Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa
File:                     54692EB02FB111EFAD1C6322C4F9AE02.roa (raw, json)
Hash identifier:          qaFbV84wFrfSleMM9JFjbiw4uQVW+I7k4HZPnl/ZMBY=
Subject key identifier:   79:C4:36:BE:89:DD:87:9B:98:CD:52:1A:D3:09:7C:B2:D7:A8:A0:B7
Certificate issuer:       /CN=A916E377/serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
Certificate serial:       01D7
Authority key identifier: E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 03:36:09 +0000
ROA not before:           Thu 23 Apr 2026 03:36:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        124.110.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl
                          rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E377, serialNumber=E79493F30A3EE9F0EE40522FF19D685C8062BA6E
        Validity
            Not Before: Apr 23 03:36:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e993a9-52ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:61:ae:30:94:1f:50:5f:87:a9:4c:ee:db:74:
                    5f:50:e2:49:8d:95:1a:4a:31:5a:5f:fc:6a:bf:4f:
                    3d:3b:dc:6c:50:f3:61:f5:64:9b:e3:aa:c9:09:10:
                    11:2b:10:1a:c4:fb:3b:73:b1:ac:50:8d:fb:3b:18:
                    db:1c:66:8d:c3:ce:89:a8:d2:4d:43:c5:89:87:bb:
                    55:f9:1e:77:61:af:5f:fb:b7:38:2b:7a:ee:17:a6:
                    fa:42:d5:ff:9e:20:9a:81:f4:c9:05:6d:71:f2:0e:
                    4b:a3:8b:1c:57:fd:54:07:56:bd:70:3d:e7:6f:38:
                    0d:5a:02:4e:71:9b:6d:39:56:76:3e:d6:a5:7a:be:
                    de:af:d1:51:6e:4e:14:8b:ef:74:97:1f:e5:73:24:
                    73:07:5a:42:fe:aa:fb:69:b4:2b:7e:f6:c0:02:8c:
                    87:7b:b7:aa:ed:09:35:28:4a:20:0b:e9:3b:31:b2:
                    b9:2d:ba:b7:ef:1f:e2:02:ed:23:1c:ed:0c:05:cb:
                    25:e0:93:61:22:d8:ed:ac:10:ee:7d:66:52:ab:ce:
                    a5:70:34:bb:7c:89:d3:81:32:bb:66:d6:2e:e4:23:
                    41:da:54:98:f8:1e:80:e3:5e:21:36:6e:e3:fb:fb:
                    bc:15:6c:98:f9:73:58:8b:b4:be:75:3b:95:18:db:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C4:36:BE:89:DD:87:9B:98:CD:52:1A:D3:09:7C:B2:D7:A8:A0:B7
            X509v3 Authority Key Identifier:
                keyid:E7:94:93:F3:0A:3E:E9:F0:EE:40:52:2F:F1:9D:68:5C:80:62:BA:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/55ST8wo-6fDuQFIv8Z1oXIBium4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55ST8wo-6fDuQFIv8Z1oXIBium4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E377/8A6D10B6883C11EE9556BB6EC4F9AE02/54692EB02FB111EFAD1C6322C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:f2:98:91:3b:30:6d:96:b6:04:c6:57:96:de:fc:0e:b7:8a:
         12:79:e3:e8:6a:f1:4c:8c:95:d4:91:be:73:f4:e6:fc:37:1a:
         9d:bc:08:d3:66:01:98:a4:25:4f:89:a4:f4:e1:1e:3b:b3:13:
         cf:46:e1:f0:07:33:5a:3e:71:89:70:de:b9:25:02:96:06:1e:
         a4:b7:10:2f:80:cf:54:84:59:b5:ce:ef:bc:d8:a8:9c:1a:24:
         fb:b2:60:2e:ea:6c:69:c3:f8:f5:c2:be:f3:a1:d2:54:9d:4b:
         1d:41:a9:ad:4d:6b:35:f9:fe:ed:bd:ec:e2:e1:23:51:ad:a8:
         c2:72:b1:88:00:6e:b0:8b:9a:98:71:8f:ae:fb:99:0e:9c:2f:
         35:11:d7:f9:18:56:3d:24:dd:72:f1:6e:a8:7a:e6:31:9d:c6:
         09:d9:23:01:f6:7d:0a:e4:25:a0:d8:28:a1:99:2a:f4:26:f1:
         8b:08:49:f8:f3:db:e6:a7:f1:25:64:81:4d:5d:07:33:6e:d5:
         34:ee:4d:0d:2b:9c:41:48:63:fc:11:a2:87:58:2c:e8:bd:b5:
         f0:03:54:91:e4:9b:e8:8c:62:ec:be:14:6a:18:22:c9:1b:64:
         11:2a:47:19:8e:ef:cd:d3:53:d2:6f:92:59:a6:1f:da:81:5d:
         b6:c5:bd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:29 2026 by rpki-client