Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa
File:                     52850542A60811EF91FB1113C4F9AE02.roa (raw, json)
Hash identifier:          x5mUXVbh0potf0R8YLiFh/Y6CAXo3eGK7/bbwP7P9M0=
Subject key identifier:   CC:F5:87:58:54:ED:21:38:10:A4:04:1C:71:B4:42:BD:D5:41:D2:8C
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DB2
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:11:51 +0000
ROA not before:           Thu 06 Aug 2026 15:11:51 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     20200
IP address blocks:        45.250.221.0/24 maxlen: 24
                          45.250.222.0/24 maxlen: 24
                          45.250.223.0/24 maxlen: 24
                          61.251.182.0/24 maxlen: 24
                          101.53.75.0/24 maxlen: 24
                          115.71.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 01:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15794 (0x3db2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:11:51 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a437-1cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:7f:87:f0:1b:14:ac:3c:03:4c:8e:4f:ca:
                    f3:f3:dd:cf:44:c5:5f:a3:41:36:a3:fa:42:f6:ef:
                    cd:1b:86:44:25:a1:c2:15:e4:a4:2a:5b:d1:13:ef:
                    21:f6:ef:02:1d:7a:73:68:5f:86:81:02:af:0a:9d:
                    c1:26:0a:5b:01:0b:0c:c8:5d:c6:0f:40:24:02:9b:
                    58:a2:9a:69:03:71:bd:b2:3d:79:49:0d:d8:d4:56:
                    cf:71:04:17:a8:78:67:eb:6d:d7:2f:dc:4c:e0:47:
                    a1:10:68:88:7c:f5:4a:cd:3b:78:ff:d7:c4:bb:15:
                    54:0b:28:38:7a:52:71:1c:f1:6d:e0:17:22:72:b1:
                    c8:f6:93:ca:42:4e:59:b5:ca:d3:09:c8:17:4a:59:
                    8f:b3:48:3b:78:3e:23:d6:6f:69:f5:6a:10:f9:fd:
                    ce:79:bf:25:29:c0:5d:de:4f:20:72:34:03:09:13:
                    3d:cd:6c:b5:1f:69:9b:30:7e:85:b6:8c:a9:f8:fc:
                    cf:77:93:2d:6b:d4:35:5c:e7:83:b1:0b:47:2b:30:
                    bf:1f:51:c5:a9:a6:cd:10:8f:23:3e:16:32:c1:cd:
                    c0:20:29:d2:f2:67:62:4f:c2:b7:a6:d4:e8:b5:02:
                    ee:1d:48:ac:f3:bb:36:c6:30:ff:71:d0:ec:b6:39:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F5:87:58:54:ED:21:38:10:A4:04:1C:71:B4:42:BD:D5:41:D2:8C
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/52850542A60811EF91FB1113C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.221.0-45.250.223.255
                  61.251.182.0/24
                  101.53.75.0/24
                  115.71.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:c7:08:a5:3c:da:12:98:a2:c2:f4:17:d3:bc:fc:41:74:1c:
         4d:14:87:b6:ed:9c:6c:06:19:08:81:9a:13:6e:9e:50:81:83:
         7e:79:99:4d:82:ff:9c:14:d3:72:2a:00:eb:40:86:76:cf:62:
         fb:8c:c2:95:4b:a6:d0:de:15:d3:a2:88:18:74:18:21:0a:1b:
         aa:64:fb:86:41:64:4f:97:6d:99:29:c9:80:1c:e1:a4:02:74:
         c2:97:a4:d1:43:48:bc:22:18:d2:a1:d9:25:61:5c:2d:d4:f6:
         09:f5:8a:d6:67:9d:a9:df:c3:71:69:4b:48:f6:3b:4c:90:bb:
         d6:4f:6e:d7:4e:2d:b3:b6:a9:92:f3:4a:05:dd:83:56:7e:20:
         67:02:fb:17:9d:9a:4d:58:86:39:53:51:79:cf:8e:58:81:94:
         32:86:fd:6c:9e:02:89:41:32:9e:55:df:b9:62:b9:15:99:b0:
         db:43:8d:e9:71:96:16:5e:8e:99:dc:56:be:c8:0f:7c:07:84:
         a0:05:8e:0f:fc:93:2c:f8:58:3b:4f:8a:97:23:1d:48:7d:08:
         9e:66:94:0f:ce:78:b4:7a:98:19:62:bb:f0:de:55:ab:5e:95:
         c5:04:d3:e2:81:0e:22:08:8e:97:14:29:2c:6e:2b:42:0f:df:
         2a:2b:2f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:15:55 2026 by rpki-client