Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa
File:                     C699F452FDF711E8B5A6725EC4F9AE02.roa (raw, json)
Hash identifier:          dO081QPzuDKCwpLTnAOAjQ+tLsbL1grsZNnwwdSnPpI=
Subject key identifier:   04:3B:E0:B1:31:DB:8A:A3:3D:3F:4D:5B:C6:65:88:AD:86:DA:61:BC
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1448
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 17:33:55 +0000
ROA not before:           Thu 06 Aug 2026 17:33:55 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45474
IP address blocks:        122.11.181.0/24 maxlen: 24
                          122.11.182.0/24 maxlen: 24
                          122.11.183.0/24 maxlen: 24
                          122.11.184.0/24 maxlen: 24
                          122.11.185.0/24 maxlen: 24
                          122.11.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5192 (0x1448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug  6 17:33:55 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74c582-06f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f4:c2:32:56:8a:c9:5a:9c:e8:42:11:16:6e:
                    3d:9e:a5:30:42:8a:91:c2:0e:96:af:b6:82:03:8e:
                    f3:0f:81:62:04:33:e7:ac:4f:09:31:8f:a6:8d:d3:
                    34:5d:eb:ce:4a:6e:49:96:89:64:8f:cd:bd:07:bb:
                    1b:da:ac:12:ba:44:58:bd:01:3c:35:69:9d:74:89:
                    10:ac:de:ec:96:ba:42:1d:23:19:20:96:6d:41:0e:
                    a3:06:28:2d:a5:b9:c7:2d:80:28:ac:6d:0d:b9:3b:
                    12:61:0a:d3:d0:7e:d5:ab:ff:5d:9c:7e:d7:38:24:
                    69:23:78:30:4a:30:32:52:a7:2d:6a:81:aa:8c:2e:
                    98:83:73:a7:82:5a:ee:e5:63:f7:9f:a8:25:60:f5:
                    6a:7a:76:76:52:38:eb:dd:38:65:fc:ab:21:cc:7c:
                    cf:1b:77:7c:01:61:0a:b9:4c:8a:11:ca:29:03:a1:
                    6c:5a:c3:00:15:91:92:c0:ba:dc:61:f5:5a:6f:32:
                    1e:e4:44:7a:df:ad:77:ce:a1:4f:2f:23:4b:9d:6b:
                    de:32:36:ec:2b:b3:75:5d:a2:43:99:c9:e6:c4:aa:
                    23:2d:92:2a:47:55:c0:56:34:b6:7a:92:85:fa:87:
                    c7:b8:47:04:8c:bd:3d:72:51:4f:3a:f6:b6:be:77:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3B:E0:B1:31:DB:8A:A3:3D:3F:4D:5B:C6:65:88:AD:86:DA:61:BC
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/C699F452FDF711E8B5A6725EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.11.181.0-122.11.186.255

    Signature Algorithm: sha256WithRSAEncryption
         71:19:93:48:1a:f0:f9:5d:9e:98:9d:d7:8e:90:7e:27:58:88:
         0f:31:bc:02:7a:aa:1e:0a:22:9f:e3:88:3a:77:3a:a6:f4:00:
         68:b5:00:0e:b2:44:79:0f:f5:80:fd:5d:e0:6e:e1:f2:2b:19:
         52:f6:01:6d:fa:ca:24:60:16:8b:6c:d6:43:bc:f8:e7:7a:b7:
         0d:f3:8e:84:65:16:f0:d8:7e:24:94:7d:83:74:03:aa:47:96:
         da:9b:dc:53:0d:42:3f:24:9d:b6:b7:d3:a2:4c:1c:58:89:58:
         48:90:63:68:89:7d:7f:3b:a4:6c:88:f9:90:75:a3:19:e2:4f:
         66:0c:fc:01:c4:aa:76:d0:04:09:e9:bf:67:06:bd:15:37:5b:
         82:11:93:6b:00:46:ce:d9:77:84:12:ee:f4:11:49:3c:aa:97:
         50:1b:a5:8c:a5:44:ac:9d:a5:de:b7:e1:27:21:97:dc:88:d0:
         50:5e:3b:80:0c:ca:e5:5c:44:b2:c5:b1:9f:64:40:81:22:80:
         72:e7:2e:f1:4e:ce:23:cc:96:b8:eb:69:d5:6f:bb:62:31:37:
         6e:cd:3a:f6:bd:7c:da:37:13:3a:d6:72:7e:c9:e1:3b:54:49:
         8e:f7:d0:e8:cf:76:b8:86:f5:c9:a2:08:93:54:de:14:5e:94:
         0d:5b:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:15 2026 by rpki-client