Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa
File:                     B301869A276011EC9237AB73C4F9AE02.roa (raw, json)
Hash identifier:          ODwW8b3enzSBRNs7U5lS8coKe8KsO+RsVNTsf7ZHEiE=
Subject key identifier:   61:F0:AE:87:5B:A7:C2:A2:5C:42:A1:87:C9:13:FE:E9:B9:E2:7A:EF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E2C4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:39:55 +0000
ROA not before:           Sun 31 May 2026 16:39:55 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133977
IP address blocks:        123.253.12.0/24 maxlen: 24
                          123.253.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58052 (0xe2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:39:55 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c645b-f63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:03:f9:5f:ae:e7:5c:4d:bc:54:d9:22:15:
                    65:60:a2:c4:f6:3a:1d:96:52:6b:50:a5:a1:db:41:
                    95:dd:59:37:15:9b:f8:93:d2:7c:e0:0f:e8:6c:05:
                    6d:82:22:a7:d9:63:16:c7:13:50:0b:c6:a4:e0:8e:
                    ae:c5:d5:9c:13:76:8d:42:62:87:2a:29:f9:96:7a:
                    ef:ea:5e:fe:22:02:9b:4e:60:bf:34:db:43:f3:a7:
                    04:b5:fd:57:76:01:99:94:9a:84:76:61:6d:fa:37:
                    64:93:06:35:9c:2e:fe:93:89:b0:ba:ec:b0:cf:66:
                    a5:b0:48:54:a9:d9:c6:45:af:d0:be:41:f3:24:79:
                    be:e7:fa:f8:e2:46:a0:c7:00:46:6d:cf:cf:fe:71:
                    e6:5b:ae:51:a4:cd:6b:e6:b0:5b:4e:29:e5:1f:97:
                    f7:54:47:e2:06:70:2f:fb:08:a3:44:c2:89:2f:b3:
                    6f:59:a2:92:b9:4e:b8:77:c0:29:3d:3a:e2:c2:4b:
                    1f:f7:2e:80:16:07:22:81:4c:c3:39:c6:a4:2f:ff:
                    e2:b0:20:cc:69:b5:64:f0:2b:59:5b:b4:da:8d:23:
                    e6:ff:8d:87:70:80:77:37:14:8c:e6:a9:4d:0a:28:
                    59:5f:77:2a:09:42:54:02:a1:cd:4c:05:89:14:e3:
                    85:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F0:AE:87:5B:A7:C2:A2:5C:42:A1:87:C9:13:FE:E9:B9:E2:7A:EF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B301869A276011EC9237AB73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.253.12.0/24
                  123.253.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:34:25:d6:02:41:6f:e1:66:8c:07:75:6e:06:f2:88:40:b7:
         ed:51:8d:07:da:48:1a:ab:c3:b1:d6:33:05:7d:6a:fa:19:ab:
         c8:56:6a:68:ee:58:37:f7:4c:c3:80:b9:e2:05:18:33:de:5e:
         cc:c5:80:83:72:67:a4:41:1b:37:1a:63:f3:54:21:9d:ff:46:
         77:a7:2f:97:23:f9:63:4d:a3:b2:fc:86:62:78:a5:18:7c:f5:
         0f:6c:c6:2d:60:12:67:4a:42:55:29:b7:7d:c5:74:55:cc:3b:
         22:4a:50:de:d9:20:93:4f:65:54:d3:9e:ca:04:f8:b1:29:eb:
         2e:98:af:f0:fe:25:0a:cc:07:7a:a1:c4:4c:ed:a2:24:6e:c3:
         a3:99:17:ae:d1:10:5c:8e:2a:6b:1b:15:be:1a:f4:9f:56:e9:
         95:de:9f:71:1d:d2:13:8a:9f:77:56:a9:5b:64:e9:12:81:0a:
         13:14:08:4c:bf:8f:5b:5a:23:f3:b8:96:f2:f6:6a:a9:b8:a8:
         d8:c0:92:e9:ac:bc:dc:b1:e4:7e:63:00:20:fb:6d:aa:b5:86:
         12:e8:d2:ac:9c:97:24:1b:ed:1a:dc:44:a4:03:76:42:8d:b5:
         42:43:64:06:42:9a:f5:9e:50:82:34:48:5a:9a:f4:16:96:25:
         af:6e:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:52 2026 by rpki-client