Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A42AF5D0559111F08D8D0584C4F9AE02.roa
File:                     A42AF5D0559111F08D8D0584C4F9AE02.roa (raw, json)
Hash identifier:          t2om7TbFW0IU1AjhuHkOR/Cy3KPIB2YN2mwmgdujesY=
Subject key identifier:   E4:36:D4:B2:EC:6E:07:08:F6:98:B1:03:55:7F:AB:3B:55:DD:EE:40
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2107
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A42AF5D0559111F08D8D0584C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:31:14 +0000
ROA not before:           Wed 30 Sep 2026 16:31:14 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     151058
IP address blocks:        124.225.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8455 (0x2107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:31:14 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3951-2452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:cf:3b:46:88:3e:6f:b0:a3:53:0e:c8:e1:
                    c6:02:ef:1e:97:63:67:7d:8d:ab:1f:7f:da:0a:c9:
                    cb:03:e4:1d:71:2d:b1:25:42:68:1d:d4:88:95:eb:
                    c5:02:7b:4c:1e:23:47:e0:98:3b:df:bf:a6:d2:07:
                    34:fd:71:d8:56:03:7a:72:e9:a3:4f:43:8c:3a:69:
                    7a:20:f0:aa:ce:56:77:f5:6e:7c:27:e3:ac:0d:0a:
                    ee:a4:a8:d1:9e:db:fd:82:04:fa:57:d4:dd:2e:d7:
                    55:4a:c3:08:3e:0e:d1:52:58:ee:66:ff:de:4f:fa:
                    41:3a:0c:16:67:91:9d:1a:0f:cb:1c:62:bf:ed:13:
                    67:cd:f6:ec:08:37:15:26:34:65:db:a5:1e:3c:3c:
                    9d:26:6f:c6:6b:71:eb:3e:58:0d:37:58:72:09:2e:
                    06:a1:50:d1:44:4e:f3:b5:ca:46:60:e4:aa:f6:2b:
                    9a:e3:5d:5c:19:fe:c8:61:b0:84:8f:22:d2:59:2e:
                    ee:e6:02:e2:4b:63:23:4e:83:2f:55:f2:18:39:30:
                    3f:5a:7a:00:6e:fe:5c:be:7c:22:c4:89:92:b8:dd:
                    73:28:89:a9:f1:69:f0:1f:7f:36:dc:58:f4:e6:ef:
                    71:84:9a:41:4d:44:79:1b:7a:ef:e6:c8:ab:cf:60:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:36:D4:B2:EC:6E:07:08:F6:98:B1:03:55:7F:AB:3B:55:DD:EE:40
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/A42AF5D0559111F08D8D0584C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:ab:c2:ac:97:c4:34:95:b0:3c:dc:d2:58:41:c4:9c:cb:dc:
         ff:7e:5d:36:f3:56:37:d7:a1:2b:08:38:bb:2c:ce:7c:61:7b:
         5f:82:e3:b0:46:1b:70:4b:a8:7a:43:41:d7:58:8e:e1:8e:51:
         e4:29:30:63:09:17:63:f3:65:f8:07:86:8b:93:22:b1:8b:55:
         ef:ac:af:27:d6:a9:5e:05:7c:8b:c4:fa:f2:cd:c5:e9:51:9f:
         b4:16:1b:11:20:a5:a7:d8:05:ff:82:ba:48:88:32:92:b2:35:
         17:1c:03:b6:45:28:97:fb:17:03:60:f3:3d:9e:d6:6d:34:68:
         08:a6:56:8f:e0:27:2c:2c:f2:88:42:c5:db:1b:36:6c:b9:a1:
         94:99:44:57:b4:4f:5a:ce:cf:91:22:ce:e7:f5:61:5f:9c:b2:
         0c:86:c1:0f:91:58:d5:a4:08:c8:80:b3:eb:1d:3f:01:46:b1:
         c7:14:1a:e9:39:cb:82:98:e2:bd:86:f5:59:2b:10:63:07:c2:
         77:54:2e:2d:ed:6e:8b:b6:e5:12:c2:c2:98:9d:28:21:18:2a:
         e1:2b:6c:af:c5:59:3c:20:62:52:dc:ca:61:f2:a8:7a:4a:d3:
         c0:d7:51:87:b3:ea:82:9d:df:fd:26:15:ac:08:16:df:a0:09:
         78:17:89:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:59:09 2026 by rpki-client