Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/551B0760BEBD11F0AD50D23AC4F9AE02.roa
File:                     551B0760BEBD11F0AD50D23AC4F9AE02.roa (raw, json)
Hash identifier:          5yaxUN0WdNPJcEJkf69PFh/CxSo68teL13Z+Mjg2H+Y=
Subject key identifier:   A1:4D:41:99:1E:A2:88:AE:19:45:5B:3A:D1:65:8B:2A:A2:E7:E6:5A
Certificate issuer:       /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Certificate serial:       3E
Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/551B0760BEBD11F0AD50D23AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:07:57 +0000
ROA not before:           Tue 11 Nov 2025 05:14:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137013
IP address blocks:        138.252.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
                          rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 18:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
        Validity
            Not Before: Nov 11 05:14:44 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a599bd-4564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:5f:6c:91:78:f2:ef:6a:7d:10:13:49:85:
                    2e:70:3a:02:12:b3:49:d3:b5:39:82:61:ef:83:c9:
                    09:3b:71:c3:d3:e3:1d:ce:a2:46:41:46:ff:39:c1:
                    c8:2c:de:c4:8c:d2:86:df:bf:d8:75:54:8e:64:00:
                    50:d6:2a:9a:bb:23:fa:02:7e:f1:0d:12:88:42:6c:
                    92:90:4e:82:5c:04:25:ce:25:e0:bc:1e:a0:78:c5:
                    1e:9e:88:63:4e:1a:fa:79:b7:be:5c:c3:1f:10:23:
                    2d:e9:70:73:bf:7a:1c:4f:07:a5:c6:62:33:42:f6:
                    4f:90:e6:41:12:cf:69:74:ab:cf:60:f0:33:a7:47:
                    52:e9:3a:69:a0:a6:24:c3:cb:cc:6a:b7:df:d6:dc:
                    d3:5f:e9:2b:12:db:0e:09:b2:67:80:75:7b:9e:b8:
                    79:90:03:af:55:60:cc:16:24:e4:0d:53:b6:b9:ac:
                    58:35:8e:8a:51:da:3f:e6:44:30:8e:a6:64:1d:46:
                    b7:d2:ed:b4:0e:7a:31:65:fb:d8:7d:a5:9f:03:8b:
                    de:df:30:d7:6b:21:1c:ef:89:fc:5a:29:22:c5:df:
                    3e:30:0e:81:4f:d7:f9:17:6b:54:f1:e9:1c:2c:d9:
                    38:8e:1c:e0:4f:ab:c4:0a:6d:3f:93:51:12:8f:03:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4D:41:99:1E:A2:88:AE:19:45:5B:3A:D1:65:8B:2A:A2:E7:E6:5A
            X509v3 Authority Key Identifier:
                keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/551B0760BEBD11F0AD50D23AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:2f:22:02:e0:d3:56:9b:a2:88:02:d7:91:1d:4d:9b:55:
         ca:1f:42:f2:b2:df:23:9a:3b:87:79:8f:0a:21:d0:4b:6d:2f:
         0a:0a:38:d2:ea:82:ec:25:b5:3d:54:c1:76:c2:23:ed:11:34:
         ae:8f:16:15:fb:25:9f:37:04:7c:85:52:22:47:16:1c:48:c6:
         25:d3:4c:45:87:28:e4:63:65:77:9a:7a:ca:ad:7b:d0:1e:15:
         fc:e3:b8:a6:b3:44:9e:7a:c0:c9:43:04:57:89:89:bc:79:34:
         c5:61:51:1a:01:cf:f8:dd:56:a3:36:70:46:09:e0:73:56:35:
         29:2e:5f:85:2e:93:b5:2e:b8:d9:9c:88:57:76:a8:a6:20:3f:
         1f:f0:dd:97:e7:a1:c2:79:4e:32:4e:28:24:c7:f4:88:1a:08:
         5f:a4:db:c2:45:4f:12:af:e7:73:da:fb:ca:86:77:ba:80:19:
         61:f4:d5:46:6f:b6:3f:4b:c1:c2:fe:e3:9c:f2:9b:b1:96:9e:
         7a:90:e1:78:06:60:1f:cf:d6:9f:e5:03:61:12:40:34:0c:a5:
         e8:f7:2d:a1:52:ef:5a:5b:61:7b:8d:48:cb:b0:d6:4b:14:af:
         b1:2e:3f:58:5b:58:fc:a2:d1:a5:94:ad:93:41:d5:54:3d:75:
         ff:89:05:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:00 2026 by rpki-client