Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/4F8D63203EBF11EBA940A946C4F9AE02.roa
File:                     4F8D63203EBF11EBA940A946C4F9AE02.roa (raw, json)
Hash identifier:          LE0VTi8+0pbCSkcwe7ACdLaQayeRS2CPbE1XwFL3hMM=
Subject key identifier:   EC:E9:68:00:EA:CB:31:CD:E0:05:95:9C:D3:54:99:9B:E1:16:ED:B0
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2B26
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/4F8D63203EBF11EBA940A946C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 16:23:17 +0000
ROA not before:           Fri 14 Aug 2026 16:23:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     24071
IP address blocks:        125.5.6.0/24 maxlen: 24
                          125.5.17.0/24 maxlen: 24
                          125.5.25.0/24 maxlen: 24
                          125.5.26.0/24 maxlen: 24
                          125.5.254.0/27 maxlen: 27
                          202.57.108.0/24 maxlen: 24
                          202.163.206.0/24 maxlen: 24
                          203.131.76.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11046 (0x2b26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Aug 14 16:23:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7f40f5-0ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:53:24:1a:32:1c:ef:dc:c5:ad:66:88:1b:
                    70:25:85:ed:9a:1a:a3:ab:b2:94:eb:4c:46:19:9f:
                    2e:ae:b3:cf:cb:5e:34:79:7d:25:76:5a:c2:1e:72:
                    71:a9:d1:1a:e8:ad:44:71:2b:a0:3e:70:c4:af:2b:
                    de:18:94:d1:82:cb:88:74:46:fa:f7:32:5c:cd:0f:
                    40:47:d1:6d:7f:03:ac:91:d4:a5:c0:f5:ed:da:4a:
                    a4:ec:86:21:8d:26:e5:b9:79:04:32:45:57:85:a9:
                    c2:3c:89:94:e1:15:9d:a5:de:b6:0f:36:5c:ed:a7:
                    bb:23:fd:f3:5b:ff:c7:2e:d7:e1:4c:14:73:97:7e:
                    14:96:df:a2:37:30:fc:c2:32:56:88:0d:70:1f:17:
                    71:e8:dc:f5:ce:e4:44:14:e7:fb:ab:2e:26:f7:47:
                    8d:92:fc:8f:0e:dd:74:d5:93:c7:8d:1e:ca:c6:4f:
                    ca:9e:ac:55:89:04:0d:10:d0:b2:2d:1f:e1:44:63:
                    61:02:13:c9:14:32:b7:7f:fb:45:e4:e4:ca:e6:b2:
                    b2:05:0f:fd:50:9f:14:5d:cd:54:fb:0b:77:a7:f1:
                    32:3a:bc:43:38:9f:ec:0a:fc:08:27:98:0a:5a:7e:
                    03:95:a9:b9:07:3b:5b:25:45:f7:ee:03:99:15:b0:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E9:68:00:EA:CB:31:CD:E0:05:95:9C:D3:54:99:9B:E1:16:ED:B0
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/4F8D63203EBF11EBA940A946C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.5.6.0/24
                  125.5.17.0/24
                  125.5.25.0-125.5.26.255
                  125.5.254.0/27
                  202.57.108.0/24
                  202.163.206.0/24
                  203.131.76.0/27

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:66:1c:df:fd:89:2d:93:d4:57:f2:c0:fa:69:e6:c6:b7:
         02:c4:ea:76:84:9f:5e:43:56:dd:90:76:a5:19:c8:87:9a:cb:
         60:f8:e2:27:15:62:aa:66:8c:04:97:6c:ab:b3:7e:ea:92:c3:
         53:75:02:b6:8b:f9:35:98:87:d7:94:ae:f3:9f:76:b0:3d:2d:
         17:cc:f8:58:b7:a9:86:ad:2b:e7:59:88:55:5c:04:04:2c:dc:
         92:58:9d:1a:5c:1a:84:b1:fe:6b:e8:fa:9b:1d:f2:08:7d:5b:
         1d:2b:1a:d6:b8:db:43:40:ca:64:85:d1:3d:4b:dd:ad:b2:61:
         9c:39:ca:c1:ef:9b:2b:3a:36:89:68:6a:3c:c8:27:43:0f:f1:
         f5:39:13:1f:aa:95:69:ec:c5:5d:f4:c5:70:09:0f:9f:ee:6d:
         47:a7:38:95:f8:c3:3e:dc:d2:95:bc:4d:1c:1f:1e:5c:49:ee:
         20:a7:b6:e2:aa:da:b5:c5:34:45:c1:12:a4:e3:d8:c3:ee:4a:
         0e:5e:29:4d:8c:37:b6:f9:71:b3:34:16:a6:be:f8:40:d6:61:
         6f:b8:b2:7d:97:38:d2:ca:09:01:3f:63:f8:0a:51:1b:2c:54:
         a8:48:26:95:1e:a4:22:d8:ac:b9:6f:41:d6:d4:89:6c:c8:63:
         79:60:78:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:44 2026 by rpki-client