Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/A18E2F56479711F1844B0A599F833773.roa
File:                     A18E2F56479711F1844B0A599F833773.roa (raw, json)
Hash identifier:          kH+3VaLDv5m4XsQUqc3+T/V3t2JaCq72o7x85LdupQ4=
Subject key identifier:   FE:69:45:A0:9E:9C:54:B4:6F:E8:29:B2:42:DE:68:C5:E7:B4:0D:AA
Certificate issuer:       /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial:       3688
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/A18E2F56479711F1844B0A599F833773.roa
Signing time:             Mon 04 May 2026 09:00:00 +0000
ROA not before:           Mon 04 May 2026 09:00:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141345
IP address blocks:        114.130.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
                          rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13960 (0x3688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
        Validity
            Not Before: May  4 09:00:00 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69f86010-ddb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:8a:e9:b9:f1:e7:ec:4b:e5:e9:16:f2:f9:
                    fe:f7:7f:88:97:08:5b:b1:8f:1f:eb:6d:95:ff:4f:
                    36:23:8f:8e:b3:b7:e4:0e:12:e3:9c:38:d2:d3:00:
                    a1:5f:b0:b0:76:77:f0:29:2a:0d:cc:4d:81:88:c1:
                    ee:54:5f:96:49:1a:0b:4e:96:a0:0a:0b:68:62:d0:
                    35:7a:81:63:09:fe:65:4f:e1:43:af:2e:37:83:47:
                    a9:96:24:d0:58:9f:bd:ec:fa:82:85:3a:ec:20:94:
                    c2:7c:ac:82:30:2c:03:7b:42:e9:79:29:37:b6:76:
                    02:38:69:ea:a8:72:3e:d0:b6:01:0b:bd:eb:92:09:
                    06:0d:a1:b2:b2:b4:5a:2d:d8:ac:3a:01:3c:02:7b:
                    29:28:b6:f6:62:ff:3b:6f:b1:de:03:81:73:91:e8:
                    68:8a:8a:1c:37:0e:45:c6:5c:be:a1:d3:60:a4:93:
                    30:1f:fe:36:c2:7b:4a:83:fe:6d:82:4d:19:f3:ef:
                    20:d4:21:e1:24:8e:2f:5a:3f:03:32:15:bf:03:97:
                    72:84:6e:f5:8f:b5:51:37:9b:eb:f6:c3:15:fe:8a:
                    ff:d4:df:2f:b1:fd:8f:51:b8:e0:11:2c:8e:6f:87:
                    3e:39:5d:9a:79:79:a1:2b:16:81:ba:3a:25:12:db:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:45:A0:9E:9C:54:B4:6F:E8:29:B2:42:DE:68:C5:E7:B4:0D:AA
            X509v3 Authority Key Identifier:
                keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/A18E2F56479711F1844B0A599F833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.130.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:47:e0:43:9a:b7:ad:40:42:60:4e:76:93:74:c5:20:d8:c8:
         b8:7d:ee:00:f6:e8:2c:2d:83:cd:ff:df:e1:74:b9:df:15:58:
         12:02:ad:3a:80:8d:fc:f9:60:2d:77:6f:74:a4:81:b3:1c:a2:
         21:c2:36:1e:90:d2:1a:e0:e4:20:ee:bb:db:3a:20:3c:3d:51:
         7d:fd:85:17:05:97:18:1c:16:c3:a4:1c:16:a3:6a:17:9f:48:
         e0:a5:1d:d9:f4:37:70:c5:69:62:6c:37:55:49:0f:ad:08:a1:
         9d:8e:90:0e:53:94:aa:1d:e4:6b:fa:82:13:a8:f6:3f:bb:7f:
         98:ac:5a:e8:e4:24:64:3f:ad:27:b9:f6:2a:00:d1:1d:54:b3:
         3e:b0:24:0c:d6:6b:6f:0c:c3:57:bb:af:83:70:23:66:5e:b8:
         3d:7e:50:8a:9e:9a:ea:54:fa:a7:c4:56:d2:f3:5d:3f:f4:03:
         10:b5:49:27:78:86:72:61:b5:b8:4f:17:1a:b1:5e:de:6f:99:
         a1:e5:da:13:70:16:9f:51:36:79:1d:70:37:4d:d7:ec:ba:fa:
         75:a6:9d:0e:01:05:af:e7:13:32:98:2f:37:7a:09:18:94:5e:
         fa:0a:33:33:46:33:df:25:99:f8:e2:4e:52:72:60:24:ba:dd:
         d7:f1:e3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:22 2026 by rpki-client