Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa
File:                     311C494286CC11F09348D16BC4F9AE02.roa (raw, json)
Hash identifier:          c5z8GmrR8gTadfODZE+aXaQsjeSugCDsmlzjHXLsAp4=
Subject key identifier:   5A:08:5B:6E:69:8B:F8:2B:CE:C1:FC:8D:76:5E:FA:E2:44:CC:57:2E
Certificate issuer:       /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial:       096F
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa
Signing time:             Fri 01 May 2026 06:19:17 +0000
ROA not before:           Fri 01 May 2026 06:19:17 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     152584
IP address blocks:        126.209.15.0/24 maxlen: 24
                          126.209.33.0/24 maxlen: 24
                          126.209.37.0/24 maxlen: 24
                          126.209.38.0/24 maxlen: 24
                          126.209.40.0/24 maxlen: 24
                          126.209.51.0/24 maxlen: 24
                          126.209.60.0/24 maxlen: 24
                          126.209.63.0/24 maxlen: 24
                          126.209.80.0/24 maxlen: 24
                          126.209.81.0/24 maxlen: 24
                          126.209.85.0/24 maxlen: 24
                          126.209.86.0/24 maxlen: 24
                          126.209.96.0/21 maxlen: 24
                          126.209.116.0/22 maxlen: 24
                          126.209.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
                          rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
        Validity
            Not Before: May  1 06:19:17 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69f445e5-0174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:4f:0e:a4:49:8a:28:4c:5c:89:5d:7f:e8:
                    99:ff:6f:fd:5b:a6:00:48:a6:50:65:4b:ff:e6:7a:
                    2c:87:3c:64:c3:ab:76:ee:f6:04:c5:2e:4c:2a:69:
                    5f:9f:65:af:f7:43:20:78:95:00:d9:0f:bd:5f:5e:
                    83:37:53:ab:7f:17:3e:7c:0e:76:70:b4:ca:66:bf:
                    5d:3b:03:73:c2:90:f3:47:49:93:7f:7c:16:35:34:
                    36:ec:aa:02:12:b0:52:9d:f1:43:54:68:32:3a:08:
                    7b:7c:59:d5:84:75:aa:1f:ae:5a:51:22:19:30:2a:
                    8b:71:cb:91:41:6c:17:d5:bd:e1:08:95:87:1a:42:
                    1e:52:5a:3a:8a:3c:5d:b5:c8:47:44:a5:47:22:6a:
                    a2:4a:e5:1b:54:8d:87:0e:5e:b8:ae:6e:de:b0:67:
                    c3:a4:d5:bb:f3:de:4a:39:0d:6b:fd:74:94:d9:cd:
                    8f:d4:31:0a:5a:a1:9e:84:2c:be:4c:93:6d:94:3e:
                    54:ac:54:c1:2c:56:09:e1:03:0a:62:01:99:c6:30:
                    4b:d6:bc:d9:38:ac:99:1e:c6:e6:f2:3a:f8:ee:ba:
                    02:43:2f:f5:9f:37:50:fb:22:a6:27:cc:60:d4:46:
                    df:98:8a:bd:91:11:23:fb:80:91:4d:2e:99:25:98:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:5B:6E:69:8B:F8:2B:CE:C1:FC:8D:76:5E:FA:E2:44:CC:57:2E
            X509v3 Authority Key Identifier:
                keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.209.15.0/24
                  126.209.33.0/24
                  126.209.37.0-126.209.38.255
                  126.209.40.0/24
                  126.209.51.0/24
                  126.209.60.0/24
                  126.209.63.0/24
                  126.209.80.0/23
                  126.209.85.0-126.209.86.255
                  126.209.96.0/21
                  126.209.116.0-126.209.123.255

    Signature Algorithm: sha256WithRSAEncryption
         54:9e:16:df:ed:d1:67:3f:d1:cd:f3:34:51:b7:0e:9c:83:ed:
         38:a2:f0:5f:30:ab:2c:80:01:7d:66:e9:81:89:53:ef:dc:07:
         61:8f:e6:34:67:d9:84:71:d3:ca:15:60:d3:be:7e:de:9f:82:
         1b:fd:3b:13:cf:d1:17:56:62:e2:03:28:9c:4e:bc:26:a9:a3:
         9b:70:b6:ae:6a:28:70:86:a9:e0:fd:18:bf:e6:dd:4c:c0:cf:
         44:4f:ca:56:7b:66:e0:be:ce:e1:98:c1:04:8b:33:6a:9a:27:
         46:b0:2a:28:87:f0:4b:5d:48:94:2c:6c:be:4c:e7:78:8f:3c:
         7e:94:90:26:39:1f:73:94:69:75:2e:db:fb:d8:13:3f:ac:03:
         a0:c5:22:c0:6d:05:f7:75:a2:bc:af:04:84:20:33:40:1d:42:
         7b:1a:d4:85:b6:28:23:2d:42:cf:07:a8:18:a0:a6:91:4c:c5:
         b5:40:6b:e2:b3:c4:e9:10:da:d0:a2:9d:61:dd:3c:77:73:63:
         12:cb:56:58:e3:03:d7:8a:90:b4:12:42:be:4d:73:ee:81:e7:
         c1:b7:b7:30:f2:1b:d4:f9:a2:88:60:6d:be:4d:11:46:5b:9b:
         66:99:2d:ae:f6:26:1d:83:9c:19:5c:b9:67:3b:fd:f5:d6:f8:
         2f:1b:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:28 2026 by rpki-client