Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/ACDC884E1C1511EF93C5F728C4F9AE02.roa
File:                     ACDC884E1C1511EF93C5F728C4F9AE02.roa (raw, json)
Hash identifier:          QK4jcNalCqSQz4zkn7/hHg5Db02y0+HKNyrD6Gn5rmo=
Subject key identifier:   6C:19:38:B0:CA:36:6C:EC:3A:2B:24:6A:84:8C:25:23:7A:D6:8B:FE
Certificate issuer:       /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial:       269D
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/ACDC884E1C1511EF93C5F728C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:27:01 +0000
ROA not before:           Fri 06 Jun 2025 15:52:33 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     23966
IP address blocks:        203.124.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
                          rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 15:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9885 (0x269d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
        Validity
            Not Before: Jun  6 15:52:33 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42285-1082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:54:9b:e3:67:89:f7:e6:3c:81:a1:53:3c:
                    99:be:f8:8e:61:b7:bc:7a:65:ba:33:fa:7f:43:4a:
                    3e:6a:05:52:02:1c:a5:7d:42:4b:9e:0e:6b:5a:85:
                    61:3e:4e:00:b0:3e:62:c1:dd:99:8e:58:91:99:a2:
                    51:10:04:da:dd:93:cb:65:00:24:f6:42:d6:48:3c:
                    48:e3:05:cb:7d:e5:37:f9:59:00:4a:61:f0:0e:c4:
                    88:17:dc:32:e8:c0:f8:c1:f3:3b:22:ec:9c:53:db:
                    0f:c7:27:91:f6:b0:ef:6a:b0:eb:96:a6:54:58:f8:
                    bc:69:a3:33:c8:a0:20:d7:eb:08:fa:08:07:c2:dd:
                    60:93:93:00:b7:a9:b7:2a:c0:86:02:70:71:00:e7:
                    e8:31:67:aa:7a:58:bd:da:bf:21:81:37:c3:09:6c:
                    71:be:60:8d:8a:e3:0f:27:36:19:4c:81:06:7c:50:
                    24:74:ea:c3:0b:f8:d9:1b:3f:fd:fc:4d:f5:3f:d5:
                    e0:48:73:e3:2d:5c:93:14:fd:85:51:b8:e9:b9:87:
                    f2:0a:e6:1d:ea:a5:74:30:5e:28:8f:ba:79:03:72:
                    57:07:ae:6e:89:72:df:45:b9:3b:44:01:85:75:b3:
                    01:ab:9b:e6:2e:75:91:79:ea:12:4a:7f:b1:f1:8c:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:19:38:B0:CA:36:6C:EC:3A:2B:24:6A:84:8C:25:23:7A:D6:8B:FE
            X509v3 Authority Key Identifier:
                keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/ACDC884E1C1511EF93C5F728C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.124.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:3a:80:ec:2c:a1:80:b5:4d:92:8d:69:02:f1:65:2a:3c:
         a6:fc:a4:d0:42:05:ce:ba:f1:f6:6a:6a:a5:ae:6b:f8:00:f0:
         d0:57:13:6c:9e:89:70:da:d9:45:71:d0:3d:01:34:fd:96:1b:
         51:e0:9d:91:6e:0b:61:07:6e:50:64:0b:47:3c:17:5f:8f:6a:
         47:ab:06:55:2b:ed:d3:1a:87:70:c0:d5:8b:6c:20:3a:aa:c8:
         33:98:39:00:1a:29:b1:56:20:8d:d5:7d:1f:38:30:c2:bc:3c:
         2e:bd:7d:5c:84:a3:84:f7:67:2d:99:70:f9:06:60:d3:c0:31:
         38:67:e4:19:32:c1:b0:85:ef:13:19:f5:21:14:38:27:4e:79:
         d5:0c:ad:00:c9:1e:21:d0:1f:84:ca:f6:40:68:ce:f6:7e:b8:
         a9:de:bd:4c:c7:47:14:78:3f:50:f5:7d:01:38:70:99:99:e6:
         17:f2:74:8e:70:d2:51:b3:57:31:31:61:88:4a:15:64:f9:12:
         a6:94:09:99:c0:58:9e:90:41:0c:d7:f2:65:78:b3:86:d8:66:
         ba:fc:74:27:03:ef:20:a3:51:20:33:d2:bb:ff:81:c4:f9:3e:
         f2:6d:98:0a:69:1e:ee:c4:ec:78:75:bf:3e:ad:6e:17:a3:1c:
         31:07:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:30:43 2026 by rpki-client