Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
File:                     682125602A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier:          s9m5MA/YhpH+FpVir7bX1Gnp+fOQDHAC585kZczTBcA=
Subject key identifier:   B1:2B:8A:12:56:D9:81:F4:F2:48:42:4E:73:6C:56:D5:8A:A4:E9:4B
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0A26
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
Signing time:             Tue 16 Jun 2026 21:25:29 +0000
ROA not before:           Tue 16 Jun 2026 21:25:29 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55932
IP address blocks:        203.151.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2598 (0xa26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jun 16 21:25:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a31bf49-df70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:c8:f3:f6:42:9c:1c:c7:2d:b6:9f:a8:e6:
                    3d:19:de:a5:9e:35:87:47:ab:11:e1:72:f8:4a:c9:
                    da:4c:e0:9f:03:98:9a:0f:01:85:68:98:a4:b1:df:
                    83:7e:13:95:fb:11:dd:20:a9:4a:02:c3:55:e2:f5:
                    19:0b:3f:27:7a:8e:11:b1:9e:0a:a4:d4:ea:5a:02:
                    28:7e:38:ac:ba:b6:da:2d:f0:bd:cf:cb:1f:b5:5d:
                    ca:b9:84:9e:72:fb:cd:3a:8c:3a:50:70:14:75:e5:
                    6a:0b:0b:68:66:0f:c5:89:52:a4:51:cd:21:cc:12:
                    f0:48:00:20:04:83:0c:67:fd:23:74:83:60:f2:f7:
                    9b:f7:05:3a:96:5a:80:2a:84:6a:da:4c:45:08:b9:
                    f1:6b:cb:89:51:f3:36:fd:ec:4e:55:fa:62:5a:5a:
                    82:0f:78:5f:ab:a3:96:e2:29:d1:9a:32:84:c6:dc:
                    fb:f6:a3:04:60:95:67:a5:28:3f:fe:83:2c:1c:2e:
                    67:f6:51:7c:10:65:7b:d3:d5:a4:cc:b4:c0:b4:a8:
                    3e:8b:81:0b:db:0a:6c:79:15:8a:15:7c:e5:60:73:
                    13:56:e7:0e:bb:fd:77:ab:f7:66:9f:90:b4:39:53:
                    82:2b:9e:a6:a6:1a:89:83:93:ee:df:15:5f:3c:0f:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:8A:12:56:D9:81:F4:F2:48:42:4E:73:6C:56:D5:8A:A4:E9:4B
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.151.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:52:f1:ad:0c:20:c7:e4:87:22:b4:72:a4:b8:75:95:11:
         69:6b:67:59:eb:a7:3e:82:81:8a:54:fd:28:2d:f7:43:57:96:
         6a:1f:57:8f:7e:43:3b:8d:ed:e4:e2:1a:32:f0:d8:93:3f:8a:
         75:8f:b1:f6:49:fe:55:e4:09:54:8b:69:65:95:53:36:25:ca:
         13:c9:27:61:5a:d3:9d:8a:f0:a9:6b:5d:62:e2:7d:2b:95:0b:
         4d:c7:06:5f:3e:de:1f:e6:cf:7c:ee:71:4f:1c:96:16:d6:1c:
         f3:68:05:ac:43:44:94:5b:bd:ac:8e:0b:0d:71:cf:2a:57:1d:
         02:79:07:78:3e:55:52:8b:d4:6b:3e:67:3f:c5:cd:d1:1a:da:
         23:40:b5:98:31:c5:00:1e:9b:d9:0a:dd:e0:f8:17:11:61:c1:
         ee:27:57:17:54:af:ad:80:e5:32:c8:1c:e2:97:1e:fd:d7:0f:
         b1:f3:bb:9c:3d:94:12:ec:9b:96:52:03:72:d3:a3:6f:01:50:
         2f:29:18:47:6b:35:82:b9:c9:10:bc:e1:6e:bd:36:c7:f7:fa:
         1f:60:3b:f8:2a:6f:ba:f5:cf:87:28:3e:4c:27:99:fb:e0:fd:
         29:fd:c4:ec:00:71:67:fd:db:61:1c:14:c9:92:13:88:ee:b5:
         64:39:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 20:27:00 2026 by rpki-client