Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E0A4E5182A6011EB8DEF2641C4F9AE02.roa
File:                     E0A4E5182A6011EB8DEF2641C4F9AE02.roa (raw, json)
Hash identifier:          S8YIm5p0Dr4U+o+Q4l7tNGrJi8MU8cMPSwOdjDQL/b4=
Subject key identifier:   2C:BD:68:0B:5C:A9:15:9C:E4:05:87:49:59:AE:19:BD:21:CF:35:92
Certificate issuer:       /CN=A912383B/serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
Certificate serial:       0901
Authority key identifier: 07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E0A4E5182A6011EB8DEF2641C4F9AE02.roa
Signing time:             Wed 06 May 2026 20:25:48 +0000
ROA not before:           Wed 06 May 2026 20:25:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        149.234.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2305 (0x901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B, serialNumber=0727AAC5B8CF7FE68CCD6DE77F6C8B46D574FAA7
        Validity
            Not Before: May  6 20:25:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fba3cc-cf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:28:65:14:92:53:81:0b:2b:bc:a7:d0:e8:
                    ae:b6:81:b1:da:ad:c1:00:8b:4b:29:92:21:4f:ef:
                    d0:75:95:8a:74:00:c9:2f:08:1d:2d:53:ec:ec:af:
                    4b:33:98:32:c1:04:c1:4d:e6:56:31:b1:94:b3:e1:
                    40:1c:77:8a:bb:57:28:cd:87:56:17:23:8b:12:0a:
                    9f:28:5b:df:60:dd:b2:c8:7a:88:cc:a3:f6:c1:34:
                    ba:a9:a3:e8:52:2e:fd:45:1d:5e:4a:fd:bc:75:47:
                    38:b1:ed:dd:a3:bc:bc:06:2e:a3:6c:b0:60:c0:bd:
                    ad:0b:3f:f2:5b:6e:81:f5:e6:7a:32:e2:9f:9b:69:
                    f6:74:5b:b9:7a:39:67:0c:74:69:5b:00:a5:8d:51:
                    88:a5:ab:a2:22:e0:cc:fd:33:3e:93:7a:43:b6:2d:
                    7c:7d:73:9d:57:04:22:8b:e4:64:79:a4:f7:5c:b8:
                    c2:52:07:bc:db:fe:52:ac:76:d7:36:2c:bb:c6:c4:
                    b8:50:fb:3d:c4:fb:19:6e:5c:ea:e5:8c:24:e5:2e:
                    d6:6e:c2:d4:57:64:19:20:01:f8:f7:5b:45:5b:f5:
                    3c:97:d4:57:1b:c9:92:2d:9c:2a:d5:7b:5c:6f:ee:
                    5b:8c:49:0c:e7:93:74:81:5f:d1:9f:56:66:b4:a3:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BD:68:0B:5C:A9:15:9C:E4:05:87:49:59:AE:19:BD:21:CF:35:92
            X509v3 Authority Key Identifier:
                keyid:07:27:AA:C5:B8:CF:7F:E6:8C:CD:6D:E7:7F:6C:8B:46:D5:74:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/ByeqxbjPf-aMzW3nf2yLRtV0-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByeqxbjPf-aMzW3nf2yLRtV0-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/F4BD5008E02311EA9922DE42C4F9AE02/E0A4E5182A6011EB8DEF2641C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ef:c8:e0:34:a1:a9:24:96:6d:d0:6a:ff:75:ca:71:17:a1:
         0c:31:a5:c1:bc:73:e7:85:de:34:59:5f:90:f4:b1:aa:5a:68:
         7d:2e:db:8e:79:5c:97:c0:a5:f4:30:cb:5e:95:41:c4:9b:ef:
         fc:e7:45:de:4c:1f:c4:ff:cc:df:31:c6:00:2e:5e:be:25:e3:
         ec:c2:11:d3:45:2b:11:e5:93:cf:40:88:87:cc:bd:8b:9e:04:
         cf:cf:51:fa:12:77:d4:16:5a:38:49:bd:d3:18:41:27:96:3c:
         62:70:e0:96:cd:22:11:d5:46:78:36:e1:fe:5f:57:e0:1b:f0:
         07:4b:3a:b6:50:9d:5b:9f:e6:af:7a:80:8b:43:0a:96:92:83:
         b6:89:90:6f:b9:b6:05:a3:94:04:9b:ff:69:8e:27:22:d7:9a:
         d8:f7:9e:2d:54:c0:7e:1a:9f:71:70:d2:9f:83:47:86:3c:89:
         03:8d:0f:d5:f2:68:d1:5d:8e:8f:1f:03:56:3c:33:93:21:2e:
         ad:7c:74:65:7f:96:69:4b:1d:c7:52:27:2a:aa:c5:aa:2d:4d:
         df:4f:16:26:c7:ca:83:08:f8:15:3d:27:7c:f2:b9:8f:93:89:
         18:ae:5f:1f:d5:8c:29:b1:17:c3:7e:40:fa:e2:5f:53:0e:d3:
         70:dc:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:32:23 2026 by rpki-client