Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa
File:                     AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (raw, json)
Hash identifier:          qHE12pZJwFpe8wyPzOgoide5sDGoFWiN9Bd/hNLVIe4=
Subject key identifier:   2B:4E:82:54:AD:C6:D1:B1:07:61:B4:F1:71:92:09:AD:3F:D7:CB:00
Certificate issuer:       /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
Certificate serial:       0129
Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa
Signing time:             Thu 18 Jun 2026 15:10:43 +0000
ROA not before:           Thu 18 Jun 2026 15:10:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     10076
IP address blocks:        161.248.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 14:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
        Validity
            Not Before: Jun 18 15:10:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a340a73-fe36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:00:1b:b9:ea:ab:c5:ef:65:94:2a:30:21:
                    4f:c0:1c:2f:db:14:0f:95:99:4d:fd:03:ea:a7:59:
                    34:a7:bf:96:25:f4:f5:14:e9:bc:c6:45:54:59:57:
                    3b:72:b0:08:1d:22:54:5b:a9:9f:ea:07:6a:b5:aa:
                    09:7c:96:94:b5:21:4f:c1:e0:11:ba:1c:4f:82:19:
                    7f:70:85:22:e8:17:be:89:5a:4f:af:85:0b:13:9c:
                    21:57:19:6e:1e:d8:0d:22:05:4d:5f:c9:1f:db:70:
                    27:29:a1:3a:37:b1:0a:72:5f:7c:e0:85:6f:af:b3:
                    9c:59:1c:56:46:7a:8e:57:cb:ef:6c:db:8c:dc:bd:
                    45:94:d7:93:a8:df:cc:0f:3d:42:36:87:7a:4d:6a:
                    4a:c4:72:d1:b2:6a:a9:14:1f:08:e2:90:fe:ad:4f:
                    da:9e:64:8f:c7:8a:59:55:6e:a0:9e:12:fe:c7:ff:
                    f7:60:77:e2:c6:78:b9:f6:0e:ef:8e:54:39:55:04:
                    28:26:90:ef:98:15:48:fd:34:d4:90:8d:15:ef:0b:
                    8d:95:1c:62:6a:bd:17:05:6e:5c:2d:c9:f3:33:d7:
                    34:bb:de:f8:9e:29:d9:7d:b9:8f:52:34:4f:c8:a5:
                    bf:fd:80:3a:4c:90:8b:7c:df:49:4f:7c:6a:fc:5a:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:82:54:AD:C6:D1:B1:07:61:B4:F1:71:92:09:AD:3F:D7:CB:00
            X509v3 Authority Key Identifier:
                keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:05:6d:00:f4:fb:16:2e:13:fc:fe:37:e0:52:44:b7:39:cd:
         21:c4:81:f7:14:23:2b:86:c7:38:b8:a0:d5:4e:34:f0:0a:c4:
         47:82:cf:2e:97:47:0b:9d:85:d8:c8:e1:c2:df:33:da:74:48:
         56:a9:9e:c5:f0:89:bd:23:c6:80:4f:36:2b:34:3f:ae:06:e2:
         4a:3c:01:05:b0:d8:d3:17:81:ce:57:7a:4a:7e:10:b9:cd:bc:
         bf:fb:3e:b3:a9:25:3e:f1:01:4f:05:b9:fe:1e:a9:1c:4d:36:
         6f:73:ca:d5:2f:41:23:93:01:cf:af:57:44:69:85:f2:a2:cf:
         af:54:33:00:99:e5:2d:bc:a8:d0:dd:f0:ea:cc:b7:19:b0:1c:
         44:8a:0f:d4:80:07:13:8e:5e:c8:b7:5e:0c:bc:08:b1:cd:fe:
         d7:57:3b:49:fb:40:44:c8:d8:c9:c8:06:80:d7:e6:0d:c7:da:
         7e:7d:f3:e3:4f:8b:80:d9:0a:de:45:b4:3f:77:92:bd:cf:d7:
         69:1d:fd:55:7f:5a:84:8c:9e:b0:6a:9b:ec:a2:e5:d0:1c:ab:
         c5:e2:34:c3:d7:fc:81:83:9d:42:4c:eb:be:57:78:60:ce:03:
         a9:16:89:c1:c4:0e:92:37:d2:7e:f7:15:3c:54:fa:cd:f3:d9:
         4e:30:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:12:32 2026 by rpki-client