Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/48BB49E8763A11EFA077F11CC4F9AE02.roa
File:                     48BB49E8763A11EFA077F11CC4F9AE02.roa (raw, json)
Hash identifier:          SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=
Subject key identifier:   62:C1:18:16:5C:B2:87:78:1D:5C:30:E2:12:68:08:0F:9D:AB:60:EF
Certificate issuer:       /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial:       1F83
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/48BB49E8763A11EFA077F11CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:19:11 +0000
ROA not before:           Thu 06 Nov 2025 15:53:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     209242
IP address blocks:        114.129.43.0/24 maxlen: 24
                          2400:c760:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
                          rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:56:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8067 (0x1f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
        Validity
            Not Before: Nov  6 15:53:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4750f-45df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:9e:36:05:94:12:17:f7:ce:58:24:d0:08:
                    b6:b3:bc:5d:19:d9:fb:39:c9:18:d0:53:bf:39:19:
                    6a:73:da:da:41:f3:f4:ff:c8:46:79:80:68:89:5e:
                    fe:98:d2:25:a8:41:bd:80:c9:0c:bc:b8:35:51:c5:
                    e6:c0:ea:fe:72:82:0d:70:88:15:66:06:4b:d9:01:
                    a6:e0:f6:29:53:7a:36:d8:85:d8:13:2e:c0:d8:2e:
                    ae:d9:e0:25:f2:4a:53:a6:fb:66:f2:d7:7a:5f:e9:
                    91:45:de:4c:45:15:2b:54:b4:3f:7d:7c:f3:6f:e2:
                    1c:21:38:33:47:03:10:b3:c8:78:c4:62:21:5f:50:
                    ce:73:0b:59:18:e2:06:9f:6c:0e:f0:d2:f4:2b:cd:
                    07:59:cc:31:91:10:1d:b9:4c:a8:77:24:b2:c6:da:
                    4e:d7:62:ce:8c:2a:59:cb:82:01:8c:c6:2a:a7:0c:
                    47:39:04:98:15:e9:94:bd:4a:08:1a:c2:9e:8f:3e:
                    5f:2f:84:ac:70:78:0d:21:cd:66:4a:0b:53:4c:5f:
                    79:3e:5a:88:a8:74:90:e7:d8:b9:20:ba:e1:ad:35:
                    0a:7a:b6:d2:7f:2b:05:44:fa:d7:3c:dd:7a:d4:31:
                    49:51:f3:38:f0:9b:f2:93:f0:f6:d3:26:d5:84:49:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:18:16:5C:B2:87:78:1D:5C:30:E2:12:68:08:0F:9D:AB:60:EF
            X509v3 Authority Key Identifier:
                keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/48BB49E8763A11EFA077F11CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.129.43.0/24
                IPv6:
                  2400:c760:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:52:e7:9b:4f:ef:fb:51:95:3b:f8:ed:3b:3c:91:82:0a:
         90:12:a9:1d:2a:5e:80:51:96:eb:5e:1d:99:af:00:6b:c5:5e:
         22:04:84:78:d7:f2:9f:82:41:84:da:32:97:0f:16:ab:b0:ce:
         33:25:03:5a:c2:92:bd:73:39:16:0b:9f:ea:8e:4c:51:47:b3:
         25:64:af:c3:7f:6e:43:48:ca:32:c2:28:c8:47:f1:aa:00:d7:
         d4:49:97:75:78:de:05:74:71:28:65:a4:11:32:51:0c:6b:27:
         25:7a:68:d2:87:42:1a:2e:0d:ad:9e:22:3a:38:bd:57:29:78:
         6e:2a:a2:f4:5d:15:32:bb:b7:d7:a4:e6:b4:d8:cf:0d:63:cf:
         1e:17:e4:5b:ae:03:6d:89:9e:2a:45:48:db:db:88:2c:eb:2c:
         98:29:3f:93:4f:12:12:b8:10:56:42:c2:d9:e0:a1:88:67:a5:
         7c:8f:24:19:51:aa:ab:f2:16:78:63:b5:47:d9:20:8a:bf:4a:
         3a:26:b1:02:11:1b:73:50:86:95:ac:61:aa:7d:68:77:45:a1:
         7f:02:41:15:c0:9b:02:62:f1:4e:69:31:82:12:2a:05:50:39:
         bb:4e:4e:19:7e:a4:ae:ee:67:5e:3b:be:a2:c8:84:25:83:42:
         a9:ba:69:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:47 2026 by rpki-client