Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa
File:                     B228FE46257C11E79EE15E3CC4F9AE02.roa (raw, json)
Hash identifier:          At2+K3WQ1ElJA6cxgtuMOTjSAFaeuafZm362lRd0hqc=
Subject key identifier:   0B:5A:6A:1F:BD:8A:62:D1:12:8C:67:C3:77:85:C7:65:89:F0:A8:55
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       210C
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:31:27 +0000
ROA not before:           Wed 30 Sep 2026 16:31:27 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     17896
IP address blocks:        123.172.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8460 (0x210c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:31:27 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd395f-62b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:c8:63:e2:2b:d0:40:34:88:20:ce:cd:39:
                    3e:98:16:df:7d:71:a7:d1:11:8d:69:f6:c8:3f:85:
                    b5:b0:c9:1b:f8:bd:fa:d5:93:e2:c8:56:67:03:0d:
                    fc:c2:0c:2b:53:82:e6:26:ac:a1:23:3d:f9:64:ba:
                    9d:fd:fc:57:07:cb:f6:3f:50:1e:b8:c8:42:19:a9:
                    f6:6d:eb:c4:4a:e5:17:e5:25:99:22:4f:c7:c2:7e:
                    fc:30:33:f9:ad:c4:36:62:83:15:92:13:7b:68:b2:
                    a4:ab:bc:69:71:1f:22:0d:79:88:15:d6:44:86:cc:
                    1c:6e:4c:7a:7e:9d:63:01:ae:dd:fd:13:1e:49:3c:
                    ba:43:9b:96:9b:ab:68:79:c4:f7:31:d1:73:3b:a1:
                    89:8f:0c:1d:68:31:43:a8:41:8d:70:c4:f2:fb:36:
                    37:3b:47:0a:67:16:99:2c:03:c6:03:1f:3b:87:eb:
                    8d:41:8a:d0:ea:01:b2:0d:f7:20:24:c7:08:2d:ee:
                    81:d7:77:ca:55:aa:e8:b2:b4:ae:8f:b6:67:da:44:
                    ac:ec:f3:e1:ab:9e:72:4d:86:90:8d:f5:db:e6:e5:
                    a8:51:2f:be:c9:ed:e0:53:ca:d0:a2:5c:61:ae:0b:
                    5b:12:b8:7f:d3:1d:45:de:ba:99:68:7d:18:b2:57:
                    17:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:6A:1F:BD:8A:62:D1:12:8C:67:C3:77:85:C7:65:89:F0:A8:55
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.172.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:21:8e:da:e3:47:8c:62:00:75:70:28:6a:01:e6:84:3e:54:
         7e:b6:62:d2:be:84:ef:87:a4:2b:7c:d7:d0:90:92:b4:21:04:
         90:20:b8:9f:24:b2:ba:70:d2:e8:82:aa:7d:7b:36:e7:8e:ef:
         c4:59:26:61:11:19:f0:86:58:04:0e:83:33:49:6f:6c:63:95:
         5d:18:c1:4f:fa:6c:41:73:08:96:26:1a:3b:3c:b1:a4:10:c4:
         9b:07:f3:ca:d8:24:fb:05:88:3d:6b:f6:db:b3:35:8d:fa:e4:
         d7:e2:d5:be:c6:d4:af:24:14:f4:5d:c8:ad:a0:1a:45:68:d4:
         f7:40:ed:00:69:84:2f:a6:fc:78:85:14:8d:fd:7b:1b:bb:e4:
         df:bb:3d:dc:c9:60:14:60:c3:bc:de:9a:b4:77:8e:8b:92:64:
         66:a3:21:24:71:14:44:8d:b8:ea:41:2f:13:06:8e:d2:2d:35:
         ba:c5:e7:41:5f:3a:1b:df:8b:40:44:ce:22:d9:5e:03:57:51:
         e1:55:3a:0d:c5:cf:47:7a:20:74:81:ac:a7:6f:f5:84:63:cb:
         e5:63:4e:7d:c1:e4:44:c3:bf:99:a4:8d:78:2c:98:49:63:99:
         b0:31:79:de:cd:20:e3:bb:f6:af:23:b4:3d:4e:ef:58:a9:15:
         e3:35:91:81
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTI3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkMzk1Zi02MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDrIY+Ir0EA0iCDOzTk+mBbffXGn0RGNafbIP4W1sMkb+L361ZPiyFZnAw38
wgwrU4LmJqyhIz35ZLqd/fxXB8v2P1AeuMhCGan2bevESuUX5SWZIk/Hwn78MDP5
rcQ2YoMVkhN7aLKkq7xpcR8iDXmIFdZEhswcbkx6fp1jAa7d/RMeSTy6Q5uWm6to
ecT3MdFzO6GJjwwdaDFDqEGNcMTy+zY3O0cKZxaZLAPGAx87h+uNQYrQ6gGyDfcg
JMcILe6B13fKVarosrSuj7Zn2kSs7PPhq55yTYaQjfXb5uWoUS++ye3gU8rQolxh
rgtbErh/0x1F3rqZaH0YslcXVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAtaah+9
imLREoxnw3eFx2WJ8KhVMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvQjIyOEZFNDYy
NTdDMTFFNzlFRTE1RTNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQEe6wAMA0GCSqGSIb3DQEBCwUAA4IBAQBFIY7a40eMYgB1cChqAeaE
PlR+tmLSvoTvh6QrfNfQkJK0IQSQILifJLK6cNLogqp9ezbnju/EWSZhERnwhlgE
DoMzSW9sY5VdGMFP+mxBcwiWJho7PLGkEMSbB/PK2CT7BYg9a/bbszWN+uTX4tW+
xtSvJBT0XcitoBpFaNT3QO0AaYQvpvx4hRSN/Xsbu+Tfuz3cyWAUYMO83pq0d46L
kmRmoyEkcRREjbjqQS8TBo7SLTW6xedBXzob34tARM4i2V4DV1HhVToNxc9HeiB0
gaynb/WEY8vlY059weREw7+ZpI14LJhJY5mwMXnezSDju/avI7Q9Tu9YqRXjNZGB
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:04:25 2026 by rpki-client