Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AE51756A556B11EFA5FB1569C4F9AE02.roa
File:                     AE51756A556B11EFA5FB1569C4F9AE02.roa (raw, json)
Hash identifier:          OXZUA/R674i71lZEtBVgVcJtlxJ6yaOTGWgOVRPEFYs=
Subject key identifier:   27:C8:E2:0A:2A:2E:2F:56:34:5E:C0:26:04:70:1E:E6:D1:53:84:48
Certificate issuer:       /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
Certificate serial:       014A
Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AE51756A556B11EFA5FB1569C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:59:51 +0000
ROA not before:           Wed 27 Aug 2025 06:12:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        203.21.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl
                          rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D12, serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2
        Validity
            Not Before: Aug 27 06:12:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a589c6-d911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:77:e4:50:df:09:0f:f6:17:d4:66:25:d2:
                    b5:70:6a:c1:88:5b:19:dd:b1:18:5b:64:b0:f6:49:
                    09:ca:da:16:b3:2e:38:c4:f3:1b:40:6a:4f:e6:4b:
                    95:8c:44:08:da:c7:52:15:98:9c:cb:73:74:98:52:
                    59:2a:b9:00:62:11:ce:11:a0:a9:ec:20:0b:87:72:
                    ee:a3:de:ad:3c:cc:82:e1:ea:8f:98:d6:26:b4:f1:
                    cc:4f:f0:3e:0a:af:d0:ae:21:e6:d6:4f:5b:2f:ac:
                    c2:3c:3a:96:40:29:05:c9:15:16:74:c9:1d:73:31:
                    79:b2:b6:d1:fa:9a:7d:5b:84:37:af:6c:11:96:6c:
                    d7:04:3e:21:87:09:99:57:58:73:c7:c3:11:91:22:
                    fa:76:ff:de:79:49:b3:66:63:1d:2c:d4:bf:ff:09:
                    c8:7e:6e:ae:da:cf:b5:57:62:04:b6:cd:51:64:8e:
                    68:e9:65:9d:2e:e7:66:4f:a7:3c:9b:63:ce:7d:a9:
                    3e:8c:38:d8:49:ed:b5:73:15:af:11:2d:bd:49:1f:
                    6d:28:a7:ba:ad:d1:04:f8:0a:d5:b7:51:8b:c1:35:
                    a0:df:d4:98:09:44:ef:ca:56:99:31:b8:9b:1e:1b:
                    e6:e4:95:26:ee:f6:7d:05:b0:75:61:93:27:6d:b1:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:E2:0A:2A:2E:2F:56:34:5E:C0:26:04:70:1E:E6:D1:53:84:48
            X509v3 Authority Key Identifier:
                keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AE51756A556B11EFA5FB1569C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ba:9b:24:49:c5:59:78:44:a4:ed:08:9e:1d:44:2e:1b:20:
         31:8e:82:4d:3a:13:0e:7c:2e:5f:61:05:ef:5c:39:a9:31:af:
         41:68:a3:91:7d:8f:6e:f6:9a:29:52:b3:f0:93:b2:23:13:29:
         50:c1:41:c5:ed:70:9b:9a:d9:b3:76:78:77:c2:99:75:16:26:
         d9:24:e7:e2:e4:d9:cb:ff:d5:7f:f8:2e:58:89:ee:55:9b:85:
         fc:41:4a:8b:06:20:ce:a2:92:0a:d9:a1:2e:5e:3d:6e:00:62:
         4b:bd:97:a1:2a:68:6f:25:cc:2d:60:a2:ae:32:4f:a5:13:fa:
         c4:2f:d9:a4:14:09:2f:e5:c0:a5:b9:23:6d:a3:33:2e:96:51:
         8a:67:fd:dd:3a:69:d8:00:84:cd:66:b8:cf:09:05:44:34:1a:
         12:98:05:16:46:d9:c8:b8:45:63:cf:46:4f:f6:7c:55:8b:c8:
         fb:11:e4:9e:85:9d:7b:77:ab:81:49:f0:60:29:49:b0:9c:cb:
         71:3d:ab:10:4f:16:07:46:5d:a8:32:62:97:fb:5e:61:8e:4d:
         46:e6:10:bb:23:80:a3:1a:ea:e0:64:e1:cc:4f:dc:12:4c:24:
         54:2a:10:8d:9f:3b:8b:02:d1:54:d6:6e:b6:75:4d:23:8a:26:
         ba:27:fb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:32 2026 by rpki-client