Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa
File:                     5233C98A04D211E9BA47303FC4F9AE02.roa (raw, json)
Hash identifier:          /JpbQnMGFNRO2yoA2/Q6TzM/yULRDoVi/uWv84phM/s=
Subject key identifier:   C6:54:B9:9B:99:D7:F2:A9:C0:A4:DD:8F:88:C4:7B:87:80:D3:25:24
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2113
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:31:44 +0000
ROA not before:           Wed 30 Sep 2026 16:31:44 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4808
IP address blocks:        218.30.223.0/24 maxlen: 24
                          218.30.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8467 (0x2113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:31:44 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd396f-1878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:7d:43:bc:b7:20:1f:7c:2d:a8:26:05:ee:
                    f4:5f:ef:6b:3c:3a:de:e6:2a:b0:ed:cd:92:a8:79:
                    83:72:af:23:45:3f:86:ad:f6:22:a9:ab:45:8f:be:
                    13:e0:3b:f3:c6:86:df:3d:80:e8:79:ad:d4:7f:a2:
                    c6:8a:33:41:e8:f4:82:4b:23:77:e8:23:49:d2:ae:
                    bd:45:d3:52:31:62:fe:1e:ec:b8:3e:9d:21:2d:b0:
                    94:07:bb:ba:50:b8:ed:b9:93:91:dc:ea:76:37:d5:
                    e5:5a:bc:7b:32:7b:9d:99:73:8f:56:7d:c0:9e:43:
                    a8:d7:e5:3b:40:e3:98:0d:8c:bc:97:56:fe:43:a1:
                    2e:12:b0:ef:77:5e:1e:18:3a:53:b5:75:9a:07:77:
                    d5:cd:5a:91:0d:a8:91:e3:b7:7d:d2:70:8c:50:a3:
                    5a:29:3e:84:9e:fd:a0:d0:64:0e:d3:f7:cd:e2:69:
                    77:81:ee:ef:f4:f7:b2:b8:41:09:11:47:e5:62:81:
                    cf:a7:3f:6e:50:9b:85:e5:68:a6:c5:45:0f:e0:0f:
                    ab:e9:48:48:a4:df:af:ac:6b:a0:bf:de:d8:e7:78:
                    07:87:5a:ac:1c:d8:cc:4a:0a:70:83:bc:fa:78:ad:
                    8a:98:df:a0:c4:55:1d:29:ea:e6:92:67:2c:cc:2e:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:54:B9:9B:99:D7:F2:A9:C0:A4:DD:8F:88:C4:7B:87:80:D3:25:24
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.30.223.0/24
                  218.30.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:5a:96:2e:64:01:82:93:5e:07:59:6c:74:4c:ce:6a:18:f6:
         ff:43:e7:59:aa:56:ac:5b:13:b9:4f:00:d1:48:39:3f:04:dc:
         51:fa:d0:c5:ca:c1:69:b6:ba:68:64:fc:66:d2:65:80:37:2f:
         fc:b2:88:5d:4a:f8:b3:80:fe:55:52:d7:2d:a7:ad:64:85:15:
         19:ce:71:84:c1:a6:98:6a:03:6e:9d:d3:3e:a4:3c:ad:34:21:
         c7:2a:0b:3f:e1:ca:e5:b5:f0:81:e9:1c:f0:f1:e6:fc:56:52:
         07:01:69:a5:94:6f:78:f2:9e:6b:bc:7a:28:ad:ee:95:df:24:
         d0:5c:b0:3a:4a:73:80:2a:4f:db:68:44:b2:45:6e:c7:45:09:
         47:c9:49:30:e1:8f:bc:69:95:ac:b7:5e:90:88:b6:3c:80:6c:
         86:e7:da:ea:be:1e:aa:03:c5:88:b8:70:42:23:6c:f8:0d:03:
         c3:1f:14:20:84:98:1b:2f:dc:99:80:08:85:5a:0e:a0:19:0f:
         87:d3:f5:ba:02:33:53:eb:53:cb:02:b1:a8:a3:ab:84:48:66:
         cc:8b:bb:75:e5:82:c4:a7:46:88:dc:0d:52:b2:01:64:d6:7b:
         bc:e6:e5:8a:2c:22:bf:5d:2a:a5:39:fa:02:f1:de:43:a1:13:
         6e:2c:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:05:05 2026 by rpki-client