Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/C3EFE564C2A311EABB1BA61FC4F9AE02.roa
File:                     C3EFE564C2A311EABB1BA61FC4F9AE02.roa (raw, json)
Hash identifier:          7r2FPlLp23MA/urlB42zAXaXgYEHlcRGuJggAb6uOLs=
Subject key identifier:   6F:B1:B3:E2:C1:2C:5F:27:A1:53:FD:B6:67:52:05:97:85:84:8F:BF
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2032
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/C3EFE564C2A311EABB1BA61FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:12:28 +0000
ROA not before:           Sat 30 Aug 2025 16:35:20 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134768
IP address blocks:        125.76.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8242 (0x2032)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Aug 30 16:35:20 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48f9b-86f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:40:58:c2:7a:b0:75:41:e8:51:4f:e4:a3:
                    30:d9:ca:da:6e:69:03:40:84:e6:34:b0:ef:c1:19:
                    89:fe:0d:0d:5f:1e:e5:87:be:94:dd:5a:bc:db:24:
                    0b:35:d6:22:5f:0e:c4:06:82:23:64:bc:fc:85:2f:
                    38:35:9e:42:dc:a1:49:f3:ca:9e:84:76:bd:e3:a7:
                    3c:2d:70:1a:1a:04:f4:27:6b:31:b6:10:f9:48:3d:
                    1e:9b:1c:78:48:94:24:82:25:20:35:8a:aa:2f:95:
                    28:09:f2:06:54:ea:9f:08:84:00:14:58:61:20:df:
                    ae:b0:c0:f1:03:99:af:15:ea:95:2f:0d:39:f6:20:
                    1b:26:ac:e9:ce:aa:73:c5:60:7b:33:a3:3a:b5:5e:
                    84:76:2e:92:18:9b:f9:f0:a9:41:73:37:97:e2:05:
                    3f:c0:bd:07:ed:f2:a5:33:f1:6b:8e:48:f9:d6:ad:
                    07:56:78:7f:3e:87:0b:12:8d:92:43:09:99:54:06:
                    00:e2:fc:ed:1d:9d:7a:bf:d8:f2:f2:1e:ca:1c:c9:
                    2b:d2:e5:a1:6c:8b:14:7c:25:db:2c:17:f8:c6:91:
                    11:6f:84:99:a4:d6:16:1c:78:3e:9e:92:0f:6a:b8:
                    06:73:69:1f:06:23:f6:40:52:aa:6a:37:bc:bf:ab:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B1:B3:E2:C1:2C:5F:27:A1:53:FD:B6:67:52:05:97:85:84:8F:BF
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/C3EFE564C2A311EABB1BA61FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.76.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:ac:26:f5:32:18:2c:b6:d9:e7:5e:06:99:32:9d:5f:1a:
         f5:d3:aa:97:aa:6c:39:f5:a4:3b:c6:38:2a:43:6c:9c:de:72:
         76:f8:0b:ff:70:a5:d9:2b:27:24:3d:33:02:ec:af:e1:2e:af:
         04:38:43:b4:fe:60:23:ff:08:96:31:cb:c6:ab:9c:b4:4c:12:
         ba:f8:32:c4:00:da:71:72:ac:33:a3:64:4c:f3:20:67:79:82:
         10:96:40:17:c9:76:18:1a:17:ce:a0:05:54:f6:1e:fc:f5:e0:
         81:8c:49:69:00:ab:13:36:e2:a8:65:f2:83:33:ea:cd:f8:9c:
         f8:c1:b2:b7:23:33:5a:aa:ad:9d:99:cb:3a:81:ca:70:94:e3:
         ca:03:a7:23:03:78:e0:44:bd:e5:7c:3c:6c:1f:2a:6d:96:2a:
         d6:6f:29:d3:62:1c:ab:90:65:48:10:21:6e:09:ec:6b:68:48:
         29:c8:a8:da:e8:01:07:ca:72:d4:73:39:e1:2a:dd:61:23:78:
         5e:1c:2e:98:24:bd:99:9d:4c:28:86:5c:a3:d7:af:16:f4:29:
         ac:c0:7c:b3:5a:cd:ec:eb:6d:cf:96:89:57:3a:48:3b:1d:98:
         15:32:0d:2e:8c:39:7d:4b:80:9b:f8:2e:36:88:61:0e:c1:fd:
         f6:67:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:47:05 2026 by rpki-client