Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
File:                     F59F290A459B11F0AE80E433C4F9AE02.roa (raw, json)
Hash identifier:          x4hqkMKW3DDXFgkrqMhlRpe96z/X9WQNlz9uH+lk7+8=
Subject key identifier:   28:E4:45:DD:21:C1:A3:01:75:26:66:A3:E5:86:10:68:6F:52:3E:B4
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2036
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:12:31 +0000
ROA not before:           Sat 30 Aug 2025 16:35:23 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141006
IP address blocks:        1.183.208.0/20 maxlen: 24
                          240e:918:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8246 (0x2036)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Aug 30 16:35:23 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48f9f-7273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:6e:1c:9f:ac:ba:c6:78:78:b1:b7:06:d4:
                    64:17:ee:13:19:79:7a:39:1d:bf:1b:c4:b8:fb:f5:
                    c0:9e:35:84:62:b4:63:c0:a5:2e:d6:22:bd:75:e8:
                    23:64:d4:aa:b0:f9:0d:76:e3:9d:9d:51:da:7b:14:
                    ce:ef:db:bf:25:55:14:a9:cb:70:91:c2:a8:bf:3c:
                    f9:43:5b:d9:57:b4:37:f8:6b:e2:c0:fe:57:d0:64:
                    44:51:6a:ec:98:be:cd:21:dd:49:a7:46:67:23:eb:
                    20:0b:28:62:51:e5:f4:5d:7d:81:28:f8:7e:90:27:
                    8b:70:3a:f9:1b:43:4f:5c:7b:be:d7:03:08:0f:64:
                    b4:e5:3e:43:36:51:90:1b:ec:4f:6d:58:fd:f8:39:
                    60:6c:b0:ad:6f:cb:d2:4c:00:92:5b:1b:c8:f7:7a:
                    ff:78:01:13:45:ca:43:17:82:71:55:85:09:6c:e8:
                    d7:67:38:00:60:db:be:72:30:ee:03:b8:91:2f:63:
                    9e:2d:92:32:ed:1f:36:16:66:a3:e7:44:00:8e:51:
                    7e:8a:f7:9d:bc:66:0b:6f:7b:35:e3:5b:1d:f5:90:
                    90:39:7c:c3:49:7f:9c:2d:8e:86:3a:ca:08:ac:98:
                    01:73:f2:c5:d7:4a:83:15:73:04:ce:23:67:8f:0a:
                    33:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:45:DD:21:C1:A3:01:75:26:66:A3:E5:86:10:68:6F:52:3E:B4
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.183.208.0/20
                IPv6:
                  240e:918:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:be:cc:81:c0:d7:58:56:b5:7e:2c:91:9d:4b:87:0f:36:
         61:59:d9:aa:90:64:bb:18:f8:b6:99:d9:d7:87:dc:50:d8:9a:
         ac:2e:07:95:66:cf:2c:db:e7:54:b9:ea:df:e0:90:09:f8:76:
         ea:b7:cf:0f:b6:2d:ba:17:8d:88:61:12:c1:0e:08:bf:df:06:
         5b:85:f2:96:ba:e0:2d:29:27:7b:b1:d4:5a:97:84:ff:77:79:
         f3:ab:59:4f:fc:22:dd:1f:5e:65:48:98:47:a6:3b:4a:b4:93:
         95:05:59:1c:af:bc:64:24:0c:0e:e0:22:10:2b:f5:0e:0e:2e:
         38:d9:4f:12:57:48:a2:8d:a4:a8:20:0b:eb:9e:9b:a1:1e:d1:
         c3:a9:34:41:35:c0:e3:36:29:f9:bd:63:b5:8a:00:ee:48:69:
         4c:82:46:bd:43:92:40:ed:92:5e:75:8b:3d:98:42:e8:e9:e5:
         d6:6d:66:59:50:cc:97:f0:62:d1:8e:dd:19:4d:14:4d:a1:47:
         bc:2f:2a:e2:31:7a:1f:ad:53:b8:30:20:fc:bd:65:42:e1:17:
         77:f5:5d:0e:ca:7d:8e:4d:a9:88:1c:78:fc:81:6a:b2:0b:82:
         f4:5f:50:cf:ae:cb:f0:04:f0:cc:8b:28:9a:80:96:a5:63:a6:
         6e:9a:e6:27
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgICIDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjUwODMwMTYzNTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGY5Zi03MjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthpuHJ+susZ4eLG3BtRkF+4TGXl6OR2/G8S4+/XAnjWEYrRjwKUu1iK9degj
ZNSqsPkNduOdnVHaexTO79u/JVUUqctwkcKovzz5Q1vZV7Q3+GviwP5X0GREUWrs
mL7NId1Jp0ZnI+sgCyhiUeX0XX2BKPh+kCeLcDr5G0NPXHu+1wMID2S05T5DNlGQ
G+xPbVj9+DlgbLCtb8vSTACSWxvI93r/eAETRcpDF4JxVYUJbOjXZzgAYNu+cjDu
A7iRL2OeLZIy7R82Fmaj50QAjlF+ivedvGYLb3s141sd9ZCQOXzDSX+cLY6GOsoI
rJgBc/LF10qDFXMEziNnjwoz0QIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFCjkRd0h
waMBdSZmo+WGEGhvUj60MB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvRjU5RjI5MEE0
NTlCMTFGMEFFODBFNDMzQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM
BAIAATAGAwQEAbfQMA4EAgACMAgDBgAkDgkYoDANBgkqhkiG9w0BAQsFAAOCAQEA
ZCq+zIHA11hWtX4skZ1Lhw82YVnZqpBkuxj4tpnZ14fcUNiarC4HlWbPLNvnVLnq
3+CQCfh26rfPD7YtuheNiGESwQ4Iv98GW4XylrrgLSkne7HUWpeE/3d586tZT/wi
3R9eZUiYR6Y7SrSTlQVZHK+8ZCQMDuAiECv1Dg4uONlPEldIoo2kqCAL656boR7R
w6k0QTXA4zYp+b1jtYoA7khpTIJGvUOSQO2SXnWLPZhC6Onl1m1mWVDMl/Bi0Y7d
GU0UTaFHvC8q4jF6H61TuDAg/L1lQuEXd/VdDsp9jk2piBx4/IFqsguC9F9Qz67L
8ATwzIsomoCWpWOmbprmJw==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:47:04 2026 by rpki-client