Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/F2004572BAED11ECA89EC43AC4F9AE02.roa
File:                     F2004572BAED11ECA89EC43AC4F9AE02.roa (raw, json)
Hash identifier:          UBx1y7FSM/8qHR/vlHmktHDa3vYZBkRs325ySHzChAs=
Subject key identifier:   16:81:B2:41:D5:EC:9F:89:4A:10:73:78:9E:14:B0:54:51:A1:75:CA
Certificate issuer:       /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial:       064E
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/F2004572BAED11ECA89EC43AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:58:03 +0000
ROA not before:           Fri 14 Nov 2025 21:43:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24184
IP address blocks:        203.82.2.0/23 maxlen: 24
                          2001:df0:7040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
                          rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
        Validity
            Not Before: Nov 14 21:43:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a453fb-9728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:25:c1:7a:e1:d6:34:15:15:64:2a:d0:6c:
                    9f:7f:1f:26:24:e7:e3:3c:0a:d6:10:89:17:ca:b7:
                    7e:d9:09:0b:1d:3c:75:0f:5a:f0:7d:ea:09:2c:a9:
                    08:03:33:65:7a:5c:3a:44:f0:8d:f2:f1:e4:69:45:
                    a7:4e:fe:e0:8b:94:73:c5:51:c3:92:89:c3:b1:7d:
                    e0:5f:48:6a:9f:c8:5d:cd:59:bc:76:10:ac:bc:7c:
                    45:a6:75:40:03:48:62:72:35:d5:59:c2:12:9b:b0:
                    bd:b6:c4:ab:13:ad:e1:f4:a8:cb:1a:78:eb:4e:60:
                    5f:4e:5d:28:e8:62:8e:0c:be:e6:3c:c7:60:86:82:
                    08:30:3d:c7:6f:bb:95:34:40:74:7f:10:4b:21:8e:
                    fd:7c:be:2a:5c:20:0c:a9:48:9e:6a:0e:51:f3:47:
                    8b:59:6b:a8:cc:c6:2e:cc:b1:0d:3e:d9:85:5f:9c:
                    95:7f:54:98:31:8c:cc:33:56:ed:49:34:10:d4:56:
                    ab:91:d7:04:ae:bf:3f:81:8e:ac:1b:50:6b:c3:0a:
                    dd:12:0e:c4:21:c9:40:97:3f:47:fc:48:5f:d1:0b:
                    ba:35:9c:cb:08:8c:17:f0:49:b2:82:38:15:62:0d:
                    ac:ee:c9:2e:60:7a:f0:52:bc:34:db:fb:67:ee:e5:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:81:B2:41:D5:EC:9F:89:4A:10:73:78:9E:14:B0:54:51:A1:75:CA
            X509v3 Authority Key Identifier:
                keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/F2004572BAED11ECA89EC43AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.82.2.0/23
                IPv6:
                  2001:df0:7040::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:ac:ae:7a:57:12:67:32:7e:bd:5f:84:23:a0:70:e9:dd:
         e3:0f:ed:a5:86:ef:4e:0f:f1:fe:09:e5:95:15:39:be:b4:08:
         e4:62:d2:90:63:f8:ea:ca:9d:91:7a:19:76:ef:ca:9c:77:0d:
         19:77:41:45:96:7d:03:35:28:3c:fe:01:0d:4b:06:16:c9:b6:
         6f:cb:e8:7a:5b:ae:cb:1d:89:76:9c:ee:ea:25:eb:6e:99:91:
         90:82:73:9c:d5:c3:33:4d:93:e4:0a:ae:69:01:5b:ea:50:af:
         ab:63:b4:25:1f:2e:46:6b:df:4c:94:50:f0:36:1d:24:25:53:
         e7:7a:6f:80:c8:cb:81:2f:21:af:7c:a0:32:60:66:e4:a5:8d:
         63:f3:c4:db:d2:a7:16:76:c4:23:ec:e4:e7:e8:26:56:fa:fe:
         2c:b1:98:d0:ab:dc:68:24:c8:db:08:2d:15:87:7b:15:d9:0d:
         e0:7e:b9:c1:58:24:34:99:97:07:b5:3e:6d:ed:77:e5:82:75:
         d5:c6:fe:5b:11:14:66:94:09:22:41:1a:be:70:f1:f4:e7:7d:
         12:31:6e:81:96:5f:83:56:60:24:3a:57:fd:1d:20:89:95:0d:
         fb:82:ec:3b:a6:9d:52:d3:be:2e:2a:6a:63:76:a1:1f:30:bd:
         15:c2:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:32:22 2026 by rpki-client