Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A0D5796A974311F1BC9473103911F970.roa
File:                     A0D5796A974311F1BC9473103911F970.roa (raw, json)
Hash identifier:          CrdrW/gRZqDpVHC+CRomtURhGm7KenI1e3pNbSWaNH8=
Subject key identifier:   A6:43:29:7A:AD:7C:B3:DD:2E:F5:B2:D3:56:F9:67:F6:3A:A3:F1:BD
Certificate issuer:       /CN=A911E3C6/serialNumber=03867130401AFB1283677BC07309EA94C708C76F
Certificate serial:       02
Authority key identifier: 03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A0D5796A974311F1BC9473103911F970.roa
Signing time:             Thu 13 Aug 2026 18:20:14 +0000
ROA not before:           Thu 13 Aug 2026 18:20:14 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154824
IP address blocks:        45.249.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl
                          rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E3C6, serialNumber=03867130401AFB1283677BC07309EA94C708C76F
        Validity
            Not Before: Aug 13 18:20:14 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7e0ade-8a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:c9:78:04:85:33:d4:9d:2f:20:be:2e:06:
                    36:62:2d:15:3a:73:83:b3:19:42:0c:22:af:4f:00:
                    a9:48:21:f9:e2:33:eb:7d:25:d4:2c:17:5e:8f:8e:
                    86:ce:9d:01:72:c7:a0:1f:ee:7c:7d:50:b1:76:0a:
                    d3:69:5c:24:48:88:ee:df:1a:bf:ad:2f:2a:f6:9c:
                    06:55:e1:82:02:28:60:d5:77:fb:95:8b:08:7c:4d:
                    fe:e5:b7:1c:63:d6:0f:7f:15:14:61:99:f7:38:5e:
                    44:06:a7:0a:39:e2:78:b7:da:6b:c6:65:8d:12:e9:
                    d8:49:4d:08:9e:73:a5:a3:2b:42:a5:06:34:86:2e:
                    22:2e:c4:26:87:b9:c0:e4:2e:a5:b4:51:c0:fb:a8:
                    ff:6f:c6:c5:3c:3b:fd:7c:bb:01:d2:9b:aa:dd:36:
                    e0:f7:c0:6d:47:ee:16:b0:6b:51:c8:9a:ff:ae:99:
                    aa:85:eb:0d:cd:8e:5e:22:1f:bc:77:04:9e:91:bd:
                    5c:b4:27:3a:2e:e0:b1:c3:a8:9d:fb:4c:18:82:a6:
                    ff:73:97:f7:77:4d:f2:9a:ab:0e:d3:02:b2:bc:45:
                    8c:59:5b:45:68:6c:ba:ca:7d:71:8a:f1:38:7b:82:
                    23:b3:47:8e:c3:9b:de:69:12:7c:36:a6:d8:5c:ed:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:43:29:7A:AD:7C:B3:DD:2E:F5:B2:D3:56:F9:67:F6:3A:A3:F1:BD
            X509v3 Authority Key Identifier:
                keyid:03:86:71:30:40:1A:FB:12:83:67:7B:C0:73:09:EA:94:C7:08:C7:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4ZxMEAa-xKDZ3vAcwnqlMcIx28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E3C6/25F96044974311F19D66860A3811F970/A0D5796A974311F1BC9473103911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:20:22:1f:96:ed:52:d5:12:ae:10:47:71:e6:88:bc:f8:36:
         28:96:a2:f9:84:82:8f:85:25:02:3d:0a:e7:0d:fe:2d:51:20:
         e7:6c:86:c6:c4:dc:55:fe:5d:cd:91:1e:60:ae:96:0b:c4:16:
         34:d8:f4:2b:76:2c:cd:47:2f:54:15:73:ea:d3:d4:11:19:61:
         e7:30:30:b8:58:0e:26:05:cd:cb:8a:5e:24:8b:65:73:3d:b3:
         31:ab:04:8b:07:37:92:cf:0e:64:92:d4:8e:0c:75:09:43:b9:
         d7:8a:08:cb:df:70:e4:de:3d:dc:48:e2:5c:71:9e:ff:8c:59:
         8b:2c:36:5e:6e:52:25:89:a0:80:3c:39:15:1b:5c:3a:04:9b:
         e9:b2:ac:aa:72:91:0a:ed:c5:b3:16:d5:4c:89:b2:f1:60:92:
         7c:af:22:7a:db:79:ba:44:81:e0:59:15:b2:a8:ec:a6:9d:93:
         dd:50:2a:a2:35:9c:aa:8b:fc:08:f3:6b:2d:e6:50:73:5b:ab:
         f5:4f:6e:61:2d:b1:70:63:eb:3f:c6:b1:35:fb:a0:6c:aa:62:
         b1:b6:12:b4:bc:17:7e:9b:51:22:a6:8b:b6:f1:f2:53:59:89:
         15:f7:2c:64:d5:96:ad:0e:bf:f3:2f:c4:61:d3:13:30:be:d5:
         b9:a0:92:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:07 2026 by rpki-client