Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B33C5F9C05FB11EE9D130335C4F9AE02.roa
File:                     B33C5F9C05FB11EE9D130335C4F9AE02.roa (raw, json)
Hash identifier:          jcqPZjfuLcDDdvvoQYWFa17QDeNQ90cb4541BaLM+84=
Subject key identifier:   52:CF:04:B6:2F:E7:B0:70:73:7C:F4:57:4E:AB:62:86:6D:13:F3:5B
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       210D
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B33C5F9C05FB11EE9D130335C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:31:30 +0000
ROA not before:           Wed 30 Sep 2026 16:31:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     23650
IP address blocks:        121.227.30.0/23 maxlen: 23
                          218.30.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8461 (0x210d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:31:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3962-ae66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:86:6d:a6:3e:7d:e5:61:d5:b7:d2:f6:df:
                    c4:9b:d8:e2:e0:48:7a:bf:35:32:90:d4:e4:98:ae:
                    a9:58:dd:2e:a0:56:25:68:57:51:f5:7b:7e:81:64:
                    49:9d:c6:43:df:14:b1:ba:c7:a7:4a:cb:d8:df:fd:
                    9f:1a:43:fe:d3:e1:77:78:94:3a:1f:9d:d3:43:61:
                    c5:63:d7:bf:40:0c:b3:26:d5:6b:a6:3b:5d:ab:3e:
                    37:e4:a3:cc:14:95:56:be:c1:d5:1a:94:84:3b:02:
                    69:23:c2:f1:53:12:d4:2e:00:be:61:ed:e3:dc:73:
                    e2:40:7d:73:83:54:e7:4c:a2:92:c2:88:78:1a:8b:
                    7b:63:c6:ee:98:42:f9:76:51:93:2d:9c:88:bd:0a:
                    80:dc:04:89:f6:a3:d5:9b:ae:dd:c6:9c:86:dd:8c:
                    7b:f9:eb:04:c0:b9:76:09:20:f9:10:59:41:b4:a5:
                    1a:52:b4:99:01:61:fd:1f:50:75:14:04:db:cc:79:
                    1b:89:e4:2f:db:63:e2:58:a6:64:d0:51:20:b2:d1:
                    5e:14:2d:e8:08:90:4e:c0:9e:a7:25:8e:09:cd:46:
                    a0:ab:95:fe:8d:9b:97:ff:f1:79:53:f9:9b:6a:ec:
                    3c:79:3e:48:05:3c:67:00:e7:f6:e2:99:8d:91:d4:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CF:04:B6:2F:E7:B0:70:73:7C:F4:57:4E:AB:62:86:6D:13:F3:5B
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B33C5F9C05FB11EE9D130335C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.227.30.0/23
                  218.30.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:0d:ae:30:59:9f:27:29:60:b1:bb:8c:dd:04:26:a3:4a:
         06:4a:e7:db:2d:e1:24:2d:3b:36:61:16:88:46:a3:a0:49:e1:
         53:fb:cc:79:5d:aa:83:bb:2c:f7:73:5e:fa:14:c7:6b:71:86:
         dc:78:a6:da:52:67:97:5d:74:b7:41:74:4a:c5:0d:16:85:27:
         fa:19:17:c2:e1:6d:97:6a:3b:78:eb:e3:59:af:cb:87:97:8d:
         93:0c:19:c8:89:17:69:20:8d:ec:25:06:60:54:93:1b:ed:ba:
         5d:fa:11:fb:82:99:b2:94:a7:63:0b:5d:6a:7e:3a:f3:98:f0:
         35:27:3b:00:98:ec:d9:97:ad:17:c1:b0:ba:e1:88:6e:b9:06:
         21:2d:57:75:aa:a3:1d:72:6d:0b:9b:a6:51:1f:4d:cc:18:fd:
         49:dd:49:62:25:e2:45:37:a4:4b:18:08:9d:9a:fe:2e:85:7a:
         19:71:3d:85:91:21:06:1b:ec:ea:f4:ac:7b:e1:ac:2a:ab:94:
         08:82:0e:f8:88:77:22:81:5f:51:30:9e:6c:ac:a7:ea:7e:3d:
         7a:01:9f:0c:18:7b:fc:bf:47:f9:ee:6a:17:db:25:8c:e2:b3:
         50:33:7c:d6:d5:16:0c:2a:e0:56:10:31:58:1e:76:b0:77:d1:
         23:3d:ba:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:52:50 2026 by rpki-client