Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/F73D1642F30B11EFA86D9348C4F9AE02.roa
File:                     F73D1642F30B11EFA86D9348C4F9AE02.roa (raw, json)
Hash identifier:          YNjOx7sih2Eb/cH1koe193ZixOM8oYvI39UjbZ01Tcs=
Subject key identifier:   95:82:F0:E5:E6:2A:78:42:09:F0:1C:61:67:4C:57:6A:8A:A5:F1:6F
Certificate issuer:       /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial:       3590
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/F73D1642F30B11EFA86D9348C4F9AE02.roa
Signing time:             Thu 18 Jun 2026 15:10:48 +0000
ROA not before:           Thu 18 Jun 2026 15:10:48 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     56293
IP address blocks:        202.5.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 14:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13712 (0x3590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
        Validity
            Not Before: Jun 18 15:10:48 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a340a78-8bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:42:b2:b5:e4:41:e9:6e:ec:c4:37:68:c4:89:
                    46:1f:07:01:67:51:94:1a:fa:26:31:09:e7:35:6b:
                    30:00:d9:ce:92:d9:50:fd:bb:94:69:7c:08:62:b2:
                    62:c1:e6:cf:c3:fd:90:79:a7:ae:94:b3:fa:24:7f:
                    a6:db:11:7a:18:d0:c5:47:f9:9a:4f:aa:06:56:3a:
                    e1:a1:e0:4e:ef:b2:9b:12:60:5e:97:10:81:cd:cc:
                    e5:0a:09:f2:d8:45:f3:52:70:fb:60:45:74:78:55:
                    64:a3:8d:e8:9a:98:bf:bd:94:d6:08:95:70:14:25:
                    06:9f:cf:80:51:90:04:fc:be:e7:1b:e6:f0:1e:89:
                    63:d6:d1:e3:45:b8:97:8a:80:b7:f1:f3:04:eb:b6:
                    22:75:68:ef:bb:2d:51:f3:76:41:80:13:32:f6:6b:
                    15:06:97:06:97:c6:36:97:a2:a9:b7:7e:cc:1c:9a:
                    5e:cf:d0:cf:a9:a9:ae:44:31:4e:b3:8f:af:6d:87:
                    0f:90:cb:01:8e:8c:d4:0f:af:7b:2a:43:cf:3d:e6:
                    f2:a2:63:c9:eb:bc:f6:80:e4:ab:b9:12:a5:54:7a:
                    98:72:ce:75:33:98:f4:fc:32:69:1f:20:7a:65:ef:
                    26:f1:8f:df:0e:dc:64:8e:64:c8:2d:9d:f1:a7:01:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:82:F0:E5:E6:2A:78:42:09:F0:1C:61:67:4C:57:6A:8A:A5:F1:6F
            X509v3 Authority Key Identifier:
                keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/F73D1642F30B11EFA86D9348C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:50:ec:80:dc:e9:ea:c2:a4:71:0e:ec:07:6e:d8:29:72:d4:
         4a:0d:28:34:2d:5b:67:ab:4a:26:14:73:f1:21:39:b1:b3:6e:
         1a:0b:34:07:3d:b9:ca:40:e4:9a:d1:78:55:6a:96:11:bc:4e:
         76:1b:be:5d:fc:2a:57:d8:69:d6:0a:b7:4c:d7:54:c9:b9:35:
         83:25:56:9e:c5:e8:41:79:87:95:7a:ca:bb:ce:cd:6e:21:32:
         f1:5d:85:63:c7:6f:88:85:26:e1:b7:fc:f0:45:bd:5b:39:e1:
         19:f2:10:8d:44:8b:e6:18:b8:aa:6f:26:4d:ff:4f:66:da:77:
         3f:eb:48:71:aa:40:a7:f1:2c:97:95:a5:10:5e:a1:29:63:32:
         a6:c9:3e:f4:c6:39:f9:45:59:0f:82:5d:d0:de:33:ee:dc:a6:
         4e:9f:8e:e4:2d:b6:c7:36:60:82:c6:43:65:3f:f1:21:4c:bd:
         1a:14:5d:f8:56:52:a4:f4:df:3a:df:04:c0:72:59:f8:1a:22:
         50:62:86:3e:c1:71:4d:ba:46:8b:77:44:b4:7c:39:36:27:79:
         97:6c:7e:ac:a6:c8:08:8c:c6:c6:6f:2a:40:0a:82:7b:3e:42:
         ea:1d:5a:a9:d7:4b:15:9d:cf:58:f9:4f:48:33:fd:df:b4:0d:
         b8:64:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:22:37 2026 by rpki-client