Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/5E4A01CA941111EE84D37717C4F9AE02.roa
File:                     5E4A01CA941111EE84D37717C4F9AE02.roa (raw, json)
Hash identifier:          zxnU04Q4bb1lJGkT9VOzuX1RdTtK4DGbDTsvDe9EOa8=
Subject key identifier:   DD:BD:5A:BE:AB:3B:E1:8C:B1:57:80:F6:3F:0A:3B:80:6D:D5:BE:DF
Certificate issuer:       /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial:       08D2
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/5E4A01CA941111EE84D37717C4F9AE02.roa
Signing time:             Mon 04 May 2026 21:25:04 +0000
ROA not before:           Mon 04 May 2026 21:25:04 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     136506
IP address blocks:        157.119.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
                          rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
        Validity
            Not Before: May  4 21:25:04 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f90eb0-1260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:41:ed:2f:46:a4:b1:f4:30:39:ac:8a:a2:
                    24:39:eb:d8:15:4b:82:3d:55:14:15:e8:8a:ad:cd:
                    2c:ad:28:78:30:de:69:e1:bd:d8:0f:7e:fb:e9:e2:
                    ec:39:73:76:02:0e:54:a6:25:fa:65:9c:88:b2:c2:
                    26:b6:5a:ec:19:57:ea:81:6c:ee:94:74:d5:d7:48:
                    f7:c2:42:04:c5:8c:67:46:5f:44:af:ef:dc:67:d1:
                    eb:26:9a:1a:6a:60:8b:e8:d5:5c:33:df:99:18:33:
                    47:da:9a:69:d2:bc:f4:d5:a8:0b:19:8e:98:e3:d3:
                    a5:38:81:a7:b2:d2:56:df:5e:70:ce:7d:a8:90:03:
                    48:20:7d:a6:7b:56:e8:11:39:d2:e7:7d:3d:8b:1f:
                    00:f5:41:ef:a5:ac:a2:a7:78:81:c0:8e:69:35:c5:
                    ac:9c:d0:52:61:a1:81:0b:dd:5d:87:06:1e:b9:d4:
                    c5:10:bf:43:ab:f3:af:c0:55:97:ba:63:0e:45:df:
                    60:c6:60:ea:a6:a6:20:70:4a:7b:59:e3:94:4d:2e:
                    ce:81:8c:38:94:53:60:0d:b2:d5:de:8d:9f:01:4e:
                    e9:d2:3f:56:b2:68:86:01:fa:fb:d5:43:cd:95:57:
                    56:05:f4:26:97:08:4b:ca:b3:5f:3e:1d:98:e0:55:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BD:5A:BE:AB:3B:E1:8C:B1:57:80:F6:3F:0A:3B:80:6D:D5:BE:DF
            X509v3 Authority Key Identifier:
                keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/5E4A01CA941111EE84D37717C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a5:a8:3b:fa:f4:a9:26:35:87:eb:70:78:4f:b4:a3:a1:cf:
         c7:09:ea:79:56:f3:40:d3:59:c3:ed:85:71:eb:fb:f7:53:10:
         79:e9:32:bb:77:28:de:e3:2d:61:bb:93:53:2f:b3:9a:75:99:
         ae:83:9c:cd:3a:20:9d:57:60:b3:d8:88:ee:fe:01:07:a8:c1:
         0d:4c:35:52:0c:c7:b3:fc:b9:30:15:6b:98:d2:6c:2d:5a:07:
         bb:d3:1f:fc:64:33:9f:ea:3c:51:ef:bc:c6:7c:ba:2b:bb:5a:
         09:f9:cf:b5:4c:27:6c:0e:da:d6:55:b0:c4:5d:5b:99:be:1f:
         05:ca:6a:0b:c9:c9:f2:ff:7d:15:18:52:88:05:28:42:87:a5:
         2b:7c:71:2b:49:76:a2:03:1f:82:3b:81:c1:f8:a9:86:b0:45:
         44:db:70:ec:c7:45:b9:8e:9e:b7:b8:f7:24:ad:09:ad:57:0b:
         20:89:2f:db:8f:54:f0:b1:c8:4b:84:c7:7c:20:62:06:16:7e:
         7d:49:1f:5f:a6:92:9c:5d:89:4b:d3:77:81:96:e8:7e:8d:10:
         90:df:a4:53:e9:cc:19:95:e4:65:a0:91:9c:7c:c6:2f:52:bc:
         4a:ed:93:b6:08:dd:46:5b:18:2e:ec:7b:79:35:78:34:af:95:
         f5:b7:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:39:49 2026 by rpki-client