Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F123461AEBB511ECA410BF6DC4F9AE02.roa
File:                     F123461AEBB511ECA410BF6DC4F9AE02.roa (raw, json)
Hash identifier:          Kkc4FrDSL9TyqmO89DwT+TFSNidqWuKseH0zs4kx+8M=
Subject key identifier:   48:DF:CD:AB:A2:7D:96:B9:3E:BD:73:5D:93:7F:04:73:A6:44:19:38
Certificate issuer:       /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial:       038F
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F123461AEBB511ECA410BF6DC4F9AE02.roa
Signing time:             Tue 21 Apr 2026 01:33:29 +0000
ROA not before:           Tue 21 Apr 2026 01:33:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55477
IP address blocks:        202.125.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
                          rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
        Validity
            Not Before: Apr 21 01:33:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e6d3e9-b438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:51:4d:6b:57:c4:f7:63:2e:45:be:ff:86:
                    6f:4f:db:ce:36:46:39:29:11:7d:6b:27:9c:60:f9:
                    c2:0c:14:0f:6b:7a:e8:85:6b:04:37:f0:c6:dc:ba:
                    e4:0c:80:db:e6:e6:7b:28:8b:fe:45:1e:b5:81:53:
                    01:ce:29:76:19:37:4e:d3:ac:30:95:51:99:c5:ec:
                    4d:47:f3:47:15:78:83:55:50:39:c5:97:59:b1:30:
                    73:40:8e:a3:f0:22:2f:1e:54:cb:91:38:f0:73:09:
                    f4:eb:12:07:7a:c6:1c:a5:d9:76:44:83:65:7e:c0:
                    4f:52:85:6d:aa:8b:41:b8:55:ff:a7:a1:76:1d:73:
                    e8:8c:46:92:8a:d3:3b:f3:fb:8b:58:2d:3d:ec:d6:
                    18:c4:43:d8:24:c3:d5:35:8d:6a:7f:22:b4:39:ce:
                    36:d4:fe:26:5f:07:74:a6:f0:c4:21:78:33:9c:b0:
                    3e:df:b5:27:05:b6:dd:5b:9d:fe:6b:69:e0:54:2d:
                    c7:f7:d6:0b:49:ce:79:8e:d6:92:b7:80:35:f4:42:
                    fd:ce:56:77:1e:f9:03:ca:74:7f:24:24:80:cb:cd:
                    73:bf:9d:70:a0:bc:b7:84:2b:63:3d:65:81:24:01:
                    bd:88:5c:6c:11:f0:51:b6:de:b2:88:a0:3d:74:d8:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DF:CD:AB:A2:7D:96:B9:3E:BD:73:5D:93:7F:04:73:A6:44:19:38
            X509v3 Authority Key Identifier:
                keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F123461AEBB511ECA410BF6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.125.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:0f:c3:47:72:a7:63:f1:9f:34:16:62:e6:08:a4:53:13:
         a3:36:93:db:c1:bd:67:bf:61:35:b1:89:1a:e8:37:8a:57:bd:
         15:b4:24:0e:e7:f5:83:5c:d4:98:da:bc:49:05:c1:f9:ad:b8:
         86:e9:07:1d:1d:97:0a:d6:bb:00:b2:af:96:05:53:9d:04:dc:
         41:36:7f:c9:05:e4:bc:03:76:82:f9:76:c4:07:91:b3:00:02:
         0f:2e:64:13:2f:a8:7e:41:6f:45:9e:6c:0f:e4:87:87:53:22:
         6d:f8:57:38:49:3f:cb:29:2b:17:fb:ed:6b:9b:31:00:a4:9d:
         e1:59:89:0c:a0:56:41:86:c1:06:71:5b:91:f6:bc:5e:09:e9:
         73:d5:a6:a7:c8:2a:fa:7b:e1:32:b6:8d:9c:88:79:54:16:bc:
         9f:c5:a4:76:f7:8a:40:36:60:d6:7f:ed:47:7e:36:85:2b:f0:
         33:26:5b:26:74:df:8b:b2:49:fe:b2:a7:b9:64:a4:3a:f0:a7:
         64:c2:3c:25:a7:7d:4d:d9:75:a6:03:e4:9d:91:ce:b9:3b:9f:
         e8:05:3e:41:1d:7e:7c:90:46:3a:61:93:66:df:52:cc:07:6d:
         1e:4e:dd:52:11:ae:b3:78:82:a0:84:38:e2:5a:b5:60:bc:54:
         99:9f:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:07 2026 by rpki-client