Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/7125C7DE611411ECBF66B385C4F9AE02.roa
File:                     7125C7DE611411ECBF66B385C4F9AE02.roa (raw, json)
Hash identifier:          tUTfuyMuhgZx3jWuyTrDSoXEGkf8qQG37s0/X/Mz58A=
Subject key identifier:   B2:33:67:26:0A:12:CF:D6:96:75:17:2B:38:1C:9B:2B:22:4D:D3:03
Certificate issuer:       /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial:       051E
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/7125C7DE611411ECBF66B385C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 01:25:12 +0000
ROA not before:           Wed 01 Jul 2026 01:25:12 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     17792
IP address blocks:        202.21.130.0/24 maxlen: 24
                          202.50.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
                          rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
        Validity
            Not Before: Jul  1 01:25:12 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a446c78-3648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:78:38:43:09:00:36:03:29:0c:5a:13:51:
                    ec:ce:05:3a:da:03:47:e3:c5:cf:18:e6:f2:4f:89:
                    96:e3:87:be:44:dc:c8:1f:04:54:06:ae:2c:7f:3c:
                    e0:2c:5c:2f:c0:6c:a3:fa:54:61:9f:75:9b:1d:76:
                    c9:4c:37:dc:20:59:99:69:59:80:07:ab:06:8b:4c:
                    63:b7:7a:6f:89:02:42:78:df:e6:c9:c3:bc:b3:62:
                    56:05:80:7d:fd:3a:5f:82:4c:96:3b:67:45:dc:ed:
                    16:0d:f8:6e:9b:2f:14:de:63:50:a4:20:7c:bd:f7:
                    61:5d:dc:67:7f:2f:af:5e:f2:ab:67:4d:ea:a1:d4:
                    4b:6a:14:13:ae:34:9c:61:eb:84:3e:3c:bc:3e:e2:
                    b6:28:50:c3:9a:46:65:7f:9d:d9:f5:da:cf:17:a4:
                    72:f8:9d:09:dc:3b:33:fa:df:a5:3b:95:b9:e5:dc:
                    98:44:28:a1:a1:64:68:e8:c1:06:28:db:d2:ec:b2:
                    37:50:de:30:3f:56:57:3b:b6:8e:8d:de:ac:d9:61:
                    37:81:9e:7c:25:42:95:f9:28:d9:b5:89:60:59:01:
                    f8:b1:38:64:5e:57:f9:fc:49:7a:ad:84:e0:81:3f:
                    fa:7b:80:fc:4e:fe:0d:42:fa:d4:f3:c9:bd:13:78:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:67:26:0A:12:CF:D6:96:75:17:2B:38:1C:9B:2B:22:4D:D3:03
            X509v3 Authority Key Identifier:
                keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/7125C7DE611411ECBF66B385C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.21.130.0/24
                  202.50.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:95:60:2d:2e:ca:cb:b2:d2:c3:e9:9d:de:9d:09:83:82:d4:
         bf:08:70:53:02:96:b2:a7:5c:98:2e:72:5c:32:40:56:4c:52:
         78:be:43:f7:3e:8a:8e:39:ee:52:72:fe:1e:5a:75:0a:5d:b9:
         1f:25:09:59:14:c4:b3:a3:08:69:fd:92:5f:84:00:84:40:92:
         a0:f3:db:74:63:85:01:70:2b:0c:4b:f1:a2:03:81:6a:0b:1a:
         05:5d:2f:c5:a1:93:f3:c2:7c:6a:df:af:e7:6e:f7:4f:f9:d2:
         56:4b:69:e7:f2:f7:83:71:85:d3:39:37:24:cf:98:88:02:ac:
         5f:92:bd:34:41:5e:33:f1:70:27:1c:11:eb:25:d1:5d:4a:65:
         28:0d:4d:46:28:96:29:05:43:78:72:e3:2e:0c:2f:7c:32:e2:
         e2:44:8e:1e:75:b3:35:cc:44:2a:dd:f1:e2:60:b8:03:92:20:
         2f:dd:6e:ad:8f:db:51:3b:28:51:ae:a5:90:a7:d3:e9:cf:cf:
         d8:ca:53:8d:cd:f8:83:59:6d:a6:c6:52:cc:98:32:60:b2:d1:
         cc:30:33:08:73:4c:f9:dd:a8:87:0f:e1:c8:20:d4:41:78:b6:
         b4:de:e1:20:00:ae:d2:b2:21:39:aa:66:21:71:70:70:ad:96:
         fe:7c:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:58 2026 by rpki-client