Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AD727D903F8111F1AAE343DCAF833773.roa
File:                     AD727D903F8111F1AAE343DCAF833773.roa (raw, json)
Hash identifier:          Iqc0IgAmJNB6VXjCORCRruuoNfj02aOsq9++fLh62zc=
Subject key identifier:   65:7A:88:CC:81:AD:AE:BE:67:CF:82:F4:20:34:34:50:89:44:0E:36
Certificate issuer:       /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial:       0DD8
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AD727D903F8111F1AAE343DCAF833773.roa
Signing time:             Fri 24 Apr 2026 02:02:42 +0000
ROA not before:           Fri 24 Apr 2026 02:02:42 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     131151
IP address blocks:        144.48.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
                          rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 17:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3544 (0xdd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
        Validity
            Not Before: Apr 24 02:02:42 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69eacf42-5d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:d7:87:8c:cd:a7:22:5c:8d:15:26:34:96:
                    e6:12:02:6d:71:94:13:b4:34:d9:93:2a:56:12:a5:
                    49:83:93:87:44:2f:09:f9:ff:2e:0c:01:e4:ae:a1:
                    c4:08:c2:fa:95:fc:57:a1:7a:3d:27:b8:ca:e1:48:
                    6e:10:6a:a5:ee:6c:5a:f0:e9:ea:81:ca:e4:da:2f:
                    6b:1f:4e:48:46:2b:22:44:37:a4:c5:df:1c:ed:8b:
                    e5:b4:29:0c:2d:fb:fa:5e:c1:d1:1e:ae:9c:fe:36:
                    b2:28:49:04:84:d1:dc:9b:c1:8c:a3:9f:e4:48:73:
                    5c:0a:1d:6a:aa:70:21:49:38:94:b1:af:9b:30:75:
                    82:11:62:98:e6:9a:fa:25:6d:1c:90:7a:5c:2f:67:
                    d2:53:42:6d:53:28:46:3f:45:21:3f:68:0c:1d:27:
                    98:0c:83:46:27:22:0f:08:39:85:e0:39:c1:15:71:
                    19:3a:3c:71:8d:82:8d:7b:3a:b4:27:14:68:c7:20:
                    3a:ac:0d:39:de:4b:5f:fd:b0:24:7f:1e:bf:ba:ce:
                    26:8d:6a:c7:ea:03:26:c9:7c:4a:73:91:8a:60:14:
                    64:0b:c1:ec:65:cb:8b:58:6e:7f:bd:c0:8c:bd:4b:
                    67:02:07:7f:67:0f:33:1f:98:e2:63:40:26:e3:cd:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7A:88:CC:81:AD:AE:BE:67:CF:82:F4:20:34:34:50:89:44:0E:36
            X509v3 Authority Key Identifier:
                keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/AD727D903F8111F1AAE343DCAF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:a0:44:ea:bb:43:eb:01:81:d6:8b:97:20:60:c0:2e:88:
         71:32:08:49:78:9b:57:35:0d:db:3f:9c:65:7f:96:4a:f4:a7:
         90:8c:2c:46:a9:e1:b6:3d:86:59:55:67:f3:fa:86:4a:3d:84:
         04:52:3b:28:b0:b5:e0:04:e2:a7:56:4d:49:8e:24:1b:a2:42:
         3a:2f:c3:c5:fe:71:ab:6f:56:a3:27:34:13:c1:7d:c6:75:3e:
         4d:cd:84:21:14:b2:a8:93:af:80:9a:53:05:14:3e:36:97:b4:
         7d:f7:be:14:f3:43:e9:dc:4a:11:c6:4c:91:cb:6b:41:14:91:
         ce:d8:52:26:72:0b:a9:f0:8f:35:3d:af:60:63:ce:3f:a8:62:
         0a:33:ae:a2:ac:11:da:d6:fd:86:71:6c:1d:87:c1:87:84:c3:
         f9:08:49:a0:b9:50:d9:14:91:e9:c8:81:f1:76:aa:9e:ac:04:
         68:88:57:18:6b:a6:36:f8:e8:b7:9a:57:a9:42:b2:51:70:5a:
         cf:b1:10:da:51:ec:b8:85:9c:bf:7a:98:dc:53:8d:c1:78:90:
         95:f2:bd:da:e6:4b:75:fa:6b:f5:6e:3f:dd:c5:51:72:0e:9d:
         86:c2:e8:73:ee:5d:7f:d9:9a:00:73:43:b5:61:8b:d9:10:e3:
         bf:2d:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:33:56 2026 by rpki-client