Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa
File:                     579FE34A0BF211EF8B0F9C81C4F9AE02.roa (raw, json)
Hash identifier:          2QQLdWByWmzyDLm9K7Etw2tEiz/l3b7pU56fbAv1SHo=
Subject key identifier:   C9:9C:07:F4:1F:67:73:38:00:6C:5E:A9:44:56:90:E8:AC:C4:1D:4C
Certificate issuer:       /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C
Certificate serial:       0710
Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa
Signing time:             Tue 16 Jun 2026 22:26:51 +0000
ROA not before:           Tue 16 Jun 2026 22:26:51 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        114.141.120.0/24 maxlen: 24
                          114.141.121.0/24 maxlen: 24
                          114.141.122.0/24 maxlen: 24
                          114.141.123.0/24 maxlen: 24
                          114.141.124.0/24 maxlen: 24
                          114.141.125.0/24 maxlen: 24
                          114.141.126.0/24 maxlen: 24
                          114.141.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl
                          rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 22:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203EB, serialNumber=2F265B0C802473094926890A85124E21B109DA3C
        Validity
            Not Before: Jun 16 22:26:51 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a31cdab-1869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:24:b2:55:d9:79:0e:d9:e8:d4:83:e2:00:
                    df:14:8e:24:1a:76:83:18:d9:d1:25:ae:6c:7f:98:
                    b3:8a:32:f3:dd:a1:02:0e:1f:90:43:4d:9d:74:67:
                    55:f2:75:2d:e3:91:09:94:06:a5:91:1d:c9:99:04:
                    11:c2:ee:a5:5a:29:b0:35:0a:95:85:70:ea:5c:79:
                    9b:40:4e:38:42:e7:6b:d1:c5:ca:ee:2f:11:bf:6d:
                    07:29:54:8f:8a:aa:aa:33:03:75:88:6f:55:c4:77:
                    ee:cf:02:29:b8:69:49:49:89:a4:bf:78:ea:c8:1a:
                    78:d2:81:db:22:90:49:f3:c4:ed:3c:b9:77:67:78:
                    42:10:7e:22:8a:13:44:23:d5:73:f8:2e:79:02:54:
                    8d:ad:59:54:0b:36:4e:27:94:a7:5e:d8:74:71:a1:
                    65:21:de:e9:e7:68:27:3d:be:cb:7f:69:93:ea:27:
                    c9:e1:ca:66:9b:81:6e:05:93:56:26:db:b5:16:2b:
                    ab:71:d5:ef:0f:c8:10:e8:95:39:ba:36:38:06:23:
                    a1:9a:d2:c6:49:52:13:e8:c8:7c:12:23:87:19:eb:
                    93:51:cb:91:1f:97:03:8f:3d:2a:ed:2f:98:89:53:
                    98:20:e0:61:42:97:21:c8:2e:50:1f:90:85:13:c9:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:07:F4:1F:67:73:38:00:6C:5E:A9:44:56:90:E8:AC:C4:1D:4C
            X509v3 Authority Key Identifier:
                keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         e0:d1:37:66:e9:47:14:e0:e8:b1:a5:4e:e6:eb:57:31:aa:41:
         13:b1:99:33:0a:a7:ec:c6:3e:ca:e0:b0:85:8e:17:ed:a4:4d:
         62:b1:47:d2:3c:76:0a:d9:14:b1:ad:02:7e:ec:7c:5c:18:a5:
         16:1d:32:5c:b8:4f:2e:c9:9b:92:f7:63:ee:17:6c:90:09:81:
         f7:58:9b:01:ee:97:fd:e6:e1:74:8e:9d:a8:bf:60:70:98:94:
         ff:0e:52:bf:cb:46:69:9b:76:9e:c4:65:dd:fd:a7:ff:fa:47:
         b7:a9:4f:0b:82:5c:67:90:e8:9b:6b:c0:b0:cb:33:c6:ef:dd:
         6b:d3:d6:f2:49:f3:32:ef:fd:ce:c6:16:67:4a:59:e3:11:1d:
         94:b8:cb:28:8e:9e:e4:fd:64:e9:c9:15:00:e4:09:20:f5:c9:
         54:2a:28:4e:fa:a0:bb:c0:65:c0:e3:73:67:b2:a7:ff:33:9b:
         51:50:20:93:ba:fa:b0:d4:29:5b:2c:4f:3a:14:54:50:1a:d1:
         89:a4:0f:8b:3c:92:92:ed:b8:0b:df:50:66:e0:52:e5:2f:0f:
         da:11:4c:a5:aa:42:79:9f:03:23:f7:91:3c:9a:48:8a:0c:b8:
         af:8e:15:a4:29:13:a3:cc:10:a8:12:ed:02:c3:52:11:fb:aa:
         19:dc:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:34:07 2026 by rpki-client