Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/C4618A34188D11F1A1D836EC3D3D8C67.roa
File:                     C4618A34188D11F1A1D836EC3D3D8C67.roa (raw, json)
Hash identifier:          zGs/9ZPuQmBMjGcesFDtJEy650HEEHK6+s759wT6WOM=
Subject key identifier:   10:B6:15:CE:60:7C:75:3B:E8:20:BF:27:15:98:E3:F8:56:B6:E9:B1
Certificate issuer:       /CN=A91E8556/serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
Certificate serial:       41
Authority key identifier: 2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/C4618A34188D11F1A1D836EC3D3D8C67.roa
Signing time:             Sat 09 May 2026 08:41:56 +0000
ROA not before:           Sat 09 May 2026 08:41:56 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     399468
IP address blocks:        114.119.192.0/22 maxlen: 24
                          114.119.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl
                          rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:53:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8556, serialNumber=2FBEEC118B53613E1542F33FFC36118E562D472E
        Validity
            Not Before: May  9 08:41:56 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fef353-6d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:8e:73:94:bc:4d:e6:94:47:93:59:98:0d:
                    19:e6:f7:c5:2c:be:36:49:9f:f0:5a:a1:0c:6e:75:
                    35:48:98:90:92:e0:bc:b4:8c:17:db:b7:c9:59:17:
                    7c:13:fe:6e:fa:86:bf:da:63:15:83:3b:9d:e6:87:
                    60:e6:9a:66:10:a6:05:27:31:21:85:71:bd:ba:15:
                    5a:3e:ae:8c:a6:06:74:69:f9:00:44:32:7c:02:cd:
                    5a:4a:c7:f7:71:3d:08:7a:b5:99:6e:5d:8e:b6:5b:
                    58:4e:97:27:4d:a8:5d:7c:e9:27:fa:00:4d:cd:4a:
                    ed:8d:a1:f2:8e:f8:2b:83:8c:52:b1:ce:cf:70:2e:
                    7a:85:40:a2:80:41:2c:91:72:86:55:37:d6:76:8f:
                    33:85:68:fb:bd:32:7f:46:10:3c:68:b1:18:a6:c3:
                    00:c1:55:57:1f:76:90:cc:e5:ce:74:f2:5c:4a:b3:
                    9d:9c:4c:f0:c8:75:cb:03:4c:50:75:3a:4d:ae:ea:
                    98:4c:75:0c:a1:96:57:53:c0:1a:37:14:77:e4:68:
                    ec:d8:09:2b:75:66:85:98:4b:6c:17:bc:de:aa:9b:
                    4c:57:59:46:70:5b:ab:e5:89:4f:fd:bc:53:f2:fc:
                    0d:46:a2:c7:23:30:0d:4b:43:e4:05:13:29:17:73:
                    12:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B6:15:CE:60:7C:75:3B:E8:20:BF:27:15:98:E3:F8:56:B6:E9:B1
            X509v3 Authority Key Identifier:
                keyid:2F:BE:EC:11:8B:53:61:3E:15:42:F3:3F:FC:36:11:8E:56:2D:47:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/L77sEYtTYT4VQvM__DYRjlYtRy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L77sEYtTYT4VQvM__DYRjlYtRy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8556/42E378B2096211F18568DAE40A3D8C67/C4618A34188D11F1A1D836EC3D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.119.192.0/22
                  114.119.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:24:cb:ed:38:d4:87:23:37:cd:a0:51:f7:99:0a:aa:2a:77:
         47:c2:51:f6:36:36:02:59:d2:36:5a:c5:5c:b6:d0:76:d3:f0:
         89:a9:74:af:90:34:f9:ce:7d:38:7d:58:4a:92:46:3b:eb:cc:
         94:e1:61:ad:c6:8b:61:2f:c8:0a:f5:61:94:6a:ef:ef:77:e5:
         bd:f9:ba:fe:c9:bf:36:cd:af:dd:b1:35:38:aa:97:cf:e7:5f:
         15:f2:f1:96:a6:fb:6d:62:91:45:e1:b6:b2:98:26:1f:5e:76:
         7f:25:66:7e:b7:cc:c7:71:69:0f:e6:64:0f:0c:f8:74:85:d6:
         fc:d2:d4:56:15:c5:e7:58:b4:52:32:f2:99:18:02:87:28:3e:
         d5:cc:86:1f:47:db:78:e9:50:8a:cf:19:50:17:6e:61:f2:ad:
         18:4b:f4:f4:dc:7c:fa:92:9a:38:82:39:84:ee:de:cc:0f:27:
         25:b2:a4:d7:f0:16:c4:e0:2f:23:67:55:50:47:8f:48:b3:5a:
         8a:d4:1d:ff:7f:ce:b4:e9:a3:23:88:ce:75:3c:93:a6:77:d5:
         85:9f:f6:82:06:62:09:c5:c1:54:9d:e6:7e:f2:9b:83:1a:75:
         87:31:e3:90:69:db:77:15:ab:ed:a0:c9:5e:51:60:c5:cb:a5:
         84:99:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:18:58 2026 by rpki-client