Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/EF3ECA506AD611F18604C9006D47A888.roa
File:                     EF3ECA506AD611F18604C9006D47A888.roa (raw, json)
Hash identifier:          so//akVTuloNjw0DdnqKuDj1WK/tdfuvQw0ikJkgWZs=
Subject key identifier:   DF:AC:17:37:EA:14:C3:C2:C0:4F:9C:1D:35:33:99:81:46:94:08:E3
Certificate issuer:       /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial:       D9
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/EF3ECA506AD611F18604C9006D47A888.roa
Signing time:             Thu 18 Jun 2026 05:31:20 +0000
ROA not before:           Thu 18 Jun 2026 05:31:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4515
IP address blocks:        187.54.48.0/21 maxlen: 22
                          187.54.48.0/22 maxlen: 24
                          187.54.52.0/24 maxlen: 24
                          187.54.53.0/24 maxlen: 24
                          187.54.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 23:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
        Validity
            Not Before: Jun 18 05:31:20 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a3382a8-cdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:76:de:11:c7:29:81:f2:62:a4:88:96:b1:
                    37:62:f8:9c:03:c0:cf:89:00:01:1d:26:76:cc:da:
                    27:95:50:cf:a2:51:a1:43:1a:1a:fd:c0:ba:2b:3e:
                    f7:bf:95:00:02:34:ee:59:cf:b1:86:07:d7:de:3e:
                    50:0a:a2:ab:db:9d:67:04:3f:46:bd:a2:e5:e6:8d:
                    75:6d:0c:94:ee:db:0e:2e:a6:ba:64:f9:f7:41:57:
                    e8:86:af:39:00:43:3b:0a:e9:4f:a7:4a:1d:11:2d:
                    dd:81:19:99:b9:b3:6a:6f:87:9f:d2:b4:2e:3a:45:
                    1d:75:b6:5f:f4:b8:da:2d:bb:c5:8e:0c:17:66:52:
                    39:0a:92:27:d3:43:f5:91:be:d6:41:15:19:e1:2e:
                    ae:cd:ab:39:24:5a:22:42:51:2c:99:a3:b0:92:92:
                    60:13:eb:9e:b5:72:85:ac:42:ac:de:21:3f:c2:3e:
                    a6:4e:f8:4c:90:6e:25:c6:89:8c:26:38:ef:97:15:
                    b0:75:f5:41:fd:59:db:63:67:ad:99:d9:04:3d:16:
                    d2:6e:93:62:76:dc:95:16:cd:70:a8:be:03:8e:1a:
                    79:2e:82:62:d8:ed:54:e6:8a:d9:ee:ea:d6:e3:5b:
                    05:80:36:3a:5c:d8:4e:ac:2d:59:89:30:d9:e8:8c:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AC:17:37:EA:14:C3:C2:C0:4F:9C:1D:35:33:99:81:46:94:08:E3
            X509v3 Authority Key Identifier:
                keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/EF3ECA506AD611F18604C9006D47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.54.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:ef:30:72:09:ed:07:4f:6d:ef:af:4d:f1:52:e0:4f:c1:25:
         06:bb:87:89:da:26:0a:16:2b:56:f5:56:3d:35:21:44:ba:1a:
         c6:e8:6a:df:86:20:2c:ce:7d:7a:8b:88:fe:c9:f9:83:f8:e7:
         a5:8b:9c:80:0b:34:9f:bd:d1:1e:1e:12:1a:60:4e:4c:76:aa:
         aa:23:c4:dc:1d:f2:b1:ed:db:1c:6d:53:1b:f4:b7:ea:6f:17:
         c0:b6:01:80:70:6f:86:8c:3c:fe:0c:65:72:6c:e0:61:f2:80:
         f2:70:f5:b1:c2:22:9d:2e:09:98:f7:fd:13:cb:9b:55:d8:c7:
         e1:1f:67:2c:5d:eb:6d:3f:c9:b0:fc:7d:f9:86:f8:0b:12:0e:
         c2:d0:12:53:82:18:99:7d:ec:5d:2b:42:ee:75:d6:79:6f:9b:
         44:ca:c7:b9:5d:0f:7b:7d:9c:62:77:dc:0a:45:1d:67:f4:5c:
         38:d3:be:8f:b3:df:ec:8b:37:18:71:f9:1b:6d:4f:9f:6f:24:
         a0:8b:96:1c:cb:00:32:1a:61:78:e7:d6:b4:4d:94:e4:57:04:
         d1:09:67:ed:cc:19:54:e9:9e:01:56:c7:82:70:64:95:da:12:
         1e:5e:a1:8d:46:ec:e1:cb:41:b6:69:0e:2b:6f:04:ec:2c:e6:
         c7:ad:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 00:55:39 2026 by rpki-client