Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa
File:                     68356576B0F311E5AB30F151C4F9AE02.roa (raw, json)
Hash identifier:          YdRvCfWbMSCV8g9Rl5rj3jDrFMcbMYhwYG0c4TJGKSE=
Subject key identifier:   AB:E2:4D:6D:AD:5E:A1:7E:1F:33:8A:CA:36:C6:2D:C3:BA:E2:44:2C
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       2B21
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 16:23:05 +0000
ROA not before:           Fri 14 Aug 2026 16:23:05 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     132206
IP address blocks:        125.5.13.0/24 maxlen: 24
                          125.5.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11041 (0x2b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Aug 14 16:23:05 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a7f40e9-73e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:ae:72:55:5e:43:c8:f1:b0:10:6a:3d:13:
                    98:f8:14:a2:cf:91:48:ca:d6:42:0b:f6:d2:b6:05:
                    a0:11:cd:8b:48:38:e1:81:8d:2d:0e:48:75:04:e2:
                    06:df:52:56:1d:14:91:65:14:58:17:8b:f4:22:4e:
                    eb:53:37:1d:80:b4:a6:09:82:fd:17:8b:36:a8:4f:
                    b3:66:25:cd:09:a3:d9:a4:58:9c:5e:9e:ad:60:6f:
                    e3:2f:b9:2d:a3:13:7e:a0:7f:ee:8e:6e:6d:84:9c:
                    ca:58:21:4c:4e:e9:4a:ef:db:3f:b8:aa:ab:6b:7f:
                    29:cf:0b:a1:3f:cb:af:59:db:b9:03:0a:75:39:83:
                    69:71:1c:a2:96:34:6d:66:87:75:de:da:92:2d:31:
                    ad:22:b9:ff:96:9c:9c:7d:64:7e:9a:8a:bc:93:63:
                    5d:07:48:9d:6e:39:30:63:0a:64:7a:76:8c:1d:03:
                    59:4e:22:17:32:e9:6f:4e:8d:f1:db:af:83:e2:33:
                    8a:64:cf:ec:d6:4f:fb:5d:f8:d7:6a:2c:e7:5d:e1:
                    85:ce:67:8d:1c:7b:24:61:f0:86:84:cc:6a:3e:ac:
                    3f:e8:84:4d:27:19:ac:51:ae:e4:15:6c:d3:f3:3f:
                    67:16:c6:53:71:bf:32:62:80:b8:97:dd:f5:61:6a:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E2:4D:6D:AD:5E:A1:7E:1F:33:8A:CA:36:C6:2D:C3:BA:E2:44:2C
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/68356576B0F311E5AB30F151C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.5.13.0/24
                  125.5.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:8d:c7:9d:8d:10:1d:ca:c6:29:4f:10:b6:a6:ee:85:f7:
         2e:93:39:2e:f5:f7:cc:22:c6:0a:e9:a0:b7:17:c4:66:b1:6c:
         88:d0:8a:27:f6:a4:64:36:21:b1:bd:0d:8b:5a:fe:7b:f2:ba:
         5c:63:21:a4:e8:81:88:4a:ca:bb:34:6a:88:09:76:6b:d5:1f:
         50:57:9c:47:77:da:a5:20:27:e0:d2:67:43:d5:53:4f:de:c8:
         88:1f:60:34:96:6c:7e:46:f6:62:43:ec:aa:8d:d1:90:a7:44:
         dd:02:b5:71:83:ca:a0:10:9d:1d:7e:0f:1e:f6:d6:ab:e8:84:
         dc:99:e7:1b:a8:66:bb:af:54:29:f8:16:7e:6a:fc:a5:ce:7a:
         a3:92:46:fa:04:cc:2b:62:aa:0f:51:85:a6:15:fc:90:4e:4a:
         22:e0:b6:fd:55:42:78:48:7a:26:76:22:3f:9f:0d:28:9c:0d:
         b1:9d:9f:d4:44:85:7f:e8:e4:82:55:6d:d3:ed:f1:bf:ef:8f:
         1c:dd:29:1d:67:00:56:f0:55:64:81:43:ea:49:2d:d1:fc:83:
         66:10:d3:a5:00:6b:e7:ed:01:64:00:4a:1f:02:22:d4:02:2c:
         48:d2:dd:76:6b:81:3f:48:fe:3d:ce:85:da:16:b6:10:52:72:
         92:6b:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:30:55 2026 by rpki-client