Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa
File:                     6DE5D7943FA311EDABCBBA25C4F9AE02.roa (raw, json)
Hash identifier:          /IrNKQvpTsDj67fXbpZCLhjHZ4y9EpJo1SBu1q2vy7M=
Subject key identifier:   D5:C8:66:1E:07:09:62:6D:6F:65:35:74:3B:98:7F:65:84:9B:99:6D
Certificate issuer:       /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial:       051C
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 01:25:08 +0000
ROA not before:           Wed 01 Jul 2026 01:25:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        202.50.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
                          rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
        Validity
            Not Before: Jul  1 01:25:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a446c74-5024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dc:56:04:59:4e:59:ca:55:f0:d7:f6:a7:39:
                    51:41:7a:73:9c:ab:bc:7b:50:4e:f0:43:aa:30:82:
                    9b:a9:06:e4:f3:03:22:a9:6a:fa:b8:59:42:a1:b8:
                    4b:12:ae:6c:53:fd:15:f5:6d:e4:f7:3f:4b:5f:07:
                    81:72:ff:9f:f9:60:77:fa:88:0b:79:be:80:a5:65:
                    0c:4e:87:80:52:9c:83:89:2f:c7:33:4e:52:39:61:
                    6c:12:5b:fa:c7:9f:1e:16:49:9a:c8:82:59:27:db:
                    97:3e:68:b4:ba:e0:6a:9b:16:93:65:95:35:ae:35:
                    65:c7:80:73:cb:9f:32:ca:37:59:22:cf:5f:1d:5d:
                    e6:2a:26:7c:9f:76:9a:7b:21:ec:13:ab:b1:0d:fc:
                    13:93:20:79:c7:88:c4:ee:a3:03:93:fc:50:93:26:
                    ea:1d:a3:1f:4d:2b:c6:8b:d8:7d:e2:0b:8d:8e:27:
                    97:dd:de:3e:79:6f:50:72:c6:4b:15:bd:2f:ec:44:
                    c6:75:c8:61:6f:21:50:d5:2d:f1:f3:ae:02:d9:a5:
                    4c:68:49:98:81:45:72:8c:96:c9:01:b7:aa:b3:75:
                    38:06:be:af:ae:98:e2:55:1e:6a:4f:c8:0a:3a:bf:
                    19:24:0e:13:bd:49:f8:42:a7:5c:9d:f4:8f:91:c0:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C8:66:1E:07:09:62:6D:6F:65:35:74:3B:98:7F:65:84:9B:99:6D
            X509v3 Authority Key Identifier:
                keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6DE5D7943FA311EDABCBBA25C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:4c:9a:d9:fe:8e:2c:19:14:79:c3:cb:c7:79:53:a5:71:7c:
         38:82:a6:29:ce:51:5e:43:e3:b5:4d:8b:b7:33:5c:19:bc:64:
         5a:0e:b8:9b:42:7e:c0:c0:9e:ac:5b:6d:93:e3:b9:6a:5e:cd:
         ce:df:76:57:3a:3e:de:dc:3b:76:c0:8c:b5:11:d4:fd:d9:d7:
         31:8e:e0:8c:a2:9f:45:35:b1:3a:60:19:ec:73:4d:ff:7d:5d:
         f7:0d:3b:95:87:06:56:fd:2d:62:ab:7f:67:e0:3f:7b:fe:28:
         4c:46:74:92:b7:30:b9:d0:ce:2d:96:7b:ed:32:c0:56:ad:d1:
         46:62:0a:8a:f7:30:ea:f1:b1:94:4e:79:db:6d:b4:99:99:e8:
         2b:f5:38:79:91:43:73:b0:da:74:e1:2b:93:df:fa:95:06:bf:
         ae:51:88:2f:b9:a7:e4:63:ba:11:bf:1d:44:7d:ce:b2:58:b4:
         d5:c3:b8:b7:90:d9:bd:1c:22:00:a9:92:0a:f3:31:91:26:c3:
         72:27:55:72:2b:45:36:a1:e2:a8:a4:0b:ba:73:07:a1:be:15:
         0d:d4:a7:4c:77:e4:13:ca:e2:24:cf:13:9f:8d:74:f6:aa:4a:
         d3:b2:7a:bf:42:0d:e4:3a:3d:9c:89:bc:2e:87:c2:ee:14:b7:
         22:1b:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:24 2026 by rpki-client