Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
File:                     F59F290A459B11F0AE80E433C4F9AE02.roa (raw, json)
Hash identifier:          1KpOURnNNwAiSK6tNrV45EK3uPka59QwNGqpAU49tiU=
Subject key identifier:   11:DA:F0:D5:63:08:97:F4:0C:FA:34:4C:58:2B:BE:AD:05:0C:65:CB
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2103
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:31:04 +0000
ROA not before:           Wed 30 Sep 2026 16:31:04 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     141006
IP address blocks:        1.183.208.0/20 maxlen: 24
                          240e:918:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8451 (0x2103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:31:04 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3948-8d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:2b:4b:80:da:16:d9:69:35:2c:2e:29:fc:
                    c3:eb:4c:b1:a4:5a:92:2f:29:a4:53:8c:96:5f:59:
                    bd:f2:2f:3f:05:1f:ad:99:35:8a:80:28:0d:b1:1c:
                    9d:75:64:d1:6a:b4:bc:3d:a5:10:4e:5a:57:82:eb:
                    24:9a:ea:cc:50:bb:92:f6:a5:29:24:70:8b:12:40:
                    26:69:e9:d1:e3:5b:15:14:e9:3e:a1:13:6a:45:8d:
                    30:2f:86:b5:04:8e:18:bc:ac:7f:71:7e:44:d4:94:
                    90:4f:2f:c7:8c:71:ef:84:7b:8d:0c:94:bb:a3:4b:
                    69:7e:69:8b:7e:5e:1b:e3:f4:c0:c1:6e:35:1c:58:
                    d5:b4:0c:be:8b:a4:b0:c9:07:16:76:c9:04:1f:57:
                    82:52:59:16:95:17:d4:95:2f:a2:7e:7e:18:76:99:
                    0d:95:8e:10:87:a3:4e:ad:72:8f:0e:db:5b:d4:ec:
                    91:d9:f8:af:35:19:41:6f:45:74:59:99:8d:23:7f:
                    d2:00:96:e3:c3:a3:0c:63:32:de:10:75:c3:47:55:
                    0a:84:e4:c9:63:fa:32:19:39:34:98:dc:ee:8c:7f:
                    92:e1:7f:0b:1c:31:72:57:84:8d:9b:93:18:79:64:
                    1d:68:ee:dd:fa:63:38:e0:94:e5:b2:be:9f:27:3c:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DA:F0:D5:63:08:97:F4:0C:FA:34:4C:58:2B:BE:AD:05:0C:65:CB
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F59F290A459B11F0AE80E433C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.183.208.0/20
                IPv6:
                  240e:918:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:47:f5:f2:b7:8e:8d:40:c3:cc:48:a9:3d:f1:85:9e:6d:10:
         be:eb:16:89:73:74:3f:3b:bc:aa:99:51:a8:22:20:84:36:4c:
         bc:b6:24:48:7c:e6:94:ea:f8:8d:13:0f:27:d9:42:38:94:53:
         44:07:35:57:57:b4:d4:27:ef:ed:44:cc:53:53:9b:57:3f:32:
         82:79:9c:3b:3e:9f:9a:c1:b6:3f:99:c8:f6:32:70:f3:45:83:
         5a:99:52:e7:8f:a3:6c:57:69:e6:f4:0a:28:af:7b:cf:ce:32:
         d8:f3:14:bb:31:11:76:53:bc:fa:cb:de:b5:74:b0:0b:34:f4:
         e7:44:70:a2:08:9e:af:2a:3c:bc:18:d0:0a:29:a8:f9:c3:00:
         c6:4c:e5:42:fd:78:10:3c:4a:4c:55:ff:c4:cc:c0:f9:4a:4c:
         db:94:75:03:d4:e9:b9:3e:c5:e2:b4:6a:37:10:6e:59:cd:9b:
         27:6b:d5:49:fb:a0:0d:ef:42:51:7c:8b:50:77:64:a9:11:5f:
         a0:a2:f9:48:8f:ef:44:39:5a:3a:4d:3f:6b:03:95:8b:15:81:
         4b:77:bc:74:30:ce:8a:44:0e:aa:ee:24:0d:0b:5e:1a:52:74:
         55:5f:4b:86:15:e0:68:50:f3:2a:8d:3f:58:89:9a:d9:ad:55:
         1b:fb:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:59:11 2026 by rpki-client