Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/553798E2FB2E11EFB488A95EC4F9AE02.roa
File:                     553798E2FB2E11EFB488A95EC4F9AE02.roa (raw, json)
Hash identifier:          iO6/ie5EFEIbKoC8oTYdIPXDgP44RM24bM76Sl8j9K4=
Subject key identifier:   45:AC:D6:6D:19:0D:31:CB:45:B3:EB:0D:B3:1B:FE:B9:FE:7A:A0:4B
Certificate issuer:       /CN=A911E502/serialNumber=386C300ED72F12B905478A33CEF27799254A691C
Certificate serial:       B2
Authority key identifier: 38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/553798E2FB2E11EFB488A95EC4F9AE02.roa
Signing time:             Tue 27 Jan 2026 05:28:46 +0000
ROA not before:           Tue 27 Jan 2026 05:28:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     7712
IP address blocks:        118.67.200.0/22 maxlen: 24
                          2405:aa00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl
                          rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E502, serialNumber=386C300ED72F12B905478A33CEF27799254A691C
        Validity
            Not Before: Jan 27 05:28:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69784d0e-c4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:43:6c:87:17:1e:30:69:9d:b7:69:83:45:
                    71:39:c1:85:3f:9e:82:92:a6:bf:0c:5f:d7:b1:2f:
                    e4:86:a7:bf:ac:0a:82:f9:00:35:2a:2c:99:84:e1:
                    fe:be:f3:18:97:b7:97:fe:ed:6c:62:00:f8:ec:62:
                    86:9b:9f:26:33:be:91:41:16:f5:b8:bc:82:bb:62:
                    fe:7c:6c:53:74:ee:8a:f5:36:32:85:a6:d1:6e:d7:
                    24:68:3f:64:d0:6a:50:37:59:90:cf:90:56:28:56:
                    b2:84:e0:3b:27:8b:a1:9f:11:71:5d:9d:40:0d:50:
                    c1:70:4d:5b:fc:04:be:f7:4c:39:fa:9a:30:92:de:
                    60:5f:b0:ed:60:22:a0:9e:30:5b:c5:70:20:99:fd:
                    54:64:21:c1:9b:2a:30:6e:91:f9:4f:28:b4:5f:f1:
                    1b:d6:8f:86:e6:f8:ba:7b:42:5f:cd:bb:dd:61:9a:
                    e4:0e:11:07:60:86:8c:8b:6d:c9:a3:f1:bb:3e:fb:
                    e9:3f:e0:a8:b1:89:3e:78:44:07:63:7a:59:e9:8b:
                    cd:c5:67:8f:b1:59:78:8e:2b:63:d8:69:de:30:24:
                    3d:b1:90:8b:3e:4a:05:9c:42:5c:7f:3f:8f:d0:4a:
                    52:67:17:2e:ba:7b:16:79:dd:37:df:57:f6:53:4d:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AC:D6:6D:19:0D:31:CB:45:B3:EB:0D:B3:1B:FE:B9:FE:7A:A0:4B
            X509v3 Authority Key Identifier:
                keyid:38:6C:30:0E:D7:2F:12:B9:05:47:8A:33:CE:F2:77:99:25:4A:69:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/OGwwDtcvErkFR4ozzvJ3mSVKaRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGwwDtcvErkFR4ozzvJ3mSVKaRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E502/87C3FD0AFB2911EFB766DC76C4F9AE02/553798E2FB2E11EFB488A95EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.67.200.0/22
                IPv6:
                  2405:aa00::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:c1:bf:f4:2a:fc:60:61:11:6e:94:93:59:fa:f4:b0:13:
         e2:b9:3f:cf:e2:6d:2b:7a:99:e8:c9:ee:e6:46:f2:9d:4c:7d:
         84:ab:ff:e6:0e:61:c3:9e:8d:b3:95:13:48:1b:1c:a3:1d:8a:
         61:8f:43:65:e9:e4:28:a4:93:10:b7:5f:bc:eb:ff:66:9d:ef:
         79:c0:a4:8f:c4:ad:22:dc:43:4e:0b:70:e1:99:9c:34:fd:94:
         f6:b0:84:cb:5b:89:ad:23:49:62:2c:be:75:76:ed:07:19:76:
         90:6e:79:10:85:16:1c:5d:92:f4:fa:1d:8d:b4:08:b4:30:0f:
         77:e3:c2:28:2a:46:dd:9e:2f:46:11:42:86:7a:5b:25:df:2e:
         3c:78:aa:5e:9f:28:e7:6b:c6:39:de:b1:77:2f:07:b9:33:75:
         1a:4f:30:a9:a1:9a:26:ca:50:a7:7b:63:0c:c6:f4:a0:04:da:
         9b:2b:ef:b5:8b:0b:42:15:25:27:ee:f5:e6:36:1d:2e:ef:31:
         32:d9:ef:3e:3d:99:bb:51:80:dd:73:51:82:2c:dd:54:8b:15:
         57:0d:22:89:d0:55:f7:e3:ab:9d:d4:bf:2c:00:d2:f1:88:c8:
         61:46:ea:8c:47:e0:dc:98:ff:cb:e3:e1:0a:7c:9d:fa:a4:c6:
         c7:6d:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:49:28 2026 by rpki-client