Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/14CFCE649FC411F1B428306E5311F970.roa
File:                     14CFCE649FC411F1B428306E5311F970.roa (raw, json)
Hash identifier:          RfVa2o1MS8FAGgRYImJgXLNu0wEFqTmT+qL3QYsnzDA=
Subject key identifier:   F6:CA:B1:E8:52:EC:64:EE:E9:F2:11:46:1C:45:B9:26:74:84:4C:FA
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0C6C
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/14CFCE649FC411F1B428306E5311F970.roa
Signing time:             Mon 24 Aug 2026 13:59:54 +0000
ROA not before:           Mon 24 Aug 2026 13:59:54 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     210699
IP address blocks:        61.18.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 19:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3180 (0xc6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Aug 24 13:59:54 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a8c4e5a-c52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:6e:89:4e:f7:11:d6:ee:39:b7:f3:bc:c9:
                    2b:be:33:0f:05:d2:08:1b:d3:62:75:24:60:5a:13:
                    b3:f9:59:cd:7e:a5:c9:3a:4d:e7:af:3e:84:0b:1b:
                    66:67:8b:84:88:61:36:bf:c7:aa:7c:a3:cf:9e:41:
                    ba:83:7b:7a:64:9a:12:ae:a1:c3:5d:0e:09:b4:46:
                    78:c1:0a:fa:ec:eb:93:9a:02:3b:c5:2e:f8:18:01:
                    7e:13:d7:c7:ee:0f:ac:6c:c8:4f:e3:ee:3d:d3:13:
                    6a:33:6a:ef:c0:94:58:aa:c2:91:6c:d2:5f:ab:b5:
                    79:81:35:71:1e:e0:b8:98:40:cd:d2:08:78:a7:4d:
                    58:36:a7:db:15:35:61:dd:78:b7:07:d5:fa:d5:ea:
                    3e:9d:14:f9:73:64:59:66:c1:de:1d:09:f7:47:6e:
                    ff:fc:b5:17:d0:69:69:ec:35:6a:19:eb:f1:45:81:
                    bc:b0:ac:57:ee:ab:c3:dd:90:53:26:e2:de:2f:7f:
                    d2:81:43:d0:5d:16:7d:25:26:21:e3:90:6a:2e:9e:
                    b5:c4:df:6b:cd:36:d5:a1:93:39:7b:08:a9:c3:ab:
                    db:95:39:fa:f3:60:3b:cd:ce:3f:ac:70:c5:69:88:
                    bf:1c:80:f5:b3:c0:fb:25:60:4b:07:cd:65:63:fe:
                    79:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CA:B1:E8:52:EC:64:EE:E9:F2:11:46:1C:45:B9:26:74:84:4C:FA
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/14CFCE649FC411F1B428306E5311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.18.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:a5:b4:9b:fc:8c:df:9b:f4:09:40:ed:cb:55:ac:70:63:e0:
         df:e8:8a:fe:b2:ef:75:1e:55:56:f8:70:51:09:c9:3b:07:f5:
         a8:fe:42:c3:79:dd:60:0d:93:64:2d:0c:7f:c3:f0:69:30:6a:
         fc:9b:28:92:7e:1a:6c:78:c8:63:76:f7:b0:89:58:11:7c:c6:
         6f:72:d4:a0:3e:05:05:50:88:11:b8:85:34:3c:74:4e:f7:dd:
         ad:b0:33:05:61:71:39:eb:b1:5c:43:57:6b:89:f5:51:51:b3:
         1f:f6:73:e3:d7:53:0e:e2:e0:f3:7e:fa:80:3d:99:7d:30:72:
         53:39:c6:df:76:e7:54:6e:a2:fc:06:97:dd:7e:b4:7a:93:f9:
         df:19:f9:97:ed:8c:f8:b9:3a:a1:82:a4:dd:36:4f:1b:32:5f:
         e6:e3:d5:4a:29:15:95:1d:ea:1d:0a:11:5a:71:2d:cc:ac:af:
         df:15:42:bf:67:88:c3:a0:6f:9a:cc:a2:9d:7d:d0:b0:9b:1c:
         a7:15:e1:cc:12:c2:d0:09:3e:b9:b7:a4:db:eb:ca:54:f0:b1:
         9f:d7:b7:94:dc:ee:26:22:9a:fe:3a:1e:be:3d:5f:79:7b:03:
         ee:b4:74:c0:7d:74:94:b1:3f:84:94:2f:09:72:ec:2c:ad:a9:
         10:d8:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:41 2026 by rpki-client