Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F5CC48A804D011E994985639C4F9AE02.roa
File:                     F5CC48A804D011E994985639C4F9AE02.roa (raw, json)
Hash identifier:          hfYdn8wwHnjsTS227dj040+/40qDeJ8yzlHUVK3UJCY=
Subject key identifier:   56:A9:1C:49:4D:EE:69:08:EC:E0:AA:FA:BF:FE:F0:4D:BD:EC:EF:6A
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       210E
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F5CC48A804D011E994985639C4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:31:32 +0000
ROA not before:           Wed 30 Sep 2026 16:31:32 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     23724
IP address blocks:        218.30.25.0/24 maxlen: 24
                          218.30.26.0/23 maxlen: 23
                          218.30.26.0/24 maxlen: 24
                          218.30.28.0/23 maxlen: 23
                          218.30.96.0/19 maxlen: 19
                          218.30.99.0/24 maxlen: 24
                          218.30.107.0/24 maxlen: 24
                          218.30.110.0/24 maxlen: 24
                          218.30.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 16:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8462 (0x210e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Sep 30 16:31:32 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3964-c9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:a2:a3:e2:93:54:8f:38:95:0e:90:0a:ce:
                    3a:57:51:a1:66:36:a5:5a:da:dc:25:b9:3b:b2:f6:
                    53:0f:e1:68:ab:b9:79:7d:82:fd:48:41:7b:be:fa:
                    ff:71:c7:15:fd:93:54:d0:07:ea:44:ee:b9:97:06:
                    7e:1a:38:dd:e4:3c:d9:69:ee:a6:96:60:2a:c7:9b:
                    18:a0:81:f2:52:20:bf:d8:ee:9e:79:f7:56:6f:8e:
                    2e:75:51:bf:e6:c2:8f:99:4f:fd:0e:fc:ea:be:32:
                    be:81:56:3d:97:41:fd:4f:07:43:90:86:93:71:82:
                    54:68:bd:27:92:f4:40:72:20:f6:fa:02:31:fc:66:
                    30:68:f3:83:3c:b3:c0:f7:5a:b1:11:bc:72:2b:07:
                    43:98:24:2a:3e:f1:98:e6:77:e3:06:09:cb:71:b1:
                    1e:b9:8a:22:5f:6d:fa:cb:d4:b6:4e:15:53:3e:ca:
                    20:85:e6:b7:14:68:b7:7f:2b:a1:3a:1c:a2:82:60:
                    e9:d7:41:b5:86:9a:f8:de:25:0d:4b:86:7e:4a:bb:
                    fc:32:ff:23:bd:b2:68:c4:b6:61:45:37:5b:e7:ac:
                    70:c2:11:5c:a8:71:3b:5c:26:9d:13:fb:de:cb:91:
                    7c:55:08:31:25:09:49:28:50:06:7c:73:ca:49:af:
                    b8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:1C:49:4D:EE:69:08:EC:E0:AA:FA:BF:FE:F0:4D:BD:EC:EF:6A
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F5CC48A804D011E994985639C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.30.25.0-218.30.29.255
                  218.30.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:4f:06:42:44:7a:5f:a2:19:9e:84:51:cd:62:e2:cc:bb:f1:
         b6:74:18:df:07:c1:29:0a:0d:3a:dc:29:ce:1b:e7:df:38:c7:
         d6:21:d3:46:64:2e:d2:87:03:83:89:96:36:e4:e3:3a:12:42:
         36:15:d5:89:0c:e5:8b:d3:94:c1:69:8d:86:83:0f:ec:98:00:
         61:e8:8a:e0:84:d8:c9:d3:e7:30:a4:fe:89:c6:6f:7d:3f:43:
         4d:b4:90:4c:cd:b1:c6:df:c1:83:95:d7:25:79:06:a5:6b:73:
         e1:ca:76:22:1f:0c:92:fb:d4:25:5d:ab:dc:08:2e:24:f9:2d:
         9b:af:cd:4f:fb:60:89:b9:a5:7d:dc:3c:9b:e5:2f:59:f4:24:
         26:e5:3e:b1:ec:e1:f0:0d:89:9d:94:66:1c:80:97:26:d2:c9:
         4b:f0:dc:e6:26:d1:b5:57:a4:c1:d3:3d:ed:4e:86:9c:6e:29:
         55:cd:f9:90:8e:ac:97:55:30:81:86:0f:20:b2:9c:3e:51:24:
         4e:50:18:6c:f6:46:f1:a4:3d:7b:62:7d:19:5f:10:5a:95:e3:
         88:34:84:7f:ae:0d:69:65:40:95:12:3f:be:4f:fc:0f:07:fe:
         8f:bd:3c:1f:ed:7a:ff:0a:ba:ea:13:90:04:e9:7f:30:9d:8d:
         af:03:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:31 2026 by rpki-client