Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4EE22C48C02411EC93BB8865C4F9AE02.roa
File:                     4EE22C48C02411EC93BB8865C4F9AE02.roa (raw, json)
Hash identifier:          YM8lkpFLkO4Bbr1IWWoMC4SWTHYqIxyd5W0ltmh5jmM=
Subject key identifier:   53:42:35:6F:2E:4C:66:A1:8B:CC:EA:5C:D5:ED:F2:07:8B:92:DB:9E
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1AD4
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4EE22C48C02411EC93BB8865C4F9AE02.roa
Signing time:             Fri 08 May 2026 17:19:57 +0000
ROA not before:           Fri 08 May 2026 17:19:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132596
IP address blocks:        203.97.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6868 (0x1ad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: May  8 17:19:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe1b3d-e281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:e3:5b:d5:d8:4a:6c:11:05:f0:44:b0:48:
                    07:d6:84:ac:ca:b6:24:d2:80:35:c6:45:a5:91:48:
                    5b:39:49:21:30:9a:fb:47:c7:dd:a4:08:32:8c:60:
                    b7:a2:a3:8e:95:a9:73:44:94:81:9e:13:06:4f:01:
                    3c:13:05:a4:37:d3:d4:7e:fc:3a:8c:57:74:be:c3:
                    51:60:71:5f:53:31:96:00:79:9a:44:f7:18:d8:79:
                    da:c4:2b:b4:2e:38:f0:9c:04:7f:6d:0d:eb:57:32:
                    5d:f5:50:00:ac:db:84:6f:15:40:63:9c:a5:35:52:
                    6d:26:61:94:e0:21:72:d8:7d:fe:9d:3e:18:c3:89:
                    ca:71:44:2a:1d:35:9f:ca:ae:f7:fe:33:66:57:56:
                    17:2c:9f:03:27:02:3c:a1:fe:84:a7:1f:34:41:f1:
                    73:82:08:50:03:c2:74:9f:4d:25:2a:08:ba:6b:10:
                    f2:a3:fb:7c:fa:7e:af:9b:47:a8:06:2f:22:d1:71:
                    3c:0a:0c:3b:3c:ce:93:5b:4b:d5:77:f8:c8:db:96:
                    18:2e:e6:4e:cc:52:a6:c8:9b:ab:79:14:28:a5:a5:
                    65:3f:ee:7e:b0:77:1a:9f:8b:2a:10:e3:d2:e2:a7:
                    a4:d4:24:53:01:fc:68:b8:eb:e5:2f:79:b5:c3:be:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:35:6F:2E:4C:66:A1:8B:CC:EA:5C:D5:ED:F2:07:8B:92:DB:9E
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/4EE22C48C02411EC93BB8865C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.97.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:5e:24:b0:c3:51:d0:04:11:75:c1:c3:88:e8:05:cd:2a:ab:
         61:06:0b:f4:9b:7a:07:c3:a5:9a:4c:f1:47:c1:38:8b:42:74:
         9e:67:c3:2d:17:78:75:73:1c:98:21:dc:6d:09:c8:e1:36:0a:
         c6:db:7b:39:7f:dd:3c:e2:ed:a0:e4:36:ea:cb:39:a4:d4:b6:
         69:10:da:96:ff:10:bf:ac:bc:74:fb:73:f2:74:fb:14:b0:6c:
         9f:79:63:04:34:7d:cb:9c:98:93:5c:a0:d6:f8:01:fd:d8:96:
         ea:1b:b5:95:4b:c7:64:c3:80:c9:b4:8a:e0:06:dd:4f:c9:3d:
         4e:5a:14:59:7e:0a:ec:40:4d:d2:31:56:8e:d6:02:96:53:4d:
         14:fa:ef:d0:93:19:44:7f:de:6d:f1:8f:03:9f:e9:8c:51:e3:
         f7:7c:35:c0:09:09:d9:9c:7f:6a:e5:25:90:62:3a:13:16:f8:
         4c:61:08:34:72:68:44:f9:2a:6b:8e:f9:e7:85:3c:cc:6c:64:
         2e:5e:d5:ff:95:e7:54:16:36:70:37:82:cc:a5:5a:66:7a:a2:
         a0:84:fa:2e:9d:6d:1a:74:75:24:99:85:43:d5:6b:11:02:84:
         cf:e4:6e:9a:67:47:2c:b9:47:26:b1:96:7f:12:fa:c2:0c:a3:
         25:71:bc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:09 2026 by rpki-client