Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
File:                     A3048576EC3911EEA6178B13C4F9AE02.roa (raw, json)
Hash identifier:          CA0JuNkvVVXyVT5toC5IeijiB5JBV7T65rHh34RkVIc=
Subject key identifier:   BD:F4:45:27:06:50:5B:EE:7A:37:F9:33:D6:59:78:2C:F4:24:63:B2
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       0201
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa
Signing time:             Tue 23 Jun 2026 04:33:16 +0000
ROA not before:           Tue 23 Jun 2026 04:33:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138995
IP address blocks:        14.192.4.0/22 maxlen: 23
                          43.224.224.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Jun 23 04:33:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3a0c8c-6703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:cc:fa:32:0a:81:51:5b:7c:be:a5:d1:47:
                    98:c8:9a:54:28:c3:5f:76:d3:bc:10:b3:ea:60:c8:
                    34:1d:6b:49:6a:3f:7e:b8:30:89:d0:64:a0:42:49:
                    19:f5:13:f9:d4:6d:e7:21:05:05:36:2c:e3:56:ae:
                    eb:f3:e0:f2:d4:f5:9f:d9:0d:90:e4:70:82:86:eb:
                    d0:84:30:c4:09:f9:3d:2f:f9:9c:22:9a:db:74:52:
                    1a:8d:09:97:a4:aa:24:9c:6c:c2:2c:b5:d4:64:0c:
                    24:4f:69:89:d5:28:80:4a:68:ce:ab:71:3d:9e:f1:
                    84:e7:ff:b4:2b:93:fe:8b:cc:07:1e:f7:e5:da:db:
                    ce:f0:a4:f9:ba:1d:c8:0f:1a:c1:99:e9:e8:15:79:
                    7d:a7:6b:5e:c6:6d:8c:b6:9b:3f:f8:25:9e:06:89:
                    3f:f2:f8:4a:6c:c2:2b:af:05:fb:0f:ea:47:06:da:
                    01:09:a5:6d:99:52:f9:79:7f:55:65:33:27:b3:ac:
                    55:0b:bf:24:a1:35:2a:40:4c:21:5a:eb:83:6e:ed:
                    17:e7:82:8c:d9:42:a9:fc:1e:82:04:83:1e:45:23:
                    13:94:94:f6:27:4f:fe:2f:fb:0f:97:cc:97:c8:20:
                    43:25:8d:41:6b:86:e9:b1:7d:15:1d:2d:e4:c0:06:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F4:45:27:06:50:5B:EE:7A:37:F9:33:D6:59:78:2C:F4:24:63:B2
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A3048576EC3911EEA6178B13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.4.0/22
                  43.224.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:bf:da:3a:f4:c3:cd:16:90:d4:3e:0d:01:b5:f7:91:50:e6:
         61:ac:a6:a0:08:07:4b:82:5d:05:75:bb:37:b7:a5:1d:ac:34:
         f6:05:9b:9e:b4:79:e7:bc:76:88:08:c8:c2:80:8f:48:12:a5:
         62:ae:8f:56:b7:d5:85:03:37:dc:76:e7:fe:b2:4b:78:95:5f:
         be:5d:8c:04:4b:ec:4f:a3:aa:11:f0:56:8d:5b:31:bc:fb:46:
         b5:13:5f:41:70:34:b5:94:47:d9:0d:52:70:2e:69:66:95:f5:
         cb:a9:4c:4f:d2:5d:9c:cc:51:2f:44:f1:88:ee:9e:08:2a:06:
         49:03:66:45:12:8e:72:8d:5e:41:66:06:57:a7:67:b4:73:df:
         b8:62:58:33:e7:e9:f0:3b:75:cf:e6:f8:96:24:0a:42:29:5e:
         b0:e3:5a:36:76:7f:05:f8:c7:00:6d:bc:7e:96:dc:9c:e7:d9:
         66:bd:fd:c8:fc:e0:b0:24:fc:03:39:7a:90:62:67:e8:ec:5c:
         9c:a4:60:ee:cf:24:b5:d1:14:7c:30:61:56:cd:3b:ba:34:58:
         60:98:c6:0f:27:d0:2e:38:d1:23:6a:e0:7c:9b:ea:5b:31:e3:
         60:ac:63:24:49:4f:eb:d0:14:0f:3f:5c:4c:04:8a:a8:65:cb:
         60:69:fc:6c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2
Mjc1QjZBNTUwHhcNMjYwNjIzMDQzMzE2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNhMGM4Yy02NzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZXM+jIKgVFbfL6l0UeYyJpUKMNfdtO8ELPqYMg0HWtJaj9+uDCJ0GSgQkkZ
9RP51G3nIQUFNizjVq7r8+Dy1PWf2Q2Q5HCChuvQhDDECfk9L/mcIprbdFIajQmX
pKoknGzCLLXUZAwkT2mJ1SiASmjOq3E9nvGE5/+0K5P+i8wHHvfl2tvO8KT5uh3I
DxrBmenoFXl9p2texm2Mtps/+CWeBok/8vhKbMIrrwX7D+pHBtoBCaVtmVL5eX9V
ZTMns6xVC78koTUqQEwhWuuDbu0X54KM2UKp/B6CBIMeRSMTlJT2J0/+L/sPl8yX
yCBDJY1Ba4bpsX0VHS3kwAaX3wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFL30RScG
UFvuejf5M9ZZeCz0JGOyMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB
NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkY1MzUvNjlBNTgwNzhCQTY2MTFFRUJDMzk2MjZFQzRGOUFFMDIvQTMwNDg1NzZF
QzM5MTFFRUE2MTc4QjEzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCDsAEAwQCK+DgMA0GCSqGSIb3DQEBCwUAA4IBAQCvv9o69MPNFpDU
Pg0BtfeRUOZhrKagCAdLgl0Fdbs3t6UdrDT2BZuetHnnvHaICMjCgI9IEqViro9W
t9WFAzfcduf+skt4lV++XYwES+xPo6oR8FaNWzG8+0a1E19BcDS1lEfZDVJwLmlm
lfXLqUxP0l2czFEvRPGI7p4IKgZJA2ZFEo5yjV5BZgZXp2e0c9+4Ylgz5+nwO3XP
5viWJApCKV6w41o2dn8F+McAbbx+ltyc59lmvf3I/OCwJPwDOXqQYmfo7FycpGDu
zyS10RR8MGFWzTu6NFhgmMYPJ9AuONEjauB8m+pbMeNgrGMkSU/r0BQPP1xMBIqo
Zctgafxs
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:31 2026 by rpki-client