4:3a:03:b5:f7:6a:d7:b1:5f:5f:bf:0f:
                    70:a7:20:b0:69:0a:4e:15:13:a4:29:27:7c:bf:6e:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4D:4C:40:F1:7A:25:4F:8D:AA:A1:8D:25:06:01:BA:14:3F:0C:27
            X509v3 Authority Key Identifier:
                keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/64B5B49A052C11F0AFEC0478C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.1.5.0/24
                IPv6:
                  2401:44c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:fd:c7:1b:89:4b:9f:c0:41:63:a2:32:2b:e4:dd:7c:1e:31:
         76:ce:d6:12:49:ec:80:af:04:25:20:d5:ec:37:06:8c:33:81:
         b4:04:ac:4d:b1:ba:2a:64:f0:51:d9:87:d3:82:01:53:47:ee:
         d0:28:93:ee:82:95:d8:02:04:d6:b7:0b:2b:14:d8:7a:0c:65:
         36:1a:74:4f:30:b0:2b:ae:b4:25:c3:e4:21:83:9b:1c:ee:8a:
         94:03:66:e8:d4:7c:36:60:ba:8c:76:d2:d1:0e:83:da:77:cc:
         51:30:00:4a:92:b7:9f:1d:6d:8b:39:96:ac:56:c0:67:69:62:
         32:3b:c4:dc:c9:1e:da:dd:7f:9d:83:5a:e4:1d:5b:ac:ff:49:
         ed:ac:02:57:8c:67:0f:9b:6b:3b:19:24:32:a8:2a:c5:0e:c3:
         fc:35:67:2a:e3:ee:84:e2:87:26:03:35:52:44:2d:78:74:b9:
         06:f7:1e:4f:fa:b8:c9:75:47:6e:3b:e1:0b:59:85:3e:06:8d:
         ba:3f:00:f3:8b:85:c2:24:25:de:2a:76:1a:e5:f0:a1:c9:f9:
         da:4a:63:c7:7e:45:37:10:16:78:5a:83:05:41:0a:80:c2:d1:
         5f:73:94:b7:ae:bf:b2:01:78:b4:d9:a5:98:41:36:75:c1:33:
         96:7c:85:3c
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz
RUUyNjdDMDQwHhcNMjUxMjI5MDIyMjIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTY4Yy0xYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6fG5TpFq9in5xTrr0rP3qKi+M+VEoYmK0I9Csa/lGWT70oNGcc6Of057n7eu
9y03ZZKuVG9L09uCGge5bKUvJacigrXgPEPmeUq1PI5pd6zo/efe7Z25QWkR8ohY
yJgRvqSfhRJ9gpJeB9FAL7TVDSQBXZrb1edc1W7kmAaDnI4ytnSDEb1vx4yysi8j
eznwDFOC8yFQni37/V+sS93iMUfVx0Lt8y/NiCF536dLWsKOhnq0kK7pmCtv7Bkj
Yv57fvcBBjCj4hsvUna+eyyVNBkLwjsgGGz+5ZBu1OxgHTBXTjXkOgO192rXsV9f
vw9wpyCwaQpOFROkKSd8v26giQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHVNTEDx
eiVPjaqhjSUGAboUPwwnMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB
RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkEyOTQvOTkyRjFEMEU0QUQ2MTFFRTk3QjUzRjcyQzRGOUFFMDIvNjRCNUI0OUEw
NTJDMTFGMEFGRUMwNDc4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZQEFMA8EAgACMAkDBwAkAUTAAAQwDQYJKoZIhvcNAQELBQADggEB
AKz9xxuJS5/AQWOiMivk3XweMXbO1hJJ7ICvBCUg1ew3BowzgbQErE2xuipk8FHZ
h9OCAVNH7tAok+6CldgCBNa3CysU2HoMZTYadE8wsCuutCXD5CGDmxzuipQDZujU
fDZguox20tEOg9p3zFEwAEqSt58dbYs5lqxWwGdpYjI7xNzJHtrdf52DWuQdW6z/
Se2sAleMZw+bazsZJDKoKsUOw/w1Zyrj7oTihyYDNVJELXh0uQb3Hk/6uMl1R247
4QtZhT4Gjbo/APOLhcIkJd4qdhrl8KHJ+dpKY8d+RTcQFnhagwVBCoDC0V9zlLeu
v7IBeLTZpZhBNnXBM5Z8hTw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:26 2026 by rpki-client