Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/EDDEC9126AD611F18604C9006D47A888.roa
File:                     EDDEC9126AD611F18604C9006D47A888.roa (raw, json)
Hash identifier:          mBul9qpd2CYOy9BKWwISAskLqehY5JRGwesEaHqvaxI=
Subject key identifier:   28:47:6F:C9:32:BD:90:FF:E4:3F:DC:05:64:E6:F1:9E:10:0C:D1:6A
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       D8
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/EDDEC9126AD611F18604C9006D47A888.roa
Signing time:             Thu 18 Jun 2026 05:31:17 +0000
ROA not before:           Thu 18 Jun 2026 05:31:17 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     206675
IP address blocks:        187.54.48.0/21 maxlen: 22
                          187.54.48.0/22 maxlen: 24
                          187.54.52.0/24 maxlen: 24
                          187.54.53.0/24 maxlen: 24
                          187.54.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 23:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Jun 18 05:31:17 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a3382a5-c00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:65:fe:bc:e6:0d:e7:74:82:f4:b5:12:a1:
                    05:58:b0:fc:3a:84:91:53:8f:c2:ed:f8:c9:56:eb:
                    16:2d:da:cc:e2:9a:16:29:03:a5:90:30:07:98:8b:
                    75:41:20:c4:27:00:f7:13:32:4b:5f:70:e3:db:b3:
                    e2:13:98:d5:67:2a:e7:7b:dc:14:c0:29:72:90:7b:
                    3f:39:7c:cf:72:d4:df:11:42:ea:15:01:77:c0:eb:
                    f6:32:22:3e:19:bb:7a:dd:df:8b:8c:d3:d1:3f:fc:
                    42:c2:bf:6c:b3:f8:18:57:2d:ae:87:80:7c:73:d6:
                    1d:89:2b:44:27:e7:c5:96:1a:ed:36:d6:15:ee:1c:
                    30:c0:35:47:a5:4f:29:19:33:8e:cf:49:36:70:29:
                    5a:0c:3b:50:a3:ae:67:73:73:a9:0a:0a:87:d2:9d:
                    77:ed:1b:f1:e8:8d:cd:1c:3e:23:6b:02:92:e7:6c:
                    1c:07:1a:ce:06:ed:01:08:98:5f:6b:23:c4:fd:f8:
                    ff:ed:de:52:d7:d1:e6:a0:33:b9:d1:61:b8:09:32:
                    fb:ed:c0:78:b3:81:99:2d:e5:79:f8:f4:5b:9f:30:
                    c9:51:b2:b7:2b:10:81:7a:c2:51:4b:50:5f:18:47:
                    82:75:86:0e:cd:b5:42:50:a1:78:48:6f:29:43:bb:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:6F:C9:32:BD:90:FF:E4:3F:DC:05:64:E6:F1:9E:10:0C:D1:6A
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/EDDEC9126AD611F18604C9006D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.54.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c1:bd:82:a8:17:bf:89:9c:cf:66:d6:3d:b3:cd:fb:54:1b:04:
         5a:ac:f0:25:dc:60:9f:6a:87:12:8b:d1:58:01:7a:a4:40:1d:
         27:f6:b8:39:e0:70:79:d7:cb:33:4e:1e:c8:c6:8e:c9:3e:52:
         e3:83:23:f1:b8:9f:18:1f:6c:85:b0:0a:44:60:b1:41:de:61:
         f9:65:7e:1a:c9:4c:1d:9a:99:f1:f8:ae:94:d2:e3:43:9b:8d:
         de:39:e0:6c:60:1b:18:44:e9:4b:20:c9:d3:c5:45:99:cf:34:
         eb:96:37:ee:3e:a7:21:d0:5e:45:18:fb:fb:d5:0a:95:7a:21:
         77:95:51:46:2c:aa:75:85:d3:2d:07:79:66:89:51:da:26:b8:
         b1:a1:89:f8:cc:6e:7d:a7:9a:0b:5c:1b:62:49:54:39:7c:e6:
         7a:ab:9c:9b:7f:86:07:04:ca:67:23:c9:61:9f:c9:8d:d5:20:
         8d:56:e9:58:4c:71:e1:24:c8:ff:16:90:39:7e:dd:fd:14:86:
         1d:f5:68:e5:90:00:ee:b0:06:ae:11:7b:0f:5f:7d:27:68:20:
         b2:43:28:0b:3d:66:10:e5:36:de:88:d9:8c:f1:3f:09:b9:48:
         c5:7a:5c:11:b6:fb:e7:2b:57:aa:d7:f5:1d:d4:e5:87:f7:fa:
         6c:9d:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:55:19 2026 by rpki-client