Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/D0EBD7924E6511F18436303FA8833773.roa
File:                     D0EBD7924E6511F18436303FA8833773.roa (raw, json)
Hash identifier:          WaOvPQhMfI1dSiyB+qCZ5EIn4a5MAxRVB+Oa9t04E0M=
Subject key identifier:   46:46:31:E4:5D:2F:CF:D6:AE:31:47:45:5B:2E:D5:72:B6:FB:3B:79
Certificate issuer:       /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial:       023E
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/D0EBD7924E6511F18436303FA8833773.roa
Signing time:             Wed 13 May 2026 00:51:03 +0000
ROA not before:           Wed 13 May 2026 00:51:03 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        168.168.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
        Validity
            Not Before: May 13 00:51:03 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a03caf7-e354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:27:d4:db:b0:10:9a:2f:a0:31:6b:fa:9a:
                    fe:4b:cb:58:23:25:0f:12:5a:0e:a8:c6:a1:88:f5:
                    6f:15:12:02:db:28:ba:9d:dc:96:08:bc:19:2c:b1:
                    b4:30:5a:68:f7:41:e1:54:62:f6:21:af:8e:fc:3d:
                    b8:db:ec:7a:1e:3d:99:f7:81:13:06:79:5a:0e:35:
                    1a:af:ee:0d:ff:20:f7:c1:c5:a3:db:67:e0:63:03:
                    fd:4a:cb:81:9c:0a:f3:98:8a:7b:0c:90:f3:7a:72:
                    ab:e5:3f:c8:63:60:4b:9d:7e:23:28:64:3e:5a:c6:
                    f8:30:f1:85:2b:f0:e9:d5:9d:b2:2a:b7:66:53:e4:
                    5a:30:b7:d0:c7:b1:ed:78:86:7b:ab:e4:09:c5:20:
                    b2:23:02:8a:0b:6e:e2:93:46:17:94:48:5c:0b:e8:
                    47:4c:66:44:81:ba:54:b0:66:de:0a:16:e6:0e:27:
                    7c:c0:80:be:fd:2a:a6:73:6a:6b:d7:8c:82:26:a4:
                    ec:e4:c8:b5:5e:c4:ae:3a:3c:73:70:29:6a:08:9d:
                    15:5d:21:73:c4:78:68:dd:26:03:d0:84:72:26:54:
                    31:7f:f5:94:80:ea:6e:65:9a:b5:2a:2b:63:8d:b6:
                    9e:45:cf:27:36:0a:3a:92:46:bf:ee:12:75:2f:d3:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:46:31:E4:5D:2F:CF:D6:AE:31:47:45:5B:2E:D5:72:B6:FB:3B:79
            X509v3 Authority Key Identifier:
                keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/D0EBD7924E6511F18436303FA8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.168.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:74:f2:59:b7:79:ce:b2:dd:a9:0f:d4:66:4c:ff:2e:c2:9d:
         80:22:1f:56:a6:c4:9f:41:fd:58:c4:9c:2a:14:0d:57:29:50:
         91:f9:bc:f6:2e:86:bd:fc:d6:fc:9f:f1:65:94:ab:5f:75:b5:
         83:89:23:22:15:f8:c0:36:93:59:6d:6b:82:0e:5d:c3:a3:6f:
         6a:ae:1a:87:12:ce:a3:ca:dc:8b:df:50:5a:e1:2a:da:87:6c:
         74:03:81:1d:7e:28:71:ab:2e:08:9a:b2:93:a3:a9:c6:5d:2b:
         31:d0:09:8a:89:c6:a2:dc:bc:39:ae:f8:c1:9d:6b:56:1f:eb:
         88:46:59:ef:19:89:d7:99:66:3d:c4:57:fe:e5:8f:be:fd:4d:
         5e:fe:5c:b6:a4:5f:5f:4e:da:ff:9c:ae:ec:12:57:2f:e6:9f:
         69:fe:ce:d4:d2:65:c6:bf:cf:e0:8e:ed:1c:f0:62:4e:ae:85:
         9e:66:44:61:23:29:25:e6:85:60:7a:d6:dd:d1:ed:52:18:19:
         01:d2:3b:94:15:ca:8c:fd:e7:55:3e:29:0b:d6:82:88:9d:5e:
         e7:65:b7:74:82:05:f9:eb:dd:1d:12:20:24:51:ee:e8:fb:ac:
         c4:32:72:1a:57:22:c2:a8:8a:b7:11:c7:4b:6a:ff:0d:ac:c7:
         8b:a2:1e:5f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwQUMxMTAvBgNVBAUTKDg2Q0FFRjk2NzM5RUY0OUE1MTRGRTlGOTBCNkZFOTUw
OUQzQ0M5NTMwHhcNMjYwNTEzMDA1MTAzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAzY2FmNy1lMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Rsn1NuwEJovoDFr+pr+S8tYIyUPEloOqMahiPVvFRIC2yi6ndyWCLwZLLG0
MFpo90HhVGL2Ia+O/D242+x6Hj2Z94ETBnlaDjUar+4N/yD3wcWj22fgYwP9SsuB
nArzmIp7DJDzenKr5T/IY2BLnX4jKGQ+Wsb4MPGFK/Dp1Z2yKrdmU+RaMLfQx7Ht
eIZ7q+QJxSCyIwKKC27ik0YXlEhcC+hHTGZEgbpUsGbeChbmDid8wIC+/Sqmc2pr
14yCJqTs5Mi1XsSuOjxzcClqCJ0VXSFzxHho3SYD0IRyJlQxf/WUgOpuZZq1Kitj
jbaeRc8nNgo6kka/7hJ1L9OPuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEZGMeRd
L8/WrjFHRVsu1XK2+zt5MB8GA1UdIwQYMBaAFIbK75ZznvSaUU/p+Qtv6VCdPMlT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy85QTVGMEUxQTE1
MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi9oc3J2bG5PZTlKcFJULW41QzJfcFVKMDh5
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hzcnZsbk9lOUpwUlQtbjVDMl9wVUowOHlWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQwQUMvOUE1RjBFMUExNTI0MTFFRTlENzBDOTY4QzRGOUFFMDIvRDBFQkQ3OTI0
RTY1MTFGMTg0MzYzMDNGQTg4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCqKj8MA0GCSqGSIb3DQEBCwUAA4IBAQACdPJZt3nOst2pD9RmTP8u
wp2AIh9WpsSfQf1YxJwqFA1XKVCR+bz2Loa9/Nb8n/FllKtfdbWDiSMiFfjANpNZ
bWuCDl3Do29qrhqHEs6jytyL31Ba4Srah2x0A4Edfihxqy4ImrKTo6nGXSsx0AmK
icai3Lw5rvjBnWtWH+uIRlnvGYnXmWY9xFf+5Y++/U1e/ly2pF9fTtr/nK7sElcv
5p9p/s7U0mXGv8/gju0c8GJOroWeZkRhIykl5oVgetbd0e1SGBkB0juUFcqM/edV
PikL1oKInV7nZbd0ggX5690dEiAkUe7o+6zEMnIaVyLCqIq3EcdLav8NrMeLoh5f
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:05 2026 by rpki-client