Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa
File:                     54438BB2150A11F08FAB4D29C4F9AE02.roa (raw, json)
Hash identifier:          fhUltqKS7ZF6Pkb9VSsVCiWn8eSyjmU/5PMkOGkbij8=
Subject key identifier:   2D:5D:41:B0:B2:B4:13:87:C8:FE:D0:29:46:C5:D1:E2:79:3D:3E:D1
Certificate issuer:       /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Certificate serial:       F6
Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa
Signing time:             Tue 05 May 2026 06:39:15 +0000
ROA not before:           Tue 05 May 2026 06:39:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153642
IP address blocks:        203.13.66.0/24 maxlen: 24
                          203.13.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
                          rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
        Validity
            Not Before: May  5 06:39:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f99092-526a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:68:e8:17:1d:9f:c9:e5:4e:87:ad:61:a2:
                    a1:09:90:9f:b1:42:ee:9e:91:b1:9a:c4:06:6d:ba:
                    cd:5f:0e:b4:c5:75:9a:34:92:2e:48:be:4d:4a:16:
                    15:97:3d:ac:4f:3c:da:21:01:93:44:88:49:08:cc:
                    d9:2e:5b:c1:a6:58:ca:39:60:c0:e9:73:53:29:64:
                    8a:4a:eb:6f:21:67:d1:d9:fa:41:e0:8a:fd:64:00:
                    24:a6:87:be:0e:84:45:b3:ae:65:d6:ba:0d:28:ce:
                    16:1c:09:d8:c5:1b:4a:c3:69:8d:1f:c2:30:e4:a4:
                    c4:23:9c:1c:5d:40:3d:05:1a:5f:7a:11:d5:fb:f0:
                    0b:91:c6:0a:bb:87:d2:10:33:8d:a8:ba:48:9c:56:
                    6b:a6:43:2a:9c:1b:8b:52:8a:28:ab:d3:83:5d:68:
                    db:86:96:e7:48:b9:30:05:66:e7:25:47:f9:72:15:
                    c9:ed:b3:ea:12:0f:4e:50:52:b0:29:72:cf:2c:e1:
                    7c:d9:1c:99:47:b3:31:9c:39:07:36:12:c9:6c:a4:
                    b8:2f:4c:ce:7b:16:5a:19:1c:27:aa:8d:50:0a:ec:
                    d4:6a:f7:5f:4c:5b:84:1c:d8:27:b9:f9:d2:9a:ae:
                    c0:d9:31:16:9e:f6:24:03:c4:52:49:1d:48:a6:22:
                    ff:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:41:B0:B2:B4:13:87:C8:FE:D0:29:46:C5:D1:E2:79:3D:3E:D1
            X509v3 Authority Key Identifier:
                keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.13.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:82:c6:8b:30:14:77:4f:7e:a7:3a:7e:6d:18:93:9b:80:fb:
         7c:00:60:d7:68:ed:c3:c0:a7:78:a7:12:67:5d:a5:ec:df:1a:
         db:87:40:f9:f3:f8:c3:65:30:51:c5:a9:df:11:71:12:23:c7:
         ca:7f:95:d9:69:13:a4:06:7c:4f:33:be:ee:6a:c9:6f:88:c7:
         23:f1:43:33:a1:83:eb:94:39:90:a1:4a:08:ca:0b:c3:e8:9f:
         d7:a4:dc:b6:77:b6:95:e1:a9:71:e5:20:67:dd:e0:f3:6b:2d:
         98:9c:35:cc:96:f5:01:ee:dd:89:10:7e:a5:99:e9:69:b0:09:
         b5:66:cc:83:d8:7d:2a:82:b9:31:e2:69:41:0d:21:d7:bb:52:
         74:c7:4c:f0:1a:e5:d8:92:db:56:20:9a:f6:99:cf:7f:16:be:
         60:78:1f:3d:7f:a6:36:34:a6:8e:ff:60:96:1c:a2:3c:2e:e0:
         9b:82:b9:a4:ad:f6:ac:77:5b:39:90:83:4e:07:46:ca:60:c8:
         6d:0a:04:ca:43:8c:4e:56:66:a4:69:3c:65:76:7b:20:c5:a3:
         6c:02:88:0f:b5:4e:d6:2d:c2:fd:08:eb:e2:79:8c:7a:9c:4b:
         ed:64:a2:1c:55:e0:21:a2:e5:29:c0:c9:99:c8:7e:ab:e3:49:
         b4:6c:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:24 2026 by rpki-client