Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/11EC50B48B8F11EF8DE96E60C4F9AE02.roa
File:                     11EC50B48B8F11EF8DE96E60C4F9AE02.roa (raw, json)
Hash identifier:          oaY4HDGdL5O8dI7PDd9dFje1sfrDfLFE5hd+oU6mUg8=
Subject key identifier:   87:2C:99:FE:30:00:12:FC:C1:E3:AE:24:93:DE:ED:93:70:A7:E8:3F
Certificate issuer:       /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Certificate serial:       02E4
Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/11EC50B48B8F11EF8DE96E60C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 02:50:28 +0000
ROA not before:           Mon 03 Aug 2026 02:50:28 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     4658
IP address blocks:        202.81.224.0/19 maxlen: 24
                          2401:300::/35 maxlen: 35
                          2401:300:2000::/35 maxlen: 35
                          2401:300:4000::/35 maxlen: 35
                          2401:300:6000::/35 maxlen: 35
                          2401:300:8000::/35 maxlen: 35
                          2401:300:a000::/35 maxlen: 35
                          2401:300:c000::/35 maxlen: 35
                          2401:300:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl
                          rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
        Validity
            Not Before: Aug  3 02:50:28 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7001f4-b51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c4:c2:a2:23:1f:2c:54:3a:0f:2b:7a:47:40:
                    e4:79:8e:19:b6:00:42:c8:32:ee:b9:06:22:48:6f:
                    ad:c2:fa:5b:0a:bb:73:ae:86:4e:a3:a9:60:c9:c9:
                    01:4a:20:6e:67:63:2f:3a:57:09:0d:1d:73:7f:fe:
                    1b:6d:43:f8:ce:fe:38:df:23:1e:55:1d:7d:0f:b7:
                    00:74:8a:59:ab:f4:7d:09:b8:1f:24:90:2e:57:22:
                    0e:df:5b:1f:22:0a:c6:f3:3f:c9:57:3f:96:02:bf:
                    9d:d2:a9:13:16:ae:b7:73:39:f6:3d:33:cb:0c:1e:
                    ac:e8:a4:33:07:10:f2:ad:3a:95:81:74:1d:9d:4b:
                    01:bd:a2:86:5b:72:5a:5f:de:79:ae:67:68:ae:83:
                    fe:55:34:2a:39:b8:53:d0:aa:98:88:a2:b3:eb:4f:
                    3f:c2:04:32:27:e4:73:3f:3d:5b:b6:f8:29:f9:1e:
                    eb:e6:da:63:23:1d:46:85:e9:00:13:c6:f1:bf:36:
                    00:c4:03:35:3c:f4:b7:32:7c:8b:fa:f2:0f:3d:86:
                    5d:e0:cb:3a:69:66:7e:de:e1:cf:f0:99:d7:53:3f:
                    d6:ee:15:dd:52:93:52:07:0c:36:60:9f:e9:df:c3:
                    fc:36:a0:64:52:5f:98:4b:47:46:ba:44:7c:2a:39:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2C:99:FE:30:00:12:FC:C1:E3:AE:24:93:DE:ED:93:70:A7:E8:3F
            X509v3 Authority Key Identifier:
                keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/11EC50B48B8F11EF8DE96E60C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.224.0/19
                IPv6:
                  2401:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:79:99:2f:50:55:03:04:6e:3e:c0:07:6c:c2:bd:92:aa:
         fd:02:b3:ad:af:2c:68:f9:c7:ca:49:d8:65:61:ff:1d:0b:e0:
         66:a9:d8:1d:2f:fa:97:68:5a:43:25:a2:27:d0:23:4b:fc:7a:
         67:a8:ff:a5:61:a0:e1:7b:1f:5c:60:61:8c:11:f0:a6:a8:12:
         5e:42:44:c2:e5:65:38:1b:a1:ed:fb:e8:36:c6:53:79:d3:f2:
         77:32:ee:4d:bd:c3:1b:8e:1e:a9:28:ff:6a:8f:56:65:8a:12:
         40:b6:0b:eb:a7:e5:ba:2d:56:e6:cf:27:6f:c5:78:6c:07:62:
         e2:75:72:31:bb:76:35:3d:37:57:dd:02:73:21:02:8f:24:3d:
         62:7d:a3:47:0a:7a:06:5f:0f:06:40:af:61:84:43:3a:ea:50:
         52:76:43:07:bd:01:08:ce:45:ee:6a:08:a2:a8:b5:a8:86:27:
         f8:ea:ba:c2:78:4c:e6:e8:5d:63:c5:4d:61:cf:ab:58:07:c1:
         31:21:1f:e9:65:df:58:d9:c3:f5:46:6a:f7:e8:11:84:b0:2b:
         92:32:fe:5a:c5:d5:13:1e:3e:37:af:3d:a4:69:42:41:56:92:
         62:e4:fa:7d:a0:47:52:58:77:cd:60:d3:e8:27:af:3a:ff:3d:
         fc:3c:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:38:43 2026 by rpki-client