Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/495324CA39CB11EBB2F08020C4F9AE02.roa
File:                     495324CA39CB11EBB2F08020C4F9AE02.roa (raw, json)
Hash identifier:          DkdU/sit6KEl/7goo/JItkVs9gPbSPhLgwioVJX99NA=
Subject key identifier:   4B:4D:A6:9E:34:BC:95:D0:F3:08:EC:17:5E:CA:BC:9C:67:1E:1C:C3
Certificate issuer:       /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F
Certificate serial:       0B63
Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/495324CA39CB11EBB2F08020C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 19:24:08 +0000
ROA not before:           Thu 30 Apr 2026 19:24:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55720
IP address blocks:        203.25.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2915 (0xb63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F
        Validity
            Not Before: Apr 30 19:24:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f3ac58-03dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:89:00:ee:8d:94:1d:6b:e8:c5:a5:3d:48:
                    44:a2:7c:d6:f7:2f:2f:89:2f:90:38:2f:f1:10:39:
                    be:e2:c0:7f:f6:ac:69:53:c1:fa:d7:dc:43:7f:c6:
                    03:7a:06:17:94:2a:97:9f:5b:2e:d1:1d:0c:11:40:
                    78:23:ca:6c:f5:d4:e8:6f:60:82:4f:fd:d4:95:36:
                    97:c2:40:da:03:3b:cf:95:cc:e5:d9:91:e6:0b:71:
                    1b:e4:87:52:bb:88:d3:1c:7a:ed:e5:59:07:e7:86:
                    80:de:63:cb:1e:c5:af:98:4d:df:b0:b2:81:c7:29:
                    fe:0e:34:54:58:61:3a:90:60:69:bc:94:db:f5:36:
                    48:27:18:03:44:6f:b4:e8:7f:90:01:50:3b:09:16:
                    3c:89:e2:96:7c:11:23:2e:af:67:dd:28:e7:74:f0:
                    2d:10:83:47:d1:01:59:16:b0:3f:68:21:91:6b:8c:
                    c3:ad:a6:8b:45:67:2f:b0:6a:ff:24:07:b7:86:6b:
                    77:16:cb:8b:bd:8e:c3:a6:b1:43:b5:77:da:10:ed:
                    1a:5b:5e:0b:5f:0b:2c:57:64:72:28:8b:56:56:80:
                    93:00:27:10:de:3b:a4:3f:76:a0:21:2f:19:bc:0b:
                    d0:bd:99:86:67:bc:df:7a:2a:1d:40:67:da:86:38:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4D:A6:9E:34:BC:95:D0:F3:08:EC:17:5E:CA:BC:9C:67:1E:1C:C3
            X509v3 Authority Key Identifier:
                keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/495324CA39CB11EBB2F08020C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.25.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:80:96:55:19:73:5e:ba:ed:c8:40:88:db:d8:95:c1:e3:
         c1:c2:69:a8:83:1b:6e:40:50:45:96:49:16:11:4d:89:a5:08:
         c2:5d:7c:17:7f:45:0f:98:05:81:d2:55:53:73:d9:3f:58:37:
         4e:ca:51:a3:41:db:de:49:15:ef:a1:4f:4d:71:a0:92:9b:15:
         13:48:86:73:f8:ce:e4:19:be:12:32:53:34:15:70:85:19:f7:
         25:25:9b:27:2a:47:44:f9:89:f8:02:23:c9:05:e2:b8:e4:d9:
         4b:a7:35:b0:e2:74:3f:0c:a5:73:c5:97:96:f1:fd:99:ed:a8:
         75:b9:f8:28:4f:a1:3a:b5:43:eb:3f:16:4c:e0:9e:0d:19:da:
         78:ad:36:5c:b1:b3:bf:ed:40:80:fa:a8:ba:73:04:f6:7f:3c:
         4d:fd:39:9e:52:19:bb:ed:f4:e9:8e:c9:84:e6:b5:3c:ef:9f:
         d5:a7:5d:91:00:0b:76:1a:f2:c0:94:c0:ba:f3:af:a3:2c:5a:
         2e:b5:28:ba:4d:0e:39:6b:c9:32:16:c2:65:f1:3a:7e:7f:50:
         bd:b1:e5:e3:3b:c5:76:17:2b:3c:b5:da:82:58:2e:97:da:4c:
         ae:86:9e:22:5b:98:22:f0:7f:35:ae:fb:bd:c8:9d:1a:49:25:
         d0:66:01:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:57 2026 by rpki-client