Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7ABF29BC33A611EB8B013530C4F9AE02.roa
File:                     7ABF29BC33A611EB8B013530C4F9AE02.roa (raw, json)
Hash identifier:          PNfe0JqkUSZcKxzn6fjc53gwbKVEqxdNt59sYO0y9rc=
Subject key identifier:   36:09:66:08:F4:15:31:49:78:62:74:32:73:4A:9E:19:D8:F5:13:CC
Certificate issuer:       /CN=A919F06A/serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
Certificate serial:       0823
Authority key identifier: BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7ABF29BC33A611EB8B013530C4F9AE02.roa
Signing time:             Thu 02 Jul 2026 22:22:49 +0000
ROA not before:           Thu 02 Jul 2026 22:22:49 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     141364
IP address blocks:        149.234.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A, serialNumber=BCB80DE44705CFC4F83978590C9F3FC2E2C2F852
        Validity
            Not Before: Jul  2 22:22:49 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a46e4b9-9bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e6:98:d1:fa:b4:a3:f9:45:95:6f:42:f2:d3:
                    0c:ca:3d:85:a3:8e:af:dd:4f:3f:3a:1c:fd:07:fb:
                    b9:5c:07:64:a2:65:09:61:54:e6:02:5a:56:83:50:
                    bb:3d:b6:d1:e6:33:66:37:29:6b:d8:46:91:10:da:
                    8d:fa:0c:3e:e8:97:53:42:12:f3:c5:92:89:1c:b4:
                    44:d8:a7:4d:e5:02:af:3e:52:12:0c:a3:49:56:70:
                    45:37:69:e2:16:75:2d:11:d3:b8:3b:fc:83:8b:19:
                    89:68:e9:29:c4:a4:52:59:9f:83:56:0e:3e:02:0a:
                    98:83:1d:aa:70:5d:9a:d4:d2:f8:db:12:15:2b:5f:
                    92:ab:7f:06:45:50:3e:41:b7:9f:f7:8b:46:95:c3:
                    2a:31:e9:fc:5b:c2:c6:e4:5a:07:e8:9e:ef:20:73:
                    f1:e3:90:58:60:67:f4:2a:2f:3e:2c:3a:e0:78:0f:
                    b5:b6:a4:00:00:01:6d:56:df:25:e3:2c:46:a4:cf:
                    1d:5a:05:a6:01:7e:0d:96:6f:a1:38:94:21:51:ef:
                    f7:d1:79:e9:8d:0e:03:b9:9f:49:76:da:85:de:d8:
                    b0:b1:d9:16:6d:5e:c6:82:dd:d1:e9:2b:12:5a:15:
                    16:3c:87:5b:4d:df:99:70:7d:98:48:6f:39:cc:e3:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:09:66:08:F4:15:31:49:78:62:74:32:73:4A:9E:19:D8:F5:13:CC
            X509v3 Authority Key Identifier:
                keyid:BC:B8:0D:E4:47:05:CF:C4:F8:39:78:59:0C:9F:3F:C2:E2:C2:F8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vLgN5EcFz8T4OXhZDJ8_wuLC-FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/F1A9BABC33A411EBAC54852EC4F9AE02/7ABF29BC33A611EB8B013530C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:32:e0:fc:6d:4f:3a:d6:7a:4d:15:74:ef:b2:76:9e:8e:
         4d:bc:f6:e4:c7:62:dd:8b:bf:ef:44:73:22:31:66:b5:a1:27:
         66:33:2d:75:b2:6b:e8:d3:34:d2:b4:97:08:cf:bc:b9:ae:61:
         f9:85:2a:59:2d:70:dc:c6:b4:60:d5:54:19:76:5f:2a:0d:12:
         90:7e:63:0f:0c:8c:9c:7a:f4:66:be:9d:39:87:ab:61:1b:bd:
         57:8f:22:ba:3c:c4:97:c7:d5:7c:82:72:7b:15:00:11:a6:e6:
         ee:6c:58:e8:3d:df:6b:b9:d5:65:63:39:59:da:04:3a:ed:11:
         31:d9:07:27:e8:fa:d6:06:d9:1e:fa:25:f4:1c:cd:64:7e:72:
         be:31:90:ae:d3:8f:29:c0:e0:44:5a:af:0e:79:52:b8:fa:26:
         bd:e7:68:5a:80:22:d7:5a:ba:26:be:f8:0f:2a:c6:a3:81:ad:
         26:a4:55:98:7e:c7:68:17:3e:80:3e:d4:a1:71:ad:4f:4f:0f:
         e3:82:77:8f:42:1d:a8:8b:e4:25:66:a8:55:00:38:9f:55:48:
         73:6d:bb:be:5b:16:e5:0a:38:3e:d4:8a:45:a6:12:b9:d4:d8:
         4d:98:c9:0a:87:65:2c:bb:2d:97:68:4c:e5:25:63:a6:b6:08:
         cb:0f:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:40 2026 by rpki-client