Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa
File:                     F060FF0E720D11EDA84BE02EC4F9AE02.roa (raw, json)
Hash identifier:          XjvBtz5g4frcjOMdQDCMXkpZji1fTdysFW39IJffTO8=
Subject key identifier:   24:9A:57:6B:E3:D6:E1:8D:07:E1:8F:FE:9B:91:0E:48:8C:6B:6A:E0
Certificate issuer:       /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Certificate serial:       029F
Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 00:30:22 +0000
ROA not before:           Fri 05 Jun 2026 00:30:22 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     8220
IP address blocks:        148.109.0.0/16 maxlen: 16
                          148.109.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 00:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
        Validity
            Not Before: Jun  5 00:30:22 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a22189d-b68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:43:f3:e7:b0:ce:ed:6a:95:9d:c9:84:0e:eb:
                    de:46:b5:37:74:4a:fa:41:3e:b9:2e:25:43:5a:7e:
                    d2:7d:74:ba:88:c3:42:f3:82:1e:4f:4c:ea:e2:57:
                    6c:63:2e:ab:78:66:2c:45:bb:11:d6:4c:ab:fa:81:
                    7f:da:7f:ac:d5:27:87:e0:63:03:4a:f4:0a:0a:f9:
                    ca:e8:2b:e6:6b:03:7b:7d:56:9c:5e:70:76:9d:ef:
                    24:3a:6e:1d:56:6f:27:f8:4f:64:09:a0:0b:df:80:
                    77:30:a3:1b:1f:5a:c6:55:c8:10:54:3b:bc:be:bc:
                    54:3a:2c:fd:e2:01:f1:c4:13:11:c7:f3:de:78:4f:
                    ad:83:a7:f1:a9:2f:72:93:fd:97:fa:42:dd:5b:1c:
                    4d:86:63:21:aa:f2:cb:bd:88:d9:20:de:ee:35:b2:
                    68:8a:2e:21:d2:00:2b:b2:07:7d:a6:87:9f:d0:ee:
                    db:93:6a:d4:c8:77:d8:6e:47:38:cd:9f:73:06:c6:
                    e4:6c:ec:01:a0:c0:db:e9:f1:32:ba:17:20:99:2f:
                    f7:97:53:c1:95:65:09:3a:da:56:a1:4a:4b:df:27:
                    51:46:3a:50:5a:16:86:99:34:e8:84:b1:80:86:0b:
                    e9:93:8f:58:2f:18:76:5f:2d:99:6c:4a:68:e9:a7:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9A:57:6B:E3:D6:E1:8D:07:E1:8F:FE:9B:91:0E:48:8C:6B:6A:E0
            X509v3 Authority Key Identifier:
                keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/F060FF0E720D11EDA84BE02EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:33:1d:9e:cc:6e:43:f0:37:8e:6c:f6:bd:83:53:1d:f8:1b:
         d0:f1:c2:7c:d0:4d:b8:4c:40:f0:0e:0c:94:01:03:58:6d:36:
         46:06:fb:dc:94:53:34:21:ad:85:59:e2:05:be:90:67:ca:33:
         35:3f:5c:c1:53:13:48:dc:a5:1e:c1:6b:8a:94:95:48:e4:77:
         02:3b:42:61:10:d9:92:20:39:5e:dc:d9:96:84:d4:ee:e8:bc:
         a0:bb:7a:f1:af:32:df:a0:c0:40:25:60:73:a6:4a:6c:aa:68:
         e7:37:af:ac:96:f0:de:08:29:f3:51:8b:ab:0b:3a:e3:78:75:
         b9:98:b6:64:51:9e:14:e7:12:74:1e:4c:ae:48:2e:70:87:f4:
         3d:b4:8b:6b:66:3c:07:9b:8f:17:f2:ba:32:30:f0:7a:d6:2c:
         59:25:59:f5:fd:c3:15:c1:03:c4:28:e6:10:75:b8:03:b0:2e:
         3d:72:2e:b5:e5:7c:7e:9a:98:36:25:9d:29:5a:5b:53:8e:52:
         f3:ab:83:ed:56:6d:2e:ac:bd:a9:db:5b:d9:22:96:6b:34:39:
         a9:ce:3c:cd:06:a5:84:22:2b:61:9d:63:92:5f:a3:b3:4f:85:
         85:f2:e6:63:e7:d9:ff:a8:47:04:9f:80:f9:1c:1d:ec:bc:f6:
         cd:2e:44:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:22 2026 by rpki-client