Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/5E7A4A089F6F11F19006B6A53611F970.roa
File:                     5E7A4A089F6F11F19006B6A53611F970.roa (raw, json)
Hash identifier:          RR4Z43YEqtikny0ibFoZA18O+00k/UEJB2Mbi1vrv0c=
Subject key identifier:   00:E3:07:AC:18:7F:58:12:A7:38:23:C4:91:A7:DB:6D:A8:54:FE:5C
Certificate issuer:       /CN=A915974C/serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
Certificate serial:       62
Authority key identifier: E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/5E7A4A089F6F11F19006B6A53611F970.roa
Signing time:             Mon 24 Aug 2026 03:53:30 +0000
ROA not before:           Mon 24 Aug 2026 03:53:30 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        43.225.136.0/22 maxlen: 24
                          45.127.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl
                          rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 03:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915974C, serialNumber=E9620850DB5585B1299315047F5A1D5FBD8AA630
        Validity
            Not Before: Aug 24 03:53:30 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a8bc03a-4ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c9:9c:d9:cd:97:1d:c3:41:da:88:5c:a8:8c:
                    82:a0:83:09:75:99:44:06:8b:66:36:aa:46:12:a6:
                    a6:ec:fb:ec:18:29:a1:2c:14:a3:85:86:60:60:85:
                    50:63:1d:59:2a:89:be:8f:81:58:38:68:93:47:53:
                    ed:da:7d:69:42:02:f8:c5:9d:ff:a4:bb:e1:42:a9:
                    79:fe:72:43:aa:fb:1e:2b:54:77:a2:15:0f:6a:1e:
                    9c:30:46:95:19:3e:c2:c2:7e:14:13:c9:06:69:08:
                    32:e2:26:a1:43:e2:ae:58:58:36:37:5c:0d:bb:89:
                    29:87:fc:e9:db:be:8f:e2:68:cf:81:d7:19:82:f6:
                    d7:a2:59:4c:3c:d5:46:c4:8b:87:d2:80:e6:3f:8c:
                    30:3d:73:51:fb:db:fb:a9:bb:8a:d9:09:42:67:62:
                    15:91:af:f9:5d:c5:94:ba:7b:73:cc:d2:f4:30:51:
                    a2:fe:07:f3:37:64:80:02:60:ea:c1:8b:7c:98:67:
                    ac:f0:23:87:c6:06:f1:dc:45:75:8f:9f:8d:09:4e:
                    b8:4a:17:5a:15:a0:b5:ad:a9:64:15:71:70:a8:7b:
                    c0:db:d5:b9:57:cd:b0:3f:1b:06:69:80:3d:b3:5d:
                    0b:6d:b4:60:e5:89:3e:e9:08:8b:9d:29:5c:06:d1:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E3:07:AC:18:7F:58:12:A7:38:23:C4:91:A7:DB:6D:A8:54:FE:5C
            X509v3 Authority Key Identifier:
                keyid:E9:62:08:50:DB:55:85:B1:29:93:15:04:7F:5A:1D:5F:BD:8A:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/6WIIUNtVhbEpkxUEf1odX72KpjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WIIUNtVhbEpkxUEf1odX72KpjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915974C/F897AEDC24C711F1B2F8909EA6833773/5E7A4A089F6F11F19006B6A53611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.136.0/22
                  45.127.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:de:b4:9a:c0:8a:31:1c:67:de:b7:c2:38:fd:75:a1:7e:92:
         55:45:0a:96:d6:e8:42:8b:58:02:64:f5:a0:67:3a:ce:8c:e4:
         ac:22:8b:75:02:03:fa:82:bc:8f:e7:84:ec:d5:68:80:d6:80:
         86:cc:15:00:87:8b:f2:bd:53:39:25:ac:2d:43:28:0e:5d:2f:
         a1:5c:96:39:b2:01:49:ee:97:85:8e:4d:23:d4:af:9f:04:56:
         3d:3d:fc:c0:0f:c6:b9:2b:11:6c:d9:32:81:3a:e7:04:f7:35:
         d3:32:af:60:75:61:dc:dc:20:c0:28:29:84:c3:3d:94:a5:ce:
         65:e1:1a:dc:12:57:11:f5:78:0e:d0:9d:7b:46:6b:2c:17:01:
         63:e6:58:b8:ec:53:82:61:d0:0e:66:49:7b:9e:91:87:55:34:
         0f:06:15:b5:7d:c7:d9:10:aa:67:c6:e6:71:d9:2d:b9:47:1a:
         b5:bc:3a:fa:c7:92:3a:eb:23:75:b1:bb:73:e0:74:3d:d1:de:
         a8:36:ea:38:aa:2a:0b:d0:5f:b3:f3:d8:e1:6f:25:aa:13:51:
         a4:df:92:bc:a8:03:9e:c5:96:28:65:8d:05:1b:48:89:40:b2:
         2b:e5:67:9e:9d:2c:fe:b6:bd:19:2f:2c:16:2d:f6:be:b3:90:
         33:44:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:55:34 2026 by rpki-client