Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa
File:                     B228FE46257C11E79EE15E3CC4F9AE02.roa (raw, json)
Hash identifier:          fMFxn5K9Xjz0zgCIPC7l2FH9HWdW5zcXVLyznJKmaQc=
Subject key identifier:   FF:67:36:10:53:54:FC:5A:69:8E:85:BF:7B:34:DF:D1:93:C5:91:F7
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       203F
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:12:39 +0000
ROA not before:           Sat 30 Aug 2025 16:35:32 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     17896
IP address blocks:        123.172.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8255 (0x203f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Aug 30 16:35:32 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48fa7-85a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:29:25:ba:fe:f1:05:22:1b:51:c1:0e:82:bb:
                    7e:30:c0:da:28:aa:47:e1:ac:ff:d6:6f:4f:ec:5d:
                    10:f5:bb:f4:e9:43:d0:76:ab:db:53:18:d7:ae:b9:
                    5c:78:f3:d7:b2:bb:0e:06:6e:18:61:d7:25:9b:dc:
                    94:4a:4c:21:68:e4:69:1f:7e:7b:e0:d1:0e:cf:96:
                    39:a7:83:36:ad:fe:c3:ce:7a:ec:85:2e:86:d6:b0:
                    e8:e9:6d:c8:50:ec:4b:01:f5:63:a2:15:4f:02:14:
                    9a:4f:a4:2c:b7:8c:4e:0f:82:10:64:33:e9:7a:b5:
                    41:35:55:70:b4:a0:53:90:c6:8d:10:9f:a1:27:8c:
                    1b:d2:5b:f5:7b:18:97:c2:06:21:01:7a:24:28:64:
                    4d:a6:d1:13:d0:51:e9:a7:bd:0b:28:34:46:4b:35:
                    b5:4d:8e:4a:2a:ea:2b:3a:83:4d:61:2b:cf:6c:5e:
                    3f:b9:13:b9:98:fd:26:fa:d6:58:97:27:e3:a1:7a:
                    77:8c:67:f0:fb:d3:4f:69:05:be:d7:47:24:98:4c:
                    ce:e0:5d:3f:7e:ad:c9:5f:50:6b:a2:38:bb:d4:26:
                    4c:bd:66:0d:6a:94:bd:1b:bb:82:46:d7:8c:07:2e:
                    69:8a:f0:b5:df:9c:ec:a8:4b:80:04:c2:b2:07:56:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:67:36:10:53:54:FC:5A:69:8E:85:BF:7B:34:DF:D1:93:C5:91:F7
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B228FE46257C11E79EE15E3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.172.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:29:d8:19:24:a8:e1:6c:aa:bb:de:95:7b:fd:af:cf:a0:69:
         bf:b5:a1:b2:30:79:8c:12:a7:19:68:6d:52:a3:a7:75:7a:8b:
         1a:84:44:75:c9:30:fa:e7:df:32:1d:b5:9e:8c:e4:0d:59:79:
         1b:b2:f9:57:31:b1:b1:62:67:e2:8e:94:07:1a:18:d3:7f:27:
         de:54:80:c1:43:27:34:ac:03:56:b0:83:1a:27:15:c1:11:f5:
         ea:ee:86:b4:26:b9:ce:c1:cf:ee:a6:c0:b5:fa:db:8a:7f:30:
         0b:20:e9:ac:fa:36:0f:81:d2:89:e8:2d:13:35:c1:97:b7:52:
         bd:5b:18:e0:1e:10:f9:d1:00:0b:d5:f8:19:b6:6a:f8:90:c2:
         8f:9d:d6:53:ea:bc:98:51:58:c0:18:62:94:7f:a0:6a:9b:cb:
         db:8b:c5:54:e4:61:05:0b:77:d0:4f:39:ae:32:17:92:e4:f3:
         dd:94:6f:ff:22:b3:06:c2:88:fd:c0:ca:8e:a6:87:0d:be:f2:
         51:c2:1f:5b:5c:01:b4:0b:95:dc:10:bf:cb:17:3f:c6:5b:24:
         d2:3a:ea:c5:fc:4e:4a:31:d0:2a:f7:0f:1d:22:fd:86:79:ba:
         35:4d:68:de:fb:f6:5d:41:1f:35:7f:90:dc:6e:21:e4:d6:3a:
         3c:56:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:19 2026 by rpki-client