Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/AE811872614711F0B811645EC4F9AE02.roa
File:                     AE811872614711F0B811645EC4F9AE02.roa (raw, json)
Hash identifier:          CEPtXkuVKx6QKp3MVtGTrXzO5plriy+U5ciLSfemG7A=
Subject key identifier:   80:0D:F0:29:8F:46:C0:B8:A5:3D:E2:AA:49:DF:7E:B9:0B:9F:70:14
Certificate issuer:       /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial:       9E
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/AE811872614711F0B811645EC4F9AE02.roa
Signing time:             Thu 07 May 2026 07:45:48 +0000
ROA not before:           Thu 07 May 2026 07:45:48 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     149430
IP address blocks:        122.10.100.0/24 maxlen: 24
                          122.10.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
        Validity
            Not Before: May  7 07:45:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fc432c-d32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:5e:21:dd:1a:ac:03:f9:65:8a:9d:cd:58:
                    85:29:e9:ae:59:7d:fc:c0:b7:51:8f:ed:6e:01:17:
                    81:bc:19:20:9b:03:b3:0c:2c:11:d0:0b:d5:99:af:
                    0f:cf:bd:38:aa:04:be:a2:8f:ea:69:48:0b:29:3e:
                    95:31:75:18:8c:8d:f7:bd:b8:98:97:9e:8a:04:a3:
                    7b:4d:d9:b5:99:f7:2d:c5:a7:6e:16:aa:b2:1c:19:
                    f5:48:7b:87:04:ec:82:6d:e5:75:5f:c1:94:6e:4e:
                    06:03:67:b6:48:31:9e:0d:ad:d5:9e:4f:54:7f:7d:
                    f8:24:70:02:44:34:30:98:12:99:06:59:4e:d5:4c:
                    e2:5e:18:bf:42:ef:8c:fb:02:bd:78:d4:3e:f6:17:
                    eb:34:ff:96:94:f0:d5:12:9f:2b:5e:4e:ba:a5:fe:
                    ca:b8:cd:58:98:c4:ac:7e:9a:8b:49:9a:b8:ca:ee:
                    2a:a1:88:e0:40:bb:f6:10:a2:14:46:90:c0:3f:5c:
                    6c:09:71:a5:76:f7:76:a1:ff:5b:ca:99:9c:cb:a7:
                    df:f0:e1:af:a2:5f:54:2e:81:d3:00:f8:4a:29:39:
                    09:7d:a1:b7:f3:e9:c3:4c:fc:23:c6:16:f6:db:76:
                    46:5d:cb:84:85:00:25:ba:96:54:20:67:ce:bd:cb:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0D:F0:29:8F:46:C0:B8:A5:3D:E2:AA:49:DF:7E:B9:0B:9F:70:14
            X509v3 Authority Key Identifier:
                keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/AE811872614711F0B811645EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.10.100.0/24
                  122.10.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:e1:9e:c4:5a:da:c3:da:02:e7:0c:95:08:f9:c5:45:55:f4:
         95:da:ce:86:02:5c:0c:bc:17:28:7f:6d:91:7e:5e:ed:07:ea:
         fb:82:c6:78:00:16:a9:35:a5:59:ed:4a:4f:9a:cf:b1:ea:43:
         50:73:5a:cb:48:1e:38:79:52:fc:80:90:49:aa:4a:94:83:d5:
         3c:d6:00:37:34:28:ba:1e:dc:86:c9:2e:c2:64:c9:3a:68:a3:
         a4:65:be:7f:e8:29:b3:e9:4f:f7:23:12:15:60:2a:98:43:af:
         69:de:68:f3:81:c9:24:72:73:8c:d4:9d:37:e2:ab:9b:6a:b4:
         db:b8:5a:7a:5d:54:18:42:58:15:2c:2b:05:5c:5a:7f:b3:27:
         b4:19:b4:44:56:fd:2c:6b:24:f4:dd:a4:78:40:50:44:2b:a5:
         e3:50:d9:70:22:10:ac:e2:3f:8f:40:e5:04:5b:18:a9:d9:df:
         10:d1:93:e5:b6:ea:24:54:0e:a4:1e:d8:29:27:4e:ca:30:1a:
         ed:0a:2a:01:9a:32:09:11:1a:2c:f7:ca:8d:ae:22:7b:a4:d5:
         f1:0d:ed:97:3b:80:74:f5:14:26:87:e9:43:68:9c:cd:7c:87:
         db:14:c7:49:64:f4:68:b6:62:34:25:ed:45:32:24:1a:33:2b:
         48:66:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:33 2026 by rpki-client