Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/05F505961AA311F0A475D464C4F9AE02.roa
File:                     05F505961AA311F0A475D464C4F9AE02.roa (raw, json)
Hash identifier:          oQQPkdpT5DDBLU1PWyqZU8Cg3jPky7F7z6ow8HBZGoM=
Subject key identifier:   D2:0E:67:32:05:00:39:4C:A0:9A:F1:EF:58:DB:D7:8C:12:C6:52:F5
Certificate issuer:       /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
Certificate serial:       02C8
Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/05F505961AA311F0A475D464C4F9AE02.roa
Signing time:             Wed 27 May 2026 03:33:18 +0000
ROA not before:           Wed 27 May 2026 03:33:18 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     396986
IP address blocks:        202.52.224.0/21 maxlen: 24
                          202.52.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 03:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 712 (0x2c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
        Validity
            Not Before: May 27 03:33:18 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1665fe-078d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:db:a0:db:c3:4a:58:c2:a3:88:ca:50:9d:75:
                    46:60:76:e1:19:22:b3:c0:46:bb:81:de:25:71:e1:
                    df:dc:9b:cc:aa:11:b2:06:ce:89:18:02:56:19:20:
                    66:7c:83:74:aa:04:88:46:89:13:8c:ca:59:e4:ff:
                    8c:94:c3:80:ce:39:f5:6a:cc:62:94:52:2c:89:f1:
                    1d:29:a4:47:2a:0a:06:ed:08:07:81:f2:11:d9:c5:
                    02:be:55:fd:ad:88:9e:67:06:2c:79:1e:67:df:6d:
                    85:5e:21:9e:f6:8d:74:4d:16:22:11:d4:eb:72:80:
                    23:22:8b:f5:78:28:57:f4:2c:0f:59:22:00:a7:ca:
                    d1:4b:b1:e4:bf:6f:41:f1:54:7d:f5:c2:32:35:89:
                    c7:71:95:74:15:44:15:24:e2:52:e0:26:a9:0d:00:
                    1a:74:38:b5:13:05:6b:1d:9a:42:f2:8a:f5:09:5e:
                    7b:ce:cf:40:ff:3a:e1:5e:70:b1:02:c9:8e:c2:5e:
                    ab:ed:f3:f3:51:9e:df:66:16:3a:d5:e0:8e:d5:68:
                    57:ef:04:29:e7:c8:83:30:ed:50:6d:f7:1e:f3:71:
                    87:33:25:90:99:08:94:ff:44:7b:04:95:f1:bd:2f:
                    c0:41:cc:d4:34:24:da:87:c4:19:86:5f:ce:ea:1e:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0E:67:32:05:00:39:4C:A0:9A:F1:EF:58:DB:D7:8C:12:C6:52:F5
            X509v3 Authority Key Identifier:
                keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/05F505961AA311F0A475D464C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.224.0/21
                  202.52.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:1d:8e:25:7e:c9:7d:42:7c:64:06:28:e6:30:54:3b:e4:
         b7:e1:9b:8a:b2:43:3a:25:4f:98:2b:4e:15:5c:83:bc:df:f1:
         5e:7d:ae:3a:13:40:70:fd:ed:c5:f2:89:00:7a:74:78:bb:d0:
         00:f4:db:92:45:41:cb:fc:56:48:f1:2e:a5:f4:5b:af:08:7c:
         6d:12:37:d0:43:34:60:84:9b:9a:0f:f8:53:a1:9a:98:a4:3a:
         e2:55:17:a6:9c:27:dd:3c:cf:c1:2f:8d:7a:2c:1d:31:20:3a:
         d7:ed:d8:3f:d2:f7:5c:6a:eb:8a:bd:d3:7a:e0:24:c3:40:cf:
         bd:42:b1:9b:02:f1:ae:d1:a6:c9:a8:27:55:40:5d:f0:f3:75:
         b9:e0:2b:a3:3c:8d:23:6d:73:ca:9e:f9:33:c3:30:54:9f:2c:
         be:08:ab:74:87:d3:dc:4b:7e:d9:de:2a:41:09:b0:19:6a:fa:
         42:dc:1d:26:0d:7a:8f:c0:95:6c:90:96:63:ea:5b:91:1d:b1:
         00:89:a8:93:08:d4:96:c9:5f:78:bc:2a:7b:2b:ca:47:23:be:
         9a:f2:41:fb:17:14:46:f9:c9:13:de:b2:e2:bc:63:f9:53:ee:
         ea:92:ce:49:e0:44:aa:5e:ac:5e:16:b0:ff:f7:47:f7:c5:b7:
         0a:26:24:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 18:03:57 2026 by rpki-client