Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
File:                     200B2C4804AB11EB8AAF5923C4F9AE02.roa (raw, json)
Hash identifier:          09+nWZMjqXfgFdYjvibjiZOGUok2Ho8rCRGwwhhreRA=
Subject key identifier:   0D:1B:DF:D6:6B:51:1D:4F:58:B5:66:E5:63:34:A7:C3:99:4E:08:B1
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3379
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
Signing time:             Sat 02 May 2026 16:17:58 +0000
ROA not before:           Sat 02 May 2026 16:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4797
IP address blocks:        121.240.174.0/24 maxlen: 24
                          202.54.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13177 (0x3379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: May  2 16:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f623b6-27cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:c6:b1:ff:c7:49:52:de:65:57:6a:82:af:
                    a8:82:53:09:66:ba:1f:8e:58:47:a4:c0:2e:58:b8:
                    c6:1a:de:45:17:b9:8f:65:27:d4:93:d2:ef:c7:d3:
                    ea:73:6b:65:82:e2:49:7f:ac:ed:9c:3b:b7:6d:84:
                    00:67:dc:aa:87:2d:ee:93:68:1f:11:19:23:9f:f5:
                    e6:4b:7f:b3:94:b5:92:56:82:b5:8c:12:68:7a:4a:
                    f3:78:ae:78:1b:92:61:98:d4:0d:88:be:55:dc:7e:
                    b8:4c:fb:d6:ee:86:fb:12:90:7b:e8:f7:aa:b3:21:
                    7a:7f:98:40:3e:2c:5e:88:2e:86:cc:a8:08:7e:c9:
                    2d:cb:9f:8f:50:cd:a9:1d:ee:d8:a1:b1:44:5b:f2:
                    bb:10:04:aa:20:6d:b4:e1:b1:b0:69:1b:58:4f:05:
                    40:0b:89:44:11:7a:1b:b5:41:c4:27:51:dc:4b:cd:
                    f5:61:df:9d:8a:48:a0:1c:2e:0c:a8:d1:44:38:63:
                    dd:93:2c:22:9a:81:46:ac:57:6b:e8:fc:17:9c:37:
                    db:d6:33:d6:c5:f3:19:ab:fe:65:0f:12:30:b2:a8:
                    df:ed:25:58:6a:94:6c:a0:22:11:4e:ff:a5:35:c6:
                    41:fb:e5:fe:ea:bb:50:00:db:22:96:72:2a:c4:5e:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:DF:D6:6B:51:1D:4F:58:B5:66:E5:63:34:A7:C3:99:4E:08:B1
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.240.174.0/24
                  202.54.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f6:4e:4d:b2:cb:68:66:47:00:85:73:4a:a9:a9:ab:97:da:
         fd:c2:0b:72:7e:2e:ff:8f:99:2c:59:21:6e:06:08:ba:0d:d6:
         2c:9b:3e:88:c7:b8:55:81:b4:dd:55:1a:e9:d3:48:14:29:e1:
         6b:09:ad:be:d4:81:67:d1:fb:56:6c:d6:2b:10:6b:91:29:8b:
         56:6e:ee:0e:38:c9:56:f6:81:f5:c9:76:15:a5:9a:2f:7b:14:
         b7:fd:d8:cc:dd:79:e7:e5:5c:c8:eb:7b:ea:81:45:77:19:37:
         bb:99:6c:98:cc:25:93:6e:8a:19:5c:34:14:ba:88:02:14:81:
         30:ec:6d:f6:73:02:db:24:68:24:82:25:66:89:ef:0c:04:d8:
         4a:07:f2:3a:75:c9:8c:73:36:dc:78:6b:04:65:9f:bf:9e:3b:
         7e:6c:5b:18:f0:42:39:c9:0a:7c:77:25:e2:6b:83:3c:59:a3:
         6c:50:d9:b9:11:5c:1d:d5:7a:49:44:05:e9:c6:4f:4d:f8:14:
         e6:97:c2:f6:a5:14:fd:71:f6:35:78:8b:2c:33:43:d7:9b:e0:
         b0:aa:ac:49:e3:dc:03:46:db:08:c7:45:b2:f6:22:b2:3b:31:
         d8:7d:0e:32:19:a1:07:b3:76:f9:ec:2e:bb:d7:f2:ef:b2:51:
         ed:78:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:29 2026 by rpki-client