Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa
File:                     E652AA52C40911EBA930053BC4F9AE02.roa (raw, json)
Hash identifier:          mGzTTInoJyh/otYJdVIn7JY0AmtrBQV46M1DD/tm1EM=
Subject key identifier:   9C:D0:02:4B:87:DC:73:D2:0B:34:BC:F3:52:5E:0B:82:4F:4E:48:36
Certificate issuer:       /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial:       35E4
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa
Signing time:             Wed 22 Jul 2026 15:14:23 +0000
ROA not before:           Wed 22 Jul 2026 15:14:23 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     141047
IP address blocks:        111.119.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
                          rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13796 (0x35e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
        Validity
            Not Before: Jul 22 15:14:23 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a60de4f-78f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:35:ea:52:c3:6e:a1:4c:12:1b:8d:3c:95:41:
                    ef:f4:c5:48:96:ae:d1:c5:bf:4e:ae:35:ee:76:d4:
                    45:8e:03:a2:b5:3a:8e:a1:d3:1b:ca:57:53:90:09:
                    08:71:f5:79:2e:a5:ce:ff:c5:eb:28:24:ce:38:9d:
                    71:a5:20:a6:d7:68:c0:a2:09:ce:79:b2:e8:c7:98:
                    80:01:0f:27:13:fe:c5:51:fc:00:07:69:0e:56:9e:
                    ed:6e:73:fb:6e:7a:f2:ea:7a:b1:9e:b9:9d:2e:04:
                    aa:e0:ed:3b:0a:92:ce:e0:d1:b6:40:7f:70:17:83:
                    90:4d:54:61:99:d8:7f:49:68:45:f6:00:99:fd:2a:
                    0b:90:ae:81:21:f6:ae:ae:6c:03:df:46:b5:29:2d:
                    7d:f7:21:2b:98:3c:8b:5e:b4:01:fb:f3:b9:84:db:
                    f7:53:f9:ad:19:52:33:72:b8:70:28:2c:6d:98:2b:
                    55:59:41:e7:56:e0:92:7a:2c:f2:69:7f:8b:f0:93:
                    13:d0:9d:73:b8:4a:85:d6:12:7c:e2:fd:e7:fa:bc:
                    49:43:5f:6a:6e:10:ac:50:59:ac:b6:85:90:e4:19:
                    c9:c0:64:da:e5:cf:c2:00:83:fa:30:e0:be:9d:c3:
                    7f:c3:d9:05:67:5e:6b:75:00:29:88:34:f6:92:41:
                    4f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:02:4B:87:DC:73:D2:0B:34:BC:F3:52:5E:0B:82:4F:4E:48:36
            X509v3 Authority Key Identifier:
                keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.119.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:04:c3:c1:45:90:c9:c9:61:be:b4:a0:f3:a8:38:88:d9:
         98:99:af:73:3b:d6:13:e6:e6:23:77:d3:f1:36:b4:96:40:32:
         eb:36:3d:f6:92:11:e5:c1:09:24:14:80:43:9e:39:b9:26:8f:
         66:e3:21:6c:b4:da:f3:3f:9a:61:83:77:08:6a:62:8d:5b:a4:
         5b:95:8c:0a:6b:e0:b0:66:18:24:12:c3:cb:25:e4:ad:bb:50:
         c7:5c:d4:92:ee:f3:dc:ff:7a:cb:82:4c:8d:34:4c:40:09:9b:
         76:44:45:f7:bd:b7:b2:5b:1f:3c:be:6f:c3:64:b3:a8:2d:13:
         e3:32:b6:09:ea:34:cd:23:ac:9e:eb:85:57:11:fd:e1:43:c3:
         62:fc:c2:ca:2c:e5:eb:b0:4e:02:65:9c:13:df:b3:bc:59:6f:
         91:b8:7d:8e:9f:36:d4:d4:ed:06:6c:11:af:b8:6a:2d:a8:0c:
         32:dd:f1:0b:33:23:7c:06:ae:60:e8:4d:2d:af:7f:17:c3:ec:
         cc:48:78:45:c9:ff:6e:e4:8e:ae:8c:95:17:9d:c3:32:63:92:
         f5:42:ea:bc:92:42:5a:39:d8:6f:03:84:2f:e9:39:46:31:37:
         ca:3e:38:5b:55:0d:d8:6a:7b:5e:16:79:7b:ca:a4:7a:a6:68:
         56:50:d9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:57 2026 by rpki-client