Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa
File:                     5233C98A04D211E9BA47303FC4F9AE02.roa (raw, json)
Hash identifier:          Nye5vLEMMGjbqvbhc4e8i+CnY6mKuS5uAy5w+t/OV0s=
Subject key identifier:   26:A2:3E:4E:B6:A4:68:1C:47:E4:0C:9C:1B:B0:88:4D:B2:EC:5F:0D
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2044
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:12:43 +0000
ROA not before:           Sat 30 Aug 2025 16:35:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4808
IP address blocks:        218.30.223.0/24 maxlen: 24
                          218.30.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8260 (0x2044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Aug 30 16:35:38 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48fab-65d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:f4:ef:d7:44:8e:97:9a:05:09:6e:e2:09:
                    48:6d:b4:a1:2c:f7:0a:dd:d5:42:07:c6:05:18:b9:
                    2b:43:64:52:da:25:bd:cc:a9:2e:ef:1b:fc:6f:2b:
                    51:50:4a:d8:db:eb:a2:67:11:83:74:3b:58:9e:18:
                    42:75:c1:7e:19:be:22:32:bc:4c:7b:e4:8d:d7:4c:
                    6a:a2:87:23:d7:4f:5b:4c:2c:da:c6:4f:ac:9d:85:
                    1f:e9:11:b3:e9:98:3a:ef:61:04:53:e9:4d:dd:70:
                    8e:17:7a:b7:fa:e7:4a:03:2a:2b:5c:48:60:10:0a:
                    5c:34:d5:ad:8b:33:d4:18:16:7f:d1:45:a3:1c:3e:
                    53:a6:00:97:6d:d7:1d:10:e0:48:10:4e:f3:7c:7e:
                    f5:63:83:20:64:cb:87:a5:44:48:bf:42:dd:76:13:
                    45:4f:8a:ca:b3:24:33:68:6a:8f:26:81:ae:f6:d6:
                    67:53:7e:6c:c4:82:18:48:88:ff:e9:9e:79:d6:d3:
                    18:fd:01:a9:d2:ba:c9:68:d9:74:ef:7c:db:6c:d1:
                    ee:95:e3:a5:dd:3c:9e:4b:22:b1:9e:23:f4:97:1d:
                    6b:17:83:d8:33:69:6b:7b:07:39:0e:f9:15:33:4f:
                    cc:33:16:f8:4e:1d:bc:11:2b:81:46:5e:5b:bd:c1:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A2:3E:4E:B6:A4:68:1C:47:E4:0C:9C:1B:B0:88:4D:B2:EC:5F:0D
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5233C98A04D211E9BA47303FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.30.223.0/24
                  218.30.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ef:33:41:79:0b:95:f6:a8:46:01:f7:6c:9b:ec:15:f1:ea:
         ae:ed:ed:26:e3:21:05:74:88:8f:61:e4:55:fb:da:e1:be:90:
         48:1c:da:66:5a:0d:f6:1a:77:51:89:30:ca:58:ea:dc:e9:e5:
         d4:33:ad:67:dc:23:c5:91:c5:3e:fe:d6:38:88:51:ef:a3:55:
         05:25:1f:9e:5a:3f:4c:80:df:b0:fe:fa:d3:ab:81:4a:e9:4c:
         f6:47:f9:25:5c:ea:15:69:d6:08:77:54:91:5a:93:0a:d3:a5:
         18:40:49:f3:eb:12:3f:c0:c3:fd:d8:28:78:6a:93:66:9c:4e:
         b9:e5:6c:48:8a:46:2f:1a:d8:37:15:99:51:a9:89:1f:5a:78:
         79:04:d9:30:2a:01:ec:22:a5:d7:33:d8:06:85:26:15:60:17:
         84:58:55:83:c1:37:fd:5f:6e:f7:47:fb:f4:fd:f0:3d:7c:47:
         ad:4c:4b:f1:67:3e:ed:58:2d:6d:f2:7f:88:ab:16:7a:5d:cc:
         4b:db:fe:ec:18:6d:b3:21:6a:cc:f2:d5:3c:91:0a:d4:f5:bf:
         30:ee:9b:c0:bf:c9:f7:c8:d5:89:17:d7:80:64:ce:d7:27:7b:
         75:e9:1a:fc:87:fa:7d:25:70:c2:6a:68:c4:d4:e6:10:e1:52:
         94:09:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:20 2026 by rpki-client