Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
File:                     6BD285BA971D11EE9333CE70C4F9AE02.roa (raw, json)
Hash identifier:          4dbU41MNmkwz3EcjuNRfOXZ4KXRXv2aoIQDFy9QGKOc=
Subject key identifier:   07:9E:83:E0:DD:C7:13:C6:C6:4A:0F:4D:CA:BE:1C:17:2C:6D:E7:45
Certificate issuer:       /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial:       022C
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
Signing time:             Sat 03 Oct 2026 03:52:39 +0000
ROA not before:           Sat 03 Oct 2026 03:52:39 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     151374
IP address blocks:        121.50.48.0/21 maxlen: 24
                          2400:ac00::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl
                          rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 03:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E42D, serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Validity
            Not Before: Oct  3 03:52:39 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac07c06-84b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:8e:cc:f9:9f:31:5d:1d:6b:98:ce:b0:52:
                    a2:da:f9:22:3e:a4:4f:43:2f:dc:33:ac:b2:e6:aa:
                    6a:58:97:0f:d2:54:fe:9d:03:15:02:7d:8c:4e:99:
                    ea:35:96:58:05:c8:6f:1b:27:be:9f:8f:04:7e:3b:
                    3a:f4:60:74:e5:42:02:80:b8:e0:7b:1a:3d:da:c8:
                    84:c9:95:c9:01:54:99:34:e0:77:5d:58:d0:ac:22:
                    26:6e:ca:ee:15:16:9b:6e:9d:ec:ad:2d:17:7a:48:
                    aa:07:b3:fc:0e:44:55:f5:56:34:1b:34:76:eb:26:
                    8d:d0:57:4d:19:f6:bc:16:f1:17:ce:ee:d6:e2:3d:
                    5d:6e:fb:57:cc:ae:73:05:44:68:06:51:ac:17:03:
                    ee:b0:f0:bd:4e:0e:8b:8f:ea:45:18:3b:42:a2:d8:
                    7c:89:e0:b4:4a:b2:87:8a:90:31:48:bc:5e:d0:a4:
                    36:23:5b:63:08:34:70:92:e1:b7:2d:a2:68:9d:0a:
                    c7:2e:c1:27:8f:d7:31:2e:cc:ab:31:66:16:85:be:
                    06:66:bd:ab:c8:6f:f0:7f:79:2f:f8:97:82:4a:ad:
                    68:ff:5f:04:51:96:c0:d7:71:bc:94:e2:c4:70:6a:
                    f0:7f:86:c4:2a:4e:ca:4e:8f:46:03:ab:79:e9:75:
                    b8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:83:E0:DD:C7:13:C6:C6:4A:0F:4D:CA:BE:1C:17:2C:6D:E7:45
            X509v3 Authority Key Identifier:
                keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.48.0/21
                IPv6:
                  2400:ac00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:e2:e1:41:6e:1f:ef:d5:76:09:3d:7f:37:60:80:d1:45:
         41:a9:93:4d:24:8f:0a:a8:43:4d:0c:89:2e:76:dd:f0:a3:a8:
         93:06:11:0f:18:50:31:fb:f7:d5:73:1d:b4:e0:4d:2e:2a:e6:
         b3:dd:6f:c0:bd:fb:b9:f5:83:43:ab:ac:58:f9:12:17:19:47:
         67:12:03:1a:79:e4:a9:f9:37:e8:6f:a7:55:eb:3c:c5:fe:d1:
         3a:51:9a:a3:9a:3e:f1:b3:0b:7c:e5:e5:1e:f4:cf:90:5f:e2:
         50:2c:79:d1:ec:6d:1b:a9:24:b9:42:60:b8:59:27:48:2b:8e:
         61:cf:2a:b5:b8:e9:b7:84:ed:7c:6d:85:89:a5:db:9e:d1:be:
         fa:b5:34:e2:5b:26:e6:3a:df:39:c6:d4:8a:1e:50:90:c5:1d:
         db:8e:aa:8f:84:f8:b9:cf:60:88:a5:33:0c:eb:0c:49:29:d3:
         9b:eb:40:d4:61:b7:09:03:ca:27:ea:d8:10:d8:91:03:a8:ff:
         83:d3:95:19:71:94:31:97:37:db:fc:e2:5a:b5:6e:db:d8:a5:
         c8:e8:2c:e8:8e:85:2a:48:57:3e:98:10:c7:ab:47:02:ab:9e:
         48:a3:95:97:d6:b5:a7:ee:04:37:ce:3f:91:da:dc:45:f5:0d:
         2d:c8:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:17:16 2026 by rpki-client